mirror of
https://gitee.com/samwaf/SamWaf.git
synced 2026-11-01 18:51:45 +08:00
401 lines
12 KiB
Go
401 lines
12 KiB
Go
package api
|
|
|
|
import (
|
|
"SamWaf/enums"
|
|
"SamWaf/global"
|
|
"SamWaf/globalobj"
|
|
"SamWaf/innerbean"
|
|
"SamWaf/model"
|
|
"SamWaf/model/common/response"
|
|
"SamWaf/model/request"
|
|
response2 "SamWaf/model/response"
|
|
"SamWaf/model/spec"
|
|
"SamWaf/model/wafenginmodel"
|
|
"SamWaf/service/waf_service"
|
|
"SamWaf/utils"
|
|
"SamWaf/wafenginecore"
|
|
"errors"
|
|
"fmt"
|
|
"github.com/gin-gonic/gin"
|
|
"gorm.io/gorm"
|
|
"strconv"
|
|
"strings"
|
|
)
|
|
|
|
type WafHostAPi struct {
|
|
}
|
|
|
|
func (w *WafHostAPi) AddApi(c *gin.Context) {
|
|
var req request.WafHostAddReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
//端口从未在本系统加过，检测端口是否被其他应用占用
|
|
_, svrOk := globalobj.GWAF_RUNTIME_OBJ_WAF_ENGINE.ServerOnline.Get(req.Port)
|
|
if !svrOk && utils.PortCheck(req.Port) == false {
|
|
//发送websocket 推送消息
|
|
global.GQEQUE_MESSAGE_DB.Enqueue(innerbean.OpResultMessageInfo{
|
|
BaseMessageInfo: innerbean.BaseMessageInfo{OperaType: "提示信息", Server: global.GWAF_CUSTOM_SERVER_NAME},
|
|
Msg: "端口被其他应用占用不能使用,如果使用的宝塔请在Samwaf系统管理-一键修改进行操作",
|
|
Success: "true",
|
|
})
|
|
//return
|
|
req.START_STATUS = 1 //设置成不能启动
|
|
}
|
|
err = wafHostService.CheckIsExistApi(req)
|
|
if err != nil && errors.Is(err, gorm.ErrRecordNotFound) {
|
|
hostCode, err := wafHostService.AddApi(req)
|
|
if err == nil {
|
|
w.NotifyWaf(hostCode, nil)
|
|
response.OkWithDetailed(hostCode, "添加成功", c)
|
|
} else {
|
|
|
|
response.FailWithMessage("添加失败", c)
|
|
}
|
|
return
|
|
} else {
|
|
response.FailWithMessage("当前网站和端口已经存在", c)
|
|
return
|
|
}
|
|
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
|
|
// BatchCopyConfigApi 批量复制配置API
|
|
func (w *WafHostAPi) BatchCopyConfigApi(c *gin.Context) {
|
|
var req request.WafHostBatchCopyConfigReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
// 验证源主机是否存在
|
|
sourceHost := wafHostService.GetDetailByCodeApi(req.SourceHostCode)
|
|
if sourceHost.Code == "" {
|
|
response.FailWithMessage("源主机不存在", c)
|
|
return
|
|
}
|
|
|
|
// 验证目标主机是否存在
|
|
targetHost := wafHostService.GetDetailByCodeApi(req.TargetHostCode)
|
|
if targetHost.Code == "" {
|
|
response.FailWithMessage("目标主机 "+req.TargetHostCode+" 不存在", c)
|
|
return
|
|
}
|
|
|
|
// 执行配置复制
|
|
err = wafHostService.CopyConfigApi(req)
|
|
if err != nil {
|
|
response.FailWithMessage("复制配置失败: "+err.Error(), c)
|
|
return
|
|
}
|
|
|
|
// 通知WAF引擎更新配置
|
|
global.GWAF_CHAN_HOST <- targetHost
|
|
|
|
response.OkWithMessage("复制配置成功", c)
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
func (w *WafHostAPi) GetDetailApi(c *gin.Context) {
|
|
var req request.WafHostDetailReq
|
|
err := c.ShouldBind(&req)
|
|
if err == nil {
|
|
wafHost := wafHostService.GetDetailApi(req)
