handle fetch of already active ip addresses on other nodes
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
dc7cad13fe
commit
ebd969f6f8
@ -177,13 +177,17 @@ impl Context {
|
|||||||
return a.ipdata.clone();
|
return a.ipdata.clone();
|
||||||
} else {
|
} else {
|
||||||
let now = Local::now().trunc_subsecs(0);
|
let now = Local::now().trunc_subsecs(0);
|
||||||
|
let mut tryfail = 0;
|
||||||
|
if ipdata.mode == "zmq".to_string() {
|
||||||
|
tryfail = 100;
|
||||||
|
}
|
||||||
match self.cfg.sets.get(&ipdata.src) {
|
match self.cfg.sets.get(&ipdata.src) {
|
||||||
Some(set) => {
|
Some(set) => {
|
||||||
self.blocklist.insert(
|
self.blocklist.insert(
|
||||||
ipdata.ip.to_string(),
|
ipdata.ip.to_string(),
|
||||||
BlockIpData {
|
BlockIpData {
|
||||||
ipdata: ipdata.clone(),
|
ipdata: ipdata.clone(),
|
||||||
tryfail: 0,
|
tryfail,
|
||||||
starttime: now,
|
starttime: now,
|
||||||
blocktime: set.blocktime,
|
blocktime: set.blocktime,
|
||||||
},
|
},
|
||||||
@ -454,6 +458,7 @@ mod test {
|
|||||||
hostname: "test1".to_string(),
|
hostname: "test1".to_string(),
|
||||||
date: now.to_rfc3339().to_string(),
|
date: now.to_rfc3339().to_string(),
|
||||||
src: "ssh".to_string(),
|
src: "ssh".to_string(),
|
||||||
|
mode: "file".to_string(),
|
||||||
})
|
})
|
||||||
.await;
|
.await;
|
||||||
}
|
}
|
||||||
@ -464,6 +469,7 @@ mod test {
|
|||||||
hostname: "test2".to_string(),
|
hostname: "test2".to_string(),
|
||||||
date: now.to_rfc3339().to_string(),
|
date: now.to_rfc3339().to_string(),
|
||||||
src: "http".to_string(),
|
src: "http".to_string(),
|
||||||
|
mode: "file".to_string(),
|
||||||
})
|
})
|
||||||
.await;
|
.await;
|
||||||
}
|
}
|
||||||
@ -473,6 +479,7 @@ mod test {
|
|||||||
hostname: "testgood".to_string(),
|
hostname: "testgood".to_string(),
|
||||||
date: now.to_rfc3339().to_string(),
|
date: now.to_rfc3339().to_string(),
|
||||||
src: "http".to_string(),
|
src: "http".to_string(),
|
||||||
|
mode: "file".to_string(),
|
||||||
})
|
})
|
||||||
.await;
|
.await;
|
||||||
|
|
||||||
@ -481,6 +488,7 @@ mod test {
|
|||||||
hostname: "testgood".to_string(),
|
hostname: "testgood".to_string(),
|
||||||
date: now.to_rfc3339().to_string(),
|
date: now.to_rfc3339().to_string(),
|
||||||
src: "http".to_string(),
|
src: "http".to_string(),
|
||||||
|
mode: "file".to_string(),
|
||||||
})
|
})
|
||||||
.await;
|
.await;
|
||||||
|
|
||||||
@ -489,6 +497,7 @@ mod test {
|
|||||||
hostname: "testgood".to_string(),
|
hostname: "testgood".to_string(),
|
||||||
date: now.to_rfc3339().to_string(),
|
date: now.to_rfc3339().to_string(),
|
||||||
src: "http".to_string(),
|
src: "http".to_string(),
|
||||||
|
mode: "file".to_string(),
|
||||||
})
|
})
|
||||||
.await;
|
.await;
|
||||||
|
|
||||||
|
@ -24,6 +24,7 @@ pub struct IpData {
|
|||||||
pub src: String,
|
pub src: String,
|
||||||
pub date: String,
|
pub date: String,
|
||||||
pub hostname: String,
|
pub hostname: String,
|
||||||
|
pub mode: String,
|
||||||
}
|
}
|
||||||
|
|
||||||
#[derive(Clone, Debug, Serialize, Deserialize)]
|
#[derive(Clone, Debug, Serialize, Deserialize)]
|
||||||
@ -77,6 +78,7 @@ pub async fn push_ip(ctx: &Context, ip: &IpData, ret: &mut Vec<String>) -> Resul
|
|||||||
src: ip.src.to_string(),
|
src: ip.src.to_string(),
|
||||||
date: ip.date.to_string(),
|
date: ip.date.to_string(),
|
||||||
hostname: ip.hostname.to_string(),
|
hostname: ip.hostname.to_string(),
|
||||||
|
mode: "file".to_string(),
|
||||||
});
|
});
|
||||||
|
|
||||||
let resp = ctx
|
let resp = ctx
|
||||||
@ -113,6 +115,7 @@ pub async fn _push_ip_bulk(
|
|||||||
src: ip.src.to_string(),
|
src: ip.src.to_string(),
|
||||||
date: ip.date.to_string(),
