mirror of
https://github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin.git
synced 2026-07-21 11:38:59 +02:00
94 lines
2.2 KiB
Go
94 lines
2.2 KiB
Go
package cache
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
ttl_map "github.com/leprosus/golang-ttl-map"
|
|
|
|
logger "github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin/pkg/logger"
|
|
simpleredis "github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin/pkg/redis"
|
|
)
|
|
|
|
const (
|
|
cacheBannedValue = "t"
|
|
cacheNoBannedValue = "f"
|
|
)
|
|
|
|
var cache = ttl_map.New()
|
|
var redis simpleredis.SimpleRedis
|
|
|
|
var redisEnabled = false
|
|
|
|
func getDecisionLocalCache(clientIP string) (bool, error) {
|
|
banned, isCached := cache.Get(clientIP)
|
|
bannedString, isValid := banned.(string)
|
|
if isCached && isValid && len(bannedString) > 0 {
|
|
return bannedString == cacheBannedValue, nil
|
|
}
|
|
return false, fmt.Errorf("no cache data")
|
|
}
|
|
|
|
func setDecisionLocalCache(clientIP string, value string, duration int64) {
|
|
cache.Set(clientIP, value, duration)
|
|
}
|
|
|
|
func deleteDecisionLocalCache(clientIP string) {
|
|
cache.Del(clientIP)
|
|
}
|
|
|
|
func getDecisionRedisCache(clientIP string) (bool, error) {
|
|
banned, err := redis.Get(clientIP)
|
|
bannedString := string(banned)
|
|
if err == nil && len(bannedString) > 0 {
|
|
return bannedString == cacheBannedValue, nil
|
|
}
|
|
return false, fmt.Errorf("no cache data")
|
|
}
|
|
|
|
func setDecisionRedisCache(clientIP string, value string, duration int64) {
|
|
redis.Set(clientIP, []byte(value), duration)
|
|
}
|
|
|
|
func deleteDecisionRedisCache(clientIP string) {
|
|
redis.Del(clientIP)
|
|
}
|
|
|
|
func DeleteDecision(clientIP string) {
|
|
if redisEnabled {
|
|
deleteDecisionRedisCache(clientIP)
|
|
} else {
|
|
deleteDecisionLocalCache(clientIP)
|
|
}
|
|
}
|
|
|
|
// GetDecision check in the cache if the IP has the banned / not banned value.
|
|
// Otherwise return with an error to add the IP in cache if we are on.
|
|
func GetDecision(clientIP string) (bool, error) {
|
|
if redisEnabled {
|
|
return getDecisionRedisCache(clientIP)
|
|
} else {
|
|
return getDecisionLocalCache(clientIP)
|
|
}
|
|
}
|
|
|
|
func SetDecision(clientIP string, isBanned bool, duration int64) {
|
|
var value string
|
|
if isBanned {
|
|
logger.Debug(fmt.Sprintf("%v banned", clientIP))
|
|
value = cacheBannedValue
|
|
} else {
|
|
value = cacheNoBannedValue
|
|
}
|
|
if redisEnabled {
|
|
setDecisionRedisCache(clientIP, value, duration)
|
|
} else {
|
|
setDecisionLocalCache(clientIP, value, duration)
|
|
}
|
|
}
|
|
|
|
func InitRedisClient(host string) {
|
|
redisEnabled = true
|
|
redis.Init(host)
|
|
logger.Debug("connect to redis")
|
|
}
|