|
|
response.OkWithDetailed(wafHost, "获取成功", c)
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
func (w *WafHostAPi) GetListApi(c *gin.Context) {
|
|
var req request.WafHostSearchReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
wafHosts, total, _ := wafHostService.GetListApi(req)
|
|
// 初始化返回结果列表
|
|
var repList []response2.HostRep
|
|
for _, srcHost := range wafHosts {
|
|
var healthy []wafenginmodel.HostHealthy
|
|
if srcHost.IsEnableLoadBalance == 0 {
|
|
backendHealthy := wafenginecore.GetBackendHealthy(srcHost.Code, "single")
|
|
if backendHealthy != nil {
|
|
healthy = append(healthy, *backendHealthy)
|
|
}
|
|
} else {
|
|
//获取负载信息
|
|
loadBalances := waf_service.WafLoadBalanceServiceApp.GetListByHostCodeApi(srcHost.Code)
|
|
// 检查每个后端服务器
|
|
for i, _ := range loadBalances {
|
|
backendHealthy := wafenginecore.GetBackendHealthy(srcHost.Code, strconv.Itoa(i))
|
|
if backendHealthy != nil {
|
|
healthy = append(healthy, *backendHealthy)
|
|
}
|
|
}
|
|
}
|
|
rep := response2.HostRep{
|
|
Hosts: srcHost,
|
|
RealTimeConnectCnt: wafenginecore.GetActiveConnectCnt(srcHost.Code),
|
|
RealTimeQps: wafenginecore.GetQPS(srcHost.Code),
|
|
HealthyStatus: healthy,
|
|
}
|
|
repList = append(repList, rep)
|
|
}
|
|
response.OkWithDetailed(response.PageResult{
|
|
List: repList,
|
|
Total: total,
|
|
PageIndex: req.PageIndex,
|
|
PageSize: req.PageSize,
|
|
}, "获取成功", c)
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
func (w *WafHostAPi) GetAllListApi(c *gin.Context) {
|
|
wafHosts := wafHostService.GetAllHostApi()
|
|
allHostRep := make([]response2.AllHostRep, len(wafHosts)) // 创建数组
|
|
for i, _ := range wafHosts {
|
|
var hostDisplay string
|
|
var preHost string = fmt.Sprintf("%s:%d", wafHosts[i].Host, wafHosts[i].Port)
|
|
|
|
// 构建括号内的内容
|
|
var bracketContent []string
|
|
|
|
// 如果是SSL，添加SSL标识
|
|
if wafHosts[i].Ssl == 1 {
|
|
bracketContent = append(bracketContent, "SSL")
|
|
}
|
|
|
|
// 如果有备注，添加备注
|
|
if wafHosts[i].REMARKS != "" {
|
|
bracketContent = append(bracketContent, wafHosts[i].REMARKS)
|
|
}
|
|
|
|
// 构建最终的Host显示字符串
|
|
if len(bracketContent) > 0 {
|
|
hostDisplay = fmt.Sprintf("%s:%d(%s)", wafHosts[i].Host, wafHosts[i].Port, strings.Join(bracketContent, ","))
|
|
} else {
|
|
hostDisplay = fmt.Sprintf("%s:%d", wafHosts[i].Host, wafHosts[i].Port)
|
|
}
|
|
|
|
allHostRep[i] = response2.AllHostRep{
|
|
Host: hostDisplay,
|
|
Code: wafHosts[i].Code,
|
|
PreHost: preHost,
|
|
}
|
|
}
|
|
response.OkWithDetailed(allHostRep, "获取成功", c)
|
|
}
|
|
|
|
// GetDomainsByHostCodeApi 通过主机code获取所有关联的域名信息
|
|
func (w *WafHostAPi) GetDomainsByHostCodeApi(c *gin.Context) {
|
|
var req request.WafHostAllDomainsReq
|
|
err := c.ShouldBind(&req)
|
|
if err == nil {
|
|
if req.CODE == "" {
|
|
response.FailWithMessage("请传入正确的主机信息", c)
