zydronium/getnamingo-registry
1
0
Fork 0
mirror of https://github.com/getnamingo/registry.git synced 2025-08-06 01:25:00 +02:00
Code Issues Projects Releases Packages Wiki Activity

Added optional rate limiting for services

Browse source
This commit is contained in:
Pinga 2024-03-01 10:54:46 +02:00
parent b0f63ffb25
commit b3113da4f4
15 changed files with 110 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

23
das/start_das.php
View file

@ -5,6 +5,7 @@ if (!extension_loaded('swoole')) {
}
use Swoole\Server;
use Namingo\Rately\Rately;
$c = require_once 'config.php';
require_once 'helpers.php';
@ -43,6 +44,8 @@ $server->set([
'open_eof_check' => true,
'package_eof' => "\r\n"
]);
$rateLimiter = new Rately();
$log->info('server started.');
// Register a callback to handle incoming connections
@ -51,21 +54,35 @@ $server->on('connect', function ($server, $fd) use ($log) {
});
// Register a callback to handle incoming requests
$server->on('receive', function ($server, $fd, $reactorId, $data) use ($c, $pool, $log) {
$server->on('receive', function ($server, $fd, $reactorId, $data) use ($c, $pool, $log, $rateLimiter) {
// Get a PDO connection from the pool
$pdo = $pool->get();
$domain = trim($data);
$clientInfo = $server->getClientInfo($fd);
$remoteAddr = $clientInfo['remote_ip'];
if (!isIpWhitelisted($remoteAddr, $pdo)) {
if (($c['rately'] == true) && ($rateLimiter->isRateLimited('das', $remoteAddr, $c['limit'], $c['period']))) {
$log->error('rate limit exceeded for ' . $remoteAddr);
$server->send($fd, "rate limit exceeded. Please try again later");
$server->close($fd);
return;
}
}
// Perform the DAS lookup
try {
// Validate and sanitize the domain name
if (!$domain) {
$server->send($fd, "2");
$server->close($fd);
return;
}
if (strlen($domain) > 68) {
$server->send($fd, "2");
$server->close($fd);
return;
}
// Convert to Punycode if the domain is not in ASCII
if (!mb_detect_encoding($domain, 'ASCII', true)) {
@ -73,6 +90,7 @@ $server->on('receive', function ($server, $fd, $reactorId, $data) use ($c, $pool
if ($convertedDomain === false) {
$server->send($fd, "2");
$server->close($fd);
return;
} else {
$domain = $convertedDomain;
}
@ -80,6 +98,7 @@ $server->on('receive', function ($server, $fd, $reactorId, $data) use ($c, $pool
if (!preg_match('/^(?:(xn--[a-zA-Z0-9-]{1,63}|[a-zA-Z0-9-]{1,63})\.){1,3}(xn--[a-zA-Z0-9-]{2,63}|[a-zA-Z]{2,63})$/', $domain)) {
$server->send($fd, "2");
$server->close($fd);
return;
}
$domain = strtoupper($domain);
@ -171,7 +190,7 @@ $server->on('receive', function ($server, $fd, $reactorId, $data) use ($c, $pool
// Register a callback to handle client disconnections
$server->on('close', function ($server, $fd) use ($log) {
$log->info('client ' . $fd . ' connected.');
$log->info('client ' . $fd . ' disconnected.');
});
// Start the server