|
date: ip.date.to_string(),
|
||||||
hostname: ip.hostname.to_string(),
|
hostname: ip.hostname.to_string(),
|
||||||
|
mode: "file".to_string(),
|
||||||
})
|
})
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -195,6 +198,7 @@ pub fn filter(
|
|||||||
src: src.to_owned(),
|
src: src.to_owned(),
|
||||||
date: s_date.to_rfc3339().to_owned(),
|
date: s_date.to_rfc3339().to_owned(),
|
||||||
hostname: hostname.to_owned(),
|
hostname: hostname.to_owned(),
|
||||||
|
mode: "file".to_owned(),
|
||||||
});
|
});
|
||||||
ips += 1;
|
ips += 1;
|
||||||
};
|
};
|
||||||
|
@ -45,17 +45,34 @@ pub async fn process(ctx: &Arc<Mutex<Context>>) {
|
|||||||
compare_files_changes(&ctxarc, &mut blrx, &ipdatatx).await;
|
compare_files_changes(&ctxarc, &mut blrx, &ipdatatx).await;
|
||||||
});
|
});
|
||||||
|
|
||||||
|
let mut ip = IpData {
|
||||||
|
ip: "".to_string(),
|
||||||
|
src: "".to_string(),
|
||||||
|
date: "".to_string(),
|
||||||
|
hostname: "".to_string(),
|
||||||
|
mode: "init".to_string(),
|
||||||
|
};
|
||||||
|
send_to_ipbl_zmq(&reqsocket, &mut ip).await;
|
||||||
|
|
||||||
loop {
|
loop {
|
||||||
let mut ret: Vec<String> = Vec::new();
|
let mut ret: Vec<String> = Vec::new();
|
||||||
let begin: DateTime<Local> = Local::now().trunc_subsecs(0);
|
let begin: DateTime<Local> = Local::now().trunc_subsecs(0);
|
||||||
|
|
||||||
// wait for logs parse and zmq channel receive
|
// wait for logs parse and zmq channel receive
|
||||||
let ip = ipdatarx.recv().await.unwrap();
|
let mut ip = ipdatarx.recv().await.unwrap();
|
||||||
|
|
||||||
// lock the context mutex
|
// lock the context mutex
|
||||||
let ctxarc = Arc::clone(&ctx);
|
let ctxarc = Arc::clone(&ctx);
|
||||||
let mut ctx = ctxarc.lock().await;
|
let mut ctx = ctxarc.lock().await;
|
||||||
|
|
||||||
|
if ip.mode == "init" {
|
||||||
|
for i in &mut ctx.get_blocklist_toblock().await {
|
||||||
|
i.mode = "zmq".to_string();
|
||||||
|
send_to_ipbl_zmq(&reqsocket, i).await;
|
||||||
|
}
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
|
||||||
// refresh context blocklist
|
// refresh context blocklist
|
||||||
ctx.update_blocklist(&ip).await;
|
ctx.update_blocklist(&ip).await;
|
||||||
ctx.gc_blocklist().await;
|
ctx.gc_blocklist().await;
|
||||||
@ -63,7 +80,7 @@ pub async fn process(ctx: &Arc<Mutex<Context>>) {
|
|||||||
// send ip list to ws and zmq sockets
|
// send ip list to ws and zmq sockets
|
||||||
if ip.hostname == ctx.hostname {
|
if ip.hostname == ctx.hostname {
|
||||||
send_to_ipbl_ws(&ctx, &ip, &mut ret).await;
|
send_to_ipbl_ws(&ctx, &ip, &mut ret).await;
|
||||||
send_to_ipbl_zmq(&reqsocket, &ip).await;
|
send_to_ipbl_zmq(&reqsocket, &mut ip).await;
|
||||||
}
|
}
|
||||||
|
|
||||||
// apply firewall blocking
|
// apply firewall blocking
|
||||||
|
@ -23,15 +23,15 @@ impl std::fmt::Debug for FileEvent {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
async fn send_to_ipbl_zmq(socket: &zmq::Socket, ip: &IpData) {
|
async fn send_to_ipbl_zmq(reqsocket: &zmq::Socket, ip: &mut IpData) {
|
||||||
let msg = format!("{value}", value = serde_json::to_string(&ip).unwrap());
|
let msg = format!("{value}", value = serde_json::to_string(&ip).unwrap());
|
||||||
match socket.send(&msg, 0) {
|
match reqsocket.send(&msg, 0) {
|
||||||
Ok(_) => {}
|
Ok(_) => {}
|
||||||
Err(e) => {
|
Err(e) => {
|
||||||
println!("{e:?}")
|
println!("{e:?}")
|
||||||
}
|
}
|
||||||
};
|
};
|
||||||
match socket.recv_string(0) {
|
match reqsocket.recv_string(0) {
|
||||||
Ok(o) => match o {
|
Ok(o) => match o {
|
||||||
Ok(_) => {}
|
Ok(_) => {}
|
||||||
Err(ee) => {
|
Err(ee) => {
|
||||||
|
Loading…
Reference in New Issue
Block a user