|
|
return
|
|
}
|
|
wafHostBean := wafHostService.GetDetailByCodeApi(req.CODE)
|
|
if wafHostBean.Code == "" {
|
|
response.FailWithMessage("未找到该主机信息", c)
|
|
return
|
|
}
|
|
allHostRep := make([]response2.AllDomainRep, 0) // 创建数组
|
|
|
|
allHostRep = append(allHostRep, response2.AllDomainRep{
|
|
Host: fmt.Sprintf("%s", wafHostBean.Host),
|
|
Code: req.CODE,
|
|
})
|
|
//如果存在一个主机绑定了多个域名的情况
|
|
if wafHostBean.BindMoreHost != "" {
|
|
lines := strings.Split(wafHostBean.BindMoreHost, "\n")
|
|
for _, line := range lines {
|
|
allHostRep = append(allHostRep, response2.AllDomainRep{
|
|
Host: fmt.Sprintf("%s", line),
|
|
Code: req.CODE,
|
|
})
|
|
}
|
|
}
|
|
response.OkWithDetailed(allHostRep, "获取成功", c)
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
|
|
}
|
|
func (w *WafHostAPi) DelHostApi(c *gin.Context) {
|
|
var req request.WafHostDelReq
|
|
err := c.ShouldBind(&req)
|
|
if err == nil {
|
|
host, err := wafHostService.DelHostApi(req)
|
|
if err != nil && errors.Is(err, gorm.ErrRecordNotFound) {
|
|
response.FailWithMessage("请检测参数", c)
|
|
} else if err != nil {
|
|
response.FailWithMessage("发生错误", c)
|
|
} else {
|
|
w.NotifyDelWaf(host)
|
|
response.OkWithMessage("删除成功", c)
|
|
}
|
|
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
|
|
func (w *WafHostAPi) ModifyHostApi(c *gin.Context) {
|
|
var req request.WafHostEditReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
wafHostOld := wafHostService.GetDetailByCodeApi(req.CODE)
|
|
//端口从未在本系统加过，检测端口是否被其他应用占用
|
|
|
|
_, svrOk := globalobj.GWAF_RUNTIME_OBJ_WAF_ENGINE.ServerOnline.Get(req.Port)
|
|
if !svrOk && utils.PortCheck(req.Port) == false {
|
|
//发送websocket 推送消息
|
|
global.GQEQUE_MESSAGE_DB.Enqueue(innerbean.OpResultMessageInfo{
|
|
BaseMessageInfo: innerbean.BaseMessageInfo{OperaType: "提示信息", Server: global.GWAF_CUSTOM_SERVER_NAME},
|
|
Msg: "端口被其他应用占用不能使用,如果使用的宝塔请在Samwaf系统管理-一键修改进行操作",
|
|
Success: "true",
|
|
})
|
|
req.START_STATUS = 1 //设置成不能启动
|
|
}
|
|
err = wafHostService.ModifyApi(req)
|
|
if err != nil {
|
|
response.FailWithMessage("编辑发生错误", c)
|
|
} else {
|
|
w.NotifyWaf(req.CODE, wafHostOld)
|
|
response.OkWithMessage("编辑成功", c)
|
|
}
|
|
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
func (w *WafHostAPi) ModifyGuardStatusApi(c *gin.Context) {
|
|
var req request.WafHostGuardStatusReq
|
|
err := c.ShouldBind(&req)
|
|
if err == nil {
|
|
err = wafHostService.ModifyGuardStatusApi(req)
|
|
if err != nil {
|
|
response.FailWithMessage("更新状态发生错误", c)
|
|
} else {
|
|
wafHost := wafHostService.GetDetailByCodeApi(req.CODE)
|
|
//发送状态改变通知
|
|
global.GWAF_CHAN_HOST <- wafHost
|
|
response.OkWithMessage("状态更新成功", c)
|
|
}
|
|
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
|
|
// 修改批量修改防御状态的API
|
|
func (w *WafHostAPi) ModifyAllGuardStatusApi(c *gin.Context) {
