mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-28 05:46:36 +08:00
ryan
ae5345c03e
- Support openresty_default_limit_req_per_ip in system_configs. - Add limit_req and limit_req_status 429 directive generation in openresty renderer. - Implement route-level limit_req_per_ip override and explicit disable. - Add frontend UI inputs and validation in rate limits tab config. - Update swagger API docs and changelog for v3.4.3-beta.3.
108 lines
5.0 KiB
Go
108 lines
5.0 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package model
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/Rain-kl/Wavelet/internal/db"
|
|
)
|
|
|
|
// ProxyRoute OpenFlare 代理规则实体。
|
|
// 域名与证书仅通过 of_zone_domains 关联，不再持久化在本表。
|
|
type ProxyRoute struct {
|
|
ID uint `json:"id" gorm:"primaryKey;autoIncrement"`
|
|
SiteName string `json:"site_name" gorm:"size:255;not null;default:''"`
|
|
OriginID *uint `json:"origin_id" gorm:"index"`
|
|
OriginURL string `json:"origin_url" gorm:"size:2048;not null"`
|
|
OriginHost string `json:"origin_host" gorm:"size:255"`
|
|
Upstreams string `json:"upstreams" gorm:"type:text;not null;default:'[]'"`
|
|
Enabled bool `json:"enabled" gorm:"not null;default:true"`
|
|
EnableHTTPS bool `json:"enable_https" gorm:"column:enable_https;not null;default:false"`
|
|
RedirectHTTP bool `json:"redirect_http" gorm:"not null;default:false"`
|
|
LimitConnPerServer int `json:"limit_conn_per_server" gorm:"not null;default:0"`
|
|
LimitConnPerIP int `json:"limit_conn_per_ip" gorm:"not null;default:0"`
|
|
LimitRate string `json:"limit_rate" gorm:"size:32;not null;default:''"`
|
|
LimitReqPerIP string `json:"limit_req_per_ip" gorm:"size:32;not null;default:''"`
|
|
CacheEnabled bool `json:"cache_enabled" gorm:"not null;default:false"`
|
|
CachePolicy string `json:"cache_policy" gorm:"size:32;not null;default:''"`
|
|
CacheRules string `json:"cache_rules" gorm:"type:text;not null;default:'[]'"`
|
|
CustomHeaders string `json:"custom_headers" gorm:"type:text;not null;default:'[]'"`
|
|
BasicAuthEnabled bool `json:"basic_auth_enabled" gorm:"not null;default:false"`
|
|
BasicAuthUsername string `json:"basic_auth_username" gorm:"size:255;not null;default:''"`
|
|
BasicAuthPassword string `json:"basic_auth_password" gorm:"size:255;not null;default:''"`
|
|
UpstreamType string `json:"upstream_type" gorm:"size:32;not null;default:'direct'"`
|
|
TunnelNodeID *uint `json:"tunnel_node_id" gorm:"index"`
|
|
TunnelTargetAddr string `json:"tunnel_target_addr" gorm:"size:512"`
|
|
TunnelTargetProtocol string `json:"tunnel_target_protocol" gorm:"size:16"`
|
|
PagesProjectID *uint `json:"pages_project_id" gorm:"index"`
|
|
CreatedAt time.Time `json:"created_at" gorm:"autoCreateTime"`
|
|
UpdatedAt time.Time `json:"updated_at" gorm:"autoUpdateTime"`
|
|
ZoneDomains []ZoneDomain `json:"zone_domains,omitempty" gorm:"foreignKey:ProxyRouteID"`
|
|
}
|
|
|
|
// TableName 表名。
|
|
func (ProxyRoute) TableName() string {
|
|
return tableOfProxyRoutes
|
|
}
|
|
|
|
// ListProxyRoutes 列出全部代理规则。
|
|
func ListProxyRoutes(ctx context.Context) ([]*ProxyRoute, error) {
|
|
var routes []*ProxyRoute
|
|
if err := db.DB(ctx).Order("id desc").Find(&routes).Error; err != nil {
|
|
return nil, err
|
|
}
|
|
return routes, nil
|
|
}
|
|
|
|
// GetProxyRouteByID 按 ID 查询代理规则。
|
|
func GetProxyRouteByID(ctx context.Context, id uint) (*ProxyRoute, error) {
|
|
var route ProxyRoute
|
|
if err := db.DB(ctx).First(&route, id).Error; err != nil {
|
|
return nil, err
|
|
}
|
|
return &route, nil
|
|
}
|
|
|
|
// CreateProxyRouteRecord 创建代理规则。
|
|
func CreateProxyRouteRecord(ctx context.Context, route *ProxyRoute) error {
|
|
return db.DB(ctx).Create(route).Error
|
|
}
|
|
|
|
// UpdateProxyRouteRecord 更新代理规则。
|
|
func UpdateProxyRouteRecord(ctx context.Context, route *ProxyRoute) error {
|
|
return db.DB(ctx).Model(&ProxyRoute{}).Where("id = ?", route.ID).Updates(map[string]any{
|
|
"site_name": route.SiteName,
|
|
"origin_id": route.OriginID,
|
|
"origin_url": route.OriginURL,
|
|
"origin_host": route.OriginHost,
|
|
"upstreams": route.Upstreams,
|
|
colEnabled: route.Enabled,
|
|
"enable_https": route.EnableHTTPS,
|
|
"redirect_http": route.RedirectHTTP,
|
|
"limit_conn_per_server": route.LimitConnPerServer,
|
|
"limit_conn_per_ip": route.LimitConnPerIP,
|
|
"limit_rate": route.LimitRate,
|
|
"limit_req_per_ip": route.LimitReqPerIP,
|
|
"cache_enabled": route.CacheEnabled,
|
|
"cache_policy": route.CachePolicy,
|
|
"cache_rules": route.CacheRules,
|
|
"custom_headers": route.CustomHeaders,
|
|
"basic_auth_enabled": route.BasicAuthEnabled,
|
|
"basic_auth_username": route.BasicAuthUsername,
|
|
"basic_auth_password": route.BasicAuthPassword,
|
|
"upstream_type": route.UpstreamType,
|
|
"tunnel_node_id": route.TunnelNodeID,
|
|
"tunnel_target_addr": route.TunnelTargetAddr,
|
|
"tunnel_target_protocol": route.TunnelTargetProtocol,
|
|
"pages_project_id": route.PagesProjectID,
|
|
}).Error
|
|
}
|
|
|
|
// DeleteProxyRouteRecord 删除代理规则。
|
|
func DeleteProxyRouteRecord(ctx context.Context, id uint) error {
|
|
return db.DB(ctx).Delete(&ProxyRoute{}, id).Error
|
|
}
|