-
Notifications
You must be signed in to change notification settings - Fork 460
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
refactor dispatch new func startRelayPull securityMaxSubSessionPerIp …
…securityMaxSubDurationSec
- Loading branch information
1 parent
d0c084c
commit 8bd4a50
Showing
3 changed files
with
105 additions
and
82 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,80 @@ | ||
| // Copyright 2024, Chef. All rights reserved. | ||
| // https://github.com/q191201771/lal | ||
| // | ||
| // Use of this source code is governed by a MIT-style license | ||
| // that can be found in the License file. | ||
| // | ||
| // Author: Chef (191201771@qq.com) | ||
|
|
||
| package main | ||
|
|
||
| import ( | ||
| "github.com/q191201771/lal/pkg/base" | ||
| "github.com/q191201771/naza/pkg/nazalog" | ||
| "net" | ||
| "time" | ||
| ) | ||
|
|
||
| func securityMaxSubSessionPerIp(info base.UpdateInfo) { | ||
| if config.MaxSubSessionPerIp > 0 { | ||
| ip2SubSessions := make(map[string][]base.StatSub) | ||
| sessionId2StreamName := make(map[string]string) | ||
| for _, g := range info.Groups { | ||
| for _, sub := range g.StatSubs { | ||
| host, _, err := net.SplitHostPort(sub.RemoteAddr) | ||
| if err != nil { | ||
| nazalog.Warnf("split host port failed. remote addr=%s", sub.RemoteAddr) | ||
| continue | ||
| } | ||
| ip2SubSessions[host] = append(ip2SubSessions[host], sub) | ||
| sessionId2StreamName[sub.SessionId] = g.StreamName | ||
| } | ||
| } | ||
| for ip, subs := range ip2SubSessions { | ||
| if len(subs) > config.MaxSubSessionPerIp { | ||
| nazalog.Debugf("close session. ip=%s, session count=%d", ip, len(subs)) | ||
| for _, sub := range subs { | ||
| if sub.Protocol == base.SessionProtocolHlsStr { | ||
| host, _, err := net.SplitHostPort(sub.RemoteAddr) | ||
| if err != nil { | ||
| nazalog.Warnf("split host port failed. remote addr=%s", sub.RemoteAddr) | ||
| continue | ||
| } | ||
| addIpBlacklist(info.ServerId, host, 60) | ||
| } else { | ||
| kickSession(info.ServerId, sessionId2StreamName[sub.SessionId], sub.SessionId) | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
|
|
||
| func securityMaxSubDurationSec(info base.UpdateInfo) { | ||
| if config.MaxSubDurationSec > 0 { | ||
| now := time.Now() | ||
| for _, g := range info.Groups { | ||
| for _, sub := range g.StatSubs { | ||
| st, err := base.ParseReadableTime(sub.StartTime) | ||
| if err != nil { | ||
| nazalog.Warnf("parse readable time failed. start time=%s, err=%+v", sub.StartTime, err) | ||
| continue | ||
| } | ||
| diff := int(now.Sub(st).Seconds()) | ||
| if diff > config.MaxSubDurationSec { | ||
| nazalog.Infof("close session. sub session start time=%s, diff=%d", sub.StartTime, diff) | ||
| if sub.Protocol == base.SessionProtocolHlsStr { | ||
| host, _, err := net.SplitHostPort(sub.RemoteAddr) | ||
| if err != nil { | ||
| nazalog.Warnf("split host port failed. remote addr=%s", sub.RemoteAddr) | ||
| continue | ||
| } | ||
| addIpBlacklist(info.ServerId, host, 60) | ||
| } else { | ||
| kickSession(info.ServerId, g.StreamName, sub.SessionId) | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters