mirror of
https://gitee.com/samwaf/SamWaf.git
synced 2025-12-06 06:58:54 +08:00
381 lines
14 KiB
Go
381 lines
14 KiB
Go
package waf_service
|
|
|
|
import (
|
|
"SamWaf/common/uuid"
|
|
"SamWaf/common/validfield"
|
|
"SamWaf/customtype"
|
|
"SamWaf/global"
|
|
"SamWaf/model"
|
|
"SamWaf/model/baseorm"
|
|
"SamWaf/model/request"
|
|
"errors"
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
type WafHostService struct{}
|
|
|
|
var WafHostServiceApp = new(WafHostService)
|
|
|
|
func (receiver *WafHostService) AddApi(wafHostAddReq request.WafHostAddReq) (string, error) {
|
|
uniCode := ""
|
|
if wafHostAddReq.Code == "" {
|
|
uniCode = uuid.GenUUID()
|
|
} else {
|
|
uniCode = wafHostAddReq.Code
|
|
}
|
|
var wafHost = &model.Hosts{
|
|
BaseOrm: baseorm.BaseOrm{
|
|
Id: uuid.GenUUID(),
|
|
USER_CODE: global.GWAF_USER_CODE,
|
|
Tenant_ID: global.GWAF_TENANT_ID,
|
|
CREATE_TIME: customtype.JsonTime(time.Now()),
|
|
UPDATE_TIME: customtype.JsonTime(time.Now()),
|
|
},
|
|
Code: uniCode,
|
|
Host: wafHostAddReq.Host,
|
|
Port: wafHostAddReq.Port,
|
|
Ssl: wafHostAddReq.Ssl,
|
|
GUARD_STATUS: 1,
|
|
REMOTE_SYSTEM: wafHostAddReq.REMOTE_SYSTEM,
|
|
REMOTE_APP: wafHostAddReq.REMOTE_APP,
|
|
Remote_host: wafHostAddReq.Remote_host,
|
|
Remote_port: wafHostAddReq.Remote_port,
|
|
Remote_ip: wafHostAddReq.Remote_ip,
|
|
Certfile: wafHostAddReq.Certfile,
|
|
Keyfile: wafHostAddReq.Keyfile,
|
|
REMARKS: wafHostAddReq.REMARKS,
|
|
GLOBAL_HOST: 0,
|
|
DEFENSE_JSON: wafHostAddReq.DEFENSE_JSON,
|
|
START_STATUS: wafHostAddReq.START_STATUS,
|
|
EXCLUDE_URL_LOG: wafHostAddReq.EXCLUDE_URL_LOG,
|
|
IsEnableLoadBalance: wafHostAddReq.IsEnableLoadBalance,
|
|
LoadBalanceStage: wafHostAddReq.LoadBalanceStage,
|
|
UnrestrictedPort: wafHostAddReq.UnrestrictedPort,
|
|
BindSslId: wafHostAddReq.BindSslId,
|
|
AutoJumpHTTPS: wafHostAddReq.AutoJumpHTTPS,
|
|
BindMoreHost: wafHostAddReq.BindMoreHost,
|
|
IsTransBackDomain: wafHostAddReq.IsTransBackDomain,
|
|
BindMorePort: wafHostAddReq.BindMorePort,
|
|
IsEnableHttpAuthBase: wafHostAddReq.IsEnableHttpAuthBase,
|
|
ResponseTimeOut: wafHostAddReq.ResponseTimeOut,
|
|
HealthyJSON: wafHostAddReq.HealthyJSON,
|
|
InsecureSkipVerify: wafHostAddReq.InsecureSkipVerify,
|
|
CaptchaJSON: wafHostAddReq.CaptchaJSON,
|
|
AntiLeechJSON: wafHostAddReq.AntiLeechJSON,
|
|
CacheJSON: wafHostAddReq.CacheJSON,
|
|
StaticSiteJSON: wafHostAddReq.StaticSiteJSON,
|
|
DefaultEncoding: wafHostAddReq.DefaultEncoding,
|
|
LogOnlyMode: wafHostAddReq.LogOnlyMode,
|
|
TransportJSON: wafHostAddReq.TransportJSON,
|
|
}
|
|
global.GWAF_LOCAL_DB.Create(wafHost)
|
|
return wafHost.Code, nil
|
|
}
|
|
|
|
func (receiver *WafHostService) CheckIsExistApi(wafHostAddReq request.WafHostAddReq) error {
|
|
return global.GWAF_LOCAL_DB.First(&model.Hosts{}, "host = ? and port= ?", wafHostAddReq.Host, wafHostAddReq.Port).Error
|
|
}
|
|
func (receiver *WafHostService) CheckIsExist(host string, port string) error {
|
|
return global.GWAF_LOCAL_DB.First(&model.Hosts{}, "host = ? and port= ?", host, port).Error
|
|
}
|
|
|
|
func (receiver *WafHostService) ModifyApi(wafHostEditReq request.WafHostEditReq) error {
|
|
var webHost model.Hosts
|
|
global.GWAF_LOCAL_DB.Where("host = ? and port= ?", wafHostEditReq.Host, wafHostEditReq.Port).Find(&webHost)
|
|
if webHost.Id != "" && webHost.Code != wafHostEditReq.CODE {
|
|
return errors.New("当前网站和端口已经存在")
|
|
}
|
|
if webHost.GLOBAL_HOST == 1 {
|
|
return errors.New("全局网站不允许单独编辑")
|
|
}
|
|
hostMap := map[string]interface{}{
|
|
"Host": wafHostEditReq.Host,
|
|
"Port": wafHostEditReq.Port,
|
|
"Ssl": wafHostEditReq.Ssl,
|
|
//"GUARD_STATUS": 0,
|
|
"REMOTE_SYSTEM": wafHostEditReq.REMOTE_SYSTEM,
|
|
"REMOTE_APP": wafHostEditReq.REMOTE_APP,
|
|
"Remote_host": wafHostEditReq.Remote_host,
|
|
"Remote_ip": wafHostEditReq.Remote_ip,
|
|
"Remote_port": wafHostEditReq.Remote_port,
|
|
"REMARKS": wafHostEditReq.REMARKS,
|
|
"GLOBAL_HOST": 0,
|
|
"Certfile": wafHostEditReq.Certfile,
|
|
"Keyfile": wafHostEditReq.Keyfile,
|
|
"UPDATE_TIME": customtype.JsonTime(time.Now()),
|
|
"DEFENSE_JSON": wafHostEditReq.DEFENSE_JSON,
|
|
"START_STATUS": wafHostEditReq.START_STATUS,
|
|
"EXCLUDE_URL_LOG": wafHostEditReq.EXCLUDE_URL_LOG,
|
|
"IsEnableLoadBalance": wafHostEditReq.IsEnableLoadBalance,
|
|
"LoadBalanceStage": wafHostEditReq.LoadBalanceStage,
|
|
"UnrestrictedPort": wafHostEditReq.UnrestrictedPort,
|
|
"BindSslId": wafHostEditReq.BindSslId,
|
|
"AutoJumpHTTPS": wafHostEditReq.AutoJumpHTTPS,
|
|
"BindMoreHost": wafHostEditReq.BindMoreHost,
|
|
"IsTransBackDomain": wafHostEditReq.IsTransBackDomain,
|
|
"BindMorePort": wafHostEditReq.BindMorePort,
|
|
"IsEnableHttpAuthBase": wafHostEditReq.IsEnableHttpAuthBase,
|
|
"ResponseTimeOut": wafHostEditReq.ResponseTimeOut,
|
|
"HealthyJSON": wafHostEditReq.HealthyJSON,
|
|
"InsecureSkipVerify": wafHostEditReq.InsecureSkipVerify,
|
|
"CaptchaJSON": wafHostEditReq.CaptchaJSON,
|
|
"AntiLeechJSON": wafHostEditReq.AntiLeechJSON,
|
|
"CacheJSON": wafHostEditReq.CacheJSON,
|
|
"StaticSiteJSON": wafHostEditReq.StaticSiteJSON,
|
|
"DefaultEncoding": wafHostEditReq.DefaultEncoding,
|
|
"LogOnlyMode": wafHostEditReq.LogOnlyMode,
|
|
"TransportJSON": wafHostEditReq.TransportJSON,
|
|
}
|
|
err := global.GWAF_LOCAL_DB.Debug().Model(model.Hosts{}).Where("CODE=?", wafHostEditReq.CODE).Updates(hostMap).Error
|
|
|
|
return err
|
|
}
|
|
func (receiver *WafHostService) GetDetailApi(req request.WafHostDetailReq) model.Hosts {
|
|
var webHost model.Hosts
|
|
global.GWAF_LOCAL_DB.Where("CODE=?", req.CODE).Find(&webHost)
|
|
return webHost
|
|
}
|
|
func (receiver *WafHostService) GetDetailByCodeApi(code string) model.Hosts {
|
|
var webHost model.Hosts
|
|
global.GWAF_LOCAL_DB.Where("CODE=?", code).Find(&webHost)
|
|
return webHost
|
|
}
|
|
func (receiver *WafHostService) GetListApi(req request.WafHostSearchReq) ([]model.Hosts, int64, error) {
|
|
var list []model.Hosts
|
|
var total int64 = 0
|
|
|
|
splitFilterBys := strings.Split(req.FilterBy, "|")
|
|
splitFilterValues := strings.Split(req.FilterValue, "|")
|
|
|
|
/*where条件*/
|
|
var whereField = ""
|
|
var whereValues []interface{}
|
|
//where字段
|
|
if len(req.Code) > 0 {
|
|
if len(whereField) > 0 {
|
|
whereField = whereField + " and "
|
|
}
|
|
whereField = whereField + " code=? "
|
|
}
|
|
for _, by := range splitFilterBys {
|
|
|
|
if len(by) > 0 {
|
|
if !validfield.IsValidHostFilterField(by) {
|
|
return nil, 0, errors.New("输入过滤字段不合法")
|
|
}
|
|
if len(whereField) > 0 {
|
|
whereField = whereField + " and "
|
|
}
|
|
whereField = whereField + " " + by + " like ? "
|
|
}
|
|
}
|
|
//where字段赋值
|
|
if len(req.Code) > 0 {
|
|
whereValues = append(whereValues, req.Code)
|
|
}
|
|
for _, val := range splitFilterValues {
|
|
if len(val) > 0 {
|
|
whereValues = append(whereValues, "%"+val+"%")
|
|
}
|
|
}
|
|
|
|
orderInfo := ""
|
|
|
|
/**
|
|
排序
|
|
*/
|
|
if req.SortBy != "" {
|
|
if receiver.isValidSortField(req.SortBy) {
|
|
if req.SortDescending == "desc" {
|
|
orderInfo = req.SortBy + " desc"
|
|
} else {
|
|
orderInfo = req.SortBy + " asc"
|
|
}
|
|
} else {
|
|
return nil, 0, errors.New("输入排序字段不合法")
|
|
}
|
|
}
|
|
|
|
global.GWAF_LOCAL_DB.Model(&model.Hosts{}).Where(whereField, whereValues...).Limit(req.PageSize).Offset(req.PageSize * (req.PageIndex - 1)).Order(orderInfo).Find(&list)
|
|
global.GWAF_LOCAL_DB.Model(&model.Hosts{}).Where(whereField, whereValues...).Count(&total)
|
|
|
|
return list, total, nil
|
|
}
|
|
func (receiver *WafHostService) DelHostApi(req request.WafHostDelReq) (model.Hosts, error) {
|
|
var webhost model.Hosts
|
|
err := global.GWAF_LOCAL_DB.Where("CODE = ?", req.CODE).First(&webhost).Error
|
|
if webhost.GLOBAL_HOST == 1 {
|
|
return model.Hosts{}, errors.New("全局网站不允许单独删除")
|
|
}
|
|
if err != nil {
|
|
return model.Hosts{}, err
|
|
}
|
|
err = global.GWAF_LOCAL_DB.Where("CODE = ?", req.CODE).Delete(model.Hosts{}).Error
|
|
//删除规则
|
|
err = global.GWAF_LOCAL_DB.Where("Host_Code = ?", req.CODE).Delete(model.Rules{}).Error
|
|
//删除Anticc
|
|
err = global.GWAF_LOCAL_DB.Where("Host_Code = ?", req.CODE).Delete(model.AntiCC{}).Error
|
|
//删除禁用ip
|
|
err = global.GWAF_LOCAL_DB.Where("Host_Code = ?", req.CODE).Delete(model.IPBlockList{}).Error
|
|
//删除禁用url
|
|
err = global.GWAF_LOCAL_DB.Where("Host_Code = ?", req.CODE).Delete(model.URLBlockList{}).Error
|
|
//删除隐私保护url
|
|
err = global.GWAF_LOCAL_DB.Where("Host_Code = ?", req.CODE).Delete(model.LDPUrl{}).Error
|
|
//删除白名单ip
|
|
err = global.GWAF_LOCAL_DB.Where("Host_Code = ?", req.CODE).Delete(model.IPAllowList{}).Error
|
|
//删除白名单URL
|
|
err = global.GWAF_LOCAL_DB.Where("Host_Code = ?", req.CODE).Delete(model.URLAllowList{}).Error
|
|
//删除用户名和密码访问
|
|
err = global.GWAF_LOCAL_DB.Where("Host_Code = ?", req.CODE).Delete(model.HttpAuthBase{}).Error
|
|
return webhost, err
|
|
}
|
|
func (receiver *WafHostService) ModifyGuardStatusApi(req request.WafHostGuardStatusReq) error {
|
|
hostMap := map[string]interface{}{
|
|
"GUARD_STATUS": req.GUARD_STATUS,
|
|
"UPDATE_TIME": customtype.JsonTime(time.Now()),
|
|
}
|
|
|
|
err := global.GWAF_LOCAL_DB.Model(model.Hosts{}).Where("CODE=?", req.CODE).Updates(hostMap).Error
|
|
return err
|
|
}
|
|
func (receiver *WafHostService) ModifyStartStatusApi(req request.WafHostStartStatusReq) error {
|
|
hostMap := map[string]interface{}{
|
|
"START_STATUS": req.START_STATUS,
|
|
"UPDATE_TIME": customtype.JsonTime(time.Now()),
|
|
}
|
|
|
|
err := global.GWAF_LOCAL_DB.Model(model.Hosts{}).Where("CODE=?", req.CODE).Updates(hostMap).Error
|
|
return err
|
|
}
|
|
func (receiver *WafHostService) GetAllHostApi() []model.Hosts {
|
|
var webHosts []model.Hosts
|
|
global.GWAF_LOCAL_DB.Order("global_host desc").Find(&webHosts)
|
|
return webHosts
|
|
}
|
|
|
|
// GetAllRunningHostApi 获取所有正在启动的主机
|
|
func (receiver *WafHostService) GetAllRunningHostApi() []model.Hosts {
|
|
var webHosts []model.Hosts
|
|
global.GWAF_LOCAL_DB.Where("global_host <>?", 1).Where("start_status = ?", 0).Find(&webHosts)
|
|
return webHosts
|
|
}
|
|
|
|
func (receiver *WafHostService) CheckPortExistApi(port int) int64 {
|
|
var total int64 = 0
|
|
global.GWAF_LOCAL_DB.Model(&model.Hosts{}).Where("port=?", port).Count(&total)
|
|
return total
|
|
}
|
|
|
|
func (receiver *WafHostService) CheckAvailablePortExistApi(port int) int64 {
|
|
var total int64 = 0
|
|
global.GWAF_LOCAL_DB.Model(&model.Hosts{}).Where(" start_status = 0 and port=?", port).Count(&total)
|
|
return total
|
|
}
|
|
|
|
func (receiver *WafHostService) IsEmptyHost() bool {
|
|
var total int64 = 0
|
|
err := global.GWAF_LOCAL_DB.Model(&model.Hosts{}).Where("global_host=?", 0).Count(&total).Error
|
|
if err == nil {
|
|
if total == 0 {
|
|
return true
|
|
} else {
|
|
return false
|
|
}
|
|
} else {
|
|
return false
|
|
}
|
|
}
|
|
|
|
// GetHostBySSLConfigId 通过SSL绑定ID获取主机信息
|
|
func (receiver *WafHostService) GetHostBySSLConfigId(sslId string) []model.Hosts {
|
|
var webHosts []model.Hosts
|
|
global.GWAF_LOCAL_DB.Where("bind_ssl_id=?", sslId).Find(&webHosts)
|
|
return webHosts
|
|
}
|
|
|
|
// UpdateSSLInfo 更新ssl证书信息
|
|
func (receiver *WafHostService) UpdateSSLInfo(certContent string, keyContent string, hostCode string) error {
|
|
hostMap := map[string]interface{}{
|
|
"Certfile": certContent,
|
|
"Keyfile": keyContent,
|
|
"UPDATE_TIME": customtype.JsonTime(time.Now()),
|
|
}
|
|
err := global.GWAF_LOCAL_DB.Debug().Model(model.Hosts{}).Where("CODE=?", hostCode).Updates(hostMap).Error
|
|
return err
|
|
}
|
|
|
|
// UpdateSSLInfoAndBindId 更新ssl证书信息 有绑定ID 说明是新来的
|
|
func (receiver *WafHostService) UpdateSSLInfoAndBindId(certContent string, keyContent string, hostCode string, bindId string) error {
|
|
hostMap := map[string]interface{}{
|
|
"BindSslId": bindId,
|
|
"Certfile": certContent,
|
|
"Keyfile": keyContent,
|
|
"UPDATE_TIME": customtype.JsonTime(time.Now()),
|
|
}
|
|
err := global.GWAF_LOCAL_DB.Debug().Model(model.Hosts{}).Where("CODE=?", hostCode).Updates(hostMap).Error
|
|
return err
|
|
}
|
|
|
|
/*
|
|
*
|
|
判断是否合法
|
|
*/
|
|
func (receiver *WafHostService) isValidSortField(field string) bool {
|
|
var allowedSortFields = []string{"create_time"}
|
|
|
|
for _, allowedField := range allowedSortFields {
|
|
if field == allowedField {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
// 查询所有SSL证书的
|
|
func (receiver *WafHostService) GetAllSSLHost() ([]model.Hosts, int64, error) {
|
|
var list []model.Hosts
|
|
var total int64 = 0
|
|
|
|
/**排序*/
|
|
orderInfo := "create_time desc"
|
|
|
|
global.GWAF_LOCAL_DB.Model(&model.Hosts{}).Where("ssl =? ", 1).Order(orderInfo).Find(&list)
|
|
global.GWAF_LOCAL_DB.Model(&model.Hosts{}).Where("ssl =? ", 1).Count(&total)
|
|
|
|
return list, total, nil
|
|
}
|
|
|
|
// 查询所有SSL证书的(只看绑定过的主机信息)
|
|
func (receiver *WafHostService) GetAllSSLBindHost() ([]model.Hosts, int64, error) {
|
|
var list []model.Hosts
|
|
var total int64 = 0
|
|
|
|
/**排序*/
|
|
orderInfo := "create_time desc"
|
|
|
|
global.GWAF_LOCAL_DB.Model(&model.Hosts{}).Where("ssl =? and bind_ssl_id <> ?", 1, "").Order(orderInfo).Find(&list)
|
|
global.GWAF_LOCAL_DB.Model(&model.Hosts{}).Where("ssl =? and bind_ssl_id <> ?", 1, "").Count(&total)
|
|
|
|
return list, total, nil
|
|
}
|
|
|
|
// ModifyAllGuardStatusApi 新增批量修改防御状态的方法
|
|
func (receiver *WafHostService) ModifyAllGuardStatusApi(req request.WafHostBatchGuardStatusReq) error {
|
|
hostMap := map[string]interface{}{
|
|
"GUARD_STATUS": req.GUARD_STATUS,
|
|
"UPDATE_TIME": customtype.JsonTime(time.Now()),
|
|
}
|
|
|
|
// 更新所有非全局主机的防御状态，且只更新与目标状态不同的主机
|
|
err := global.GWAF_LOCAL_DB.Model(model.Hosts{}).Where("GLOBAL_HOST <> ? AND GUARD_STATUS <> ?", 1, req.GUARD_STATUS).Updates(hostMap).Error
|
|
return err
|
|
}
|
|
|
|
// GetHostsByGuardStatus 获取指定防御状态的主机
|
|
func (receiver *WafHostService) GetHostsByGuardStatus(guardStatus int) []model.Hosts {
|
|
var webHosts []model.Hosts
|
|
global.GWAF_LOCAL_DB.Where("global_host <> ? AND guard_status = ? ", 1, guardStatus).Find(&webHosts)
|
|
return webHosts
|
|
}
|