mirror of
https://github.com/gravitational/teleport.git
synced 2026-10-31 20:39:37 +08:00
rosstimothy
e4e7f538ce
* create package to contain proxy peering code * Refactor proxy routing logic into a reusable object Routing logic existed within an unexported handler of ssh subsystem requests, which prevented it from being reused by other components within the proxy, like the webapi server. This causes significant latency issues for web sessions because the web apiserver is required to dial the proxy ssh server to determine how to route to the host. Since the web apiserver and the proxy ssh server exist in the same process this is an entirely unnecesarry step that could be avoided if the routing and ability to established connections were shared throughout the proxy. A new `proxy.Router` object is introduced which contains all the logic that used to exist in `regular.proxySubsys` for determining how to connect to servers and clusters. All routing within the `regular.proxySubsys` now leverages the `proxy.Router` to dial the target. This is step 1 in addressing #15167. Now that the `proxy.Router` exists `web.APIServer` will be able to make use of it to avoid dialing the same process to establish connections.
57 lines
1.7 KiB
Go
57 lines
1.7 KiB
Go
// Copyright 2022 Gravitational, Inc
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package clusterdial
|
|
|
|
import (
|
|
"net"
|
|
|
|
"github.com/gravitational/trace"
|
|
|
|
"github.com/gravitational/teleport/lib/proxy/peer"
|
|
"github.com/gravitational/teleport/lib/reversetunnel"
|
|
)
|
|
|
|
// ClusterDialerFunc is a function that implements a peer.ClusterDialer.
|
|
type ClusterDialerFunc func(clusterName string, request peer.DialParams) (net.Conn, error)
|
|
|
|
// Dial dials makes a dial request to the given cluster.
|
|
func (f ClusterDialerFunc) Dial(clusterName string, request peer.DialParams) (net.Conn, error) {
|
|
return f(clusterName, request)
|
|
}
|
|
|
|
// NewClusterDialer implements proxy.ClusterDialer for a reverse tunnel server.
|
|
func NewClusterDialer(server reversetunnel.Server) ClusterDialerFunc {
|
|
return func(clusterName string, request peer.DialParams) (net.Conn, error) {
|
|
site, err := server.GetSite(clusterName)
|
|
if err != nil {
|
|
return nil, trace.Wrap(err)
|
|
}
|
|
|
|
dialParams := reversetunnel.DialParams{
|
|
ServerID: request.ServerID,
|
|
ConnType: request.ConnType,
|
|
From: request.From,
|
|
To: request.To,
|
|
FromPeerProxy: true,
|
|
}
|
|
|
|
conn, err := site.Dial(dialParams)
|
|
if err != nil {
|
|
return nil, trace.Wrap(err)
|
|
}
|
|
return conn, nil
|
|
}
|
|
}
|