|
|
var req request.WafHostBatchGuardStatusReq
|
|
err := c.ShouldBindJSON(&req)
|
|
if err == nil {
|
|
// 获取需要变更状态的主机（当前状态与目标状态不同的主机）
|
|
hostsToUpdate := wafHostService.GetHostsByGuardStatus(1 - req.GUARD_STATUS)
|
|
|
|
if len(hostsToUpdate) == 0 {
|
|
// 如果没有需要更新的主机，直接返回成功
|
|
message := "所有主机已经是"
|
|
if req.GUARD_STATUS == 1 {
|
|
message += "开启防御状态"
|
|
} else {
|
|
message += "关闭防御状态"
|
|
}
|
|
response.FailWithMessage(message, c)
|
|
return
|
|
}
|
|
|
|
err = wafHostService.ModifyAllGuardStatusApi(req)
|
|
if err != nil {
|
|
response.FailWithMessage("批量更新防御状态发生错误", c)
|
|
return
|
|
} else {
|
|
// 只通知需要变更状态的主机
|
|
for _, host := range hostsToUpdate {
|
|
// 更新主机的防御状态
|
|
host.GUARD_STATUS = req.GUARD_STATUS
|
|
global.GWAF_CHAN_HOST <- host
|
|
}
|
|
|
|
// 根据操作类型返回不同的成功消息
|
|
message := "批量开启防御成功"
|
|
if req.GUARD_STATUS == 0 {
|
|
message = "批量关闭防御成功"
|
|
}
|
|
|
|
response.OkWithMessage(message, c)
|
|
}
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
|
|
/*
|
|
*
|
|
修改启动状态
|
|
*/
|
|
func (w *WafHostAPi) ModifyStartStatusApi(c *gin.Context) {
|
|
var req request.WafHostStartStatusReq
|
|
err := c.ShouldBind(&req)
|
|
if err == nil {
|
|
wafHostOld := wafHostService.GetDetailByCodeApi(req.CODE)
|
|
|
|
_, svrOk := globalobj.GWAF_RUNTIME_OBJ_WAF_ENGINE.ServerOnline.Get(wafHostOld.Port)
|
|
|
|
if req.START_STATUS == 0 && !svrOk && utils.PortCheck(wafHostOld.Port) == false {
|
|
//发送websocket 推送消息
|
|
global.GQEQUE_MESSAGE_DB.Enqueue(innerbean.OpResultMessageInfo{
|
|
BaseMessageInfo: innerbean.BaseMessageInfo{OperaType: "提示信息", Server: global.GWAF_CUSTOM_SERVER_NAME},
|
|
Msg: "端口被其他应用占用不能使用,如果使用的宝塔请在Samwaf系统管理-一键修改进行操作",
|
|
Success: "true",
|
|
})
|
|
response.FailWithMessage("端口被其他应用占用不能开启", c)
|
|
return
|
|
} else {
|
|
err = wafHostService.ModifyStartStatusApi(req)
|
|
if err != nil {
|
|
response.FailWithMessage("更新状态发生错误", c)
|
|
} else {
|
|
//发送状态改变通知
|
|
w.NotifyWaf(req.CODE, wafHostOld)
|
|
response.OkWithMessage("状态更新成功", c)
|
|
}
|
|
}
|
|
|
|
} else {
|
|
response.FailWithMessage("解析失败", c)
|
|
}
|
|
}
|
|
|
|
/*
|
|
*
|
|
通知到waf引擎实时生效
|
|
*/
|
|
func (w *WafHostAPi) NotifyWaf(hostCode string, oldHostInterface interface{}) {
|
|
|
|
var hosts []model.Hosts
|
|
global.GWAF_LOCAL_DB.Where("code = ? ", hostCode).Find(&hosts)
|
|
var chanInfo = spec.ChanCommonHost{
|
|
HostCode: hostCode,
|
|
Type: enums.ChanTypeHost,
|
|
Content: hosts,
|
|
OldContent: oldHostInterface,
|
|
}
|
|
global.GWAF_CHAN_MSG <- chanInfo
|
|
}
|
|
|
|
func (w *WafHostAPi) NotifyDelWaf(hosts model.Hosts) {
|
|
//1.如果这个port里面没有了主机 那可以直接停掉服务
|
|
//2.除了第一个情况之外的，把所有他的主机信息和关联信息都干掉
|
|
|
|
var chanInfo = spec.ChanCommonHost{
|
|
HostCode: hosts.Code,
|
|
Type: enums.ChanTypeDelHost,
|
|
Content: hosts,
|
|
}
|
|
global.GWAF_CHAN_MSG <- chanInfo
|
|
}
|