Initial release
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
2025-11-26 11:11:32 +01:00
parent 952dd052bd
commit 72c167dcd5
3 changed files with 103 additions and 38 deletions

14
Cargo.lock generated
View File

@@ -61,6 +61,12 @@ dependencies = [
"windows-sys 0.61.2", "windows-sys 0.61.2",
] ]
[[package]]
name = "anyhow"
version = "1.0.100"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
[[package]] [[package]]
name = "bitflags" name = "bitflags"
version = "2.10.0" version = "2.10.0"
@@ -164,8 +170,10 @@ dependencies = [
name = "header_proxy" name = "header_proxy"
version = "0.1.0" version = "0.1.0"
dependencies = [ dependencies = [
"anyhow",
"clap", "clap",
"env_logger", "env_logger",
"httparse",
"lazy_static", "lazy_static",
"log", "log",
"rand", "rand",
@@ -178,6 +186,12 @@ version = "0.5.0"
source = "registry+https://github.com/rust-lang/crates.io-index" source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
[[package]]
name = "httparse"
version = "1.10.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
[[package]] [[package]]
name = "is_terminal_polyfill" name = "is_terminal_polyfill"
version = "1.70.2" version = "1.70.2"

View File

@@ -10,3 +10,5 @@ clap = { version = "4.5.53", features = ["env", "derive"] }
tokio = { version = "1.48.0", features = ["full"] } tokio = { version = "1.48.0", features = ["full"] }
rand = "0.9.2" rand = "0.9.2"
lazy_static = "1.5.0" lazy_static = "1.5.0"
httparse = "1.10.1"
anyhow = "1.0.100"

View File

@@ -10,16 +10,16 @@ use tokio::net::TcpStream;
#[command(version, about, long_about = None)] #[command(version, about, long_about = None)]
struct Args { struct Args {
/// The address the server will listen to /// The address the server will listen to
#[arg(short, long, default_value = "0.0.0.0:8000")] #[arg(short, long, env, default_value = "0.0.0.0:8000")]
listen_address: String, listen_address: String,
/// The name of the header that contain target host and port /// The name of the header that contain target host and port
#[arg(short, long, default_value = "x-target-host")] #[arg(short, long, env, default_value = "x-target-host")]
target_host_port_header: String, target_host_port_header: String,
/// Name of optional header that contains path to add to the request /// Name of optional header that contains path to add to the request
#[arg(short, long, default_value = "x-path-prefix")] #[arg(short, long, env)]
path_prefix_header: String, path_prefix_header: Option<String>,
} }
lazy_static::lazy_static! { lazy_static::lazy_static! {
@@ -54,11 +54,13 @@ async fn main() -> Result<(), Box<dyn Error>> {
); );
let (mut client_read, mut client_write) = client_socket.split(); let (mut client_read, mut client_write) = client_socket.split();
let mut buf_client = [0u8; 1024]; let mut buf_client = [0u8; 10000];
let mut buf_server = [0u8; 1024]; let mut buf_server = [0u8; 1024];
// Perform first read operation manually to manipulate path and determine destination server // Perform first read operation manually to manipulate path and determine target server
let count = match client_read.read(&mut buf_client).await { let mut total = 0;
let headers_processed = loop {
let count = match client_read.read(&mut buf_client[total..]).await {
Ok(count) => count, Ok(count) => count,
Err(e) => { Err(e) => {
log::error!( log::error!(
@@ -68,23 +70,46 @@ async fn main() -> Result<(), Box<dyn Error>> {
} }
}; };
if count < 10 { if count == 0 {
log::error!("[{conn_id}] Initial read too small (count={count}), cannot continue!"); log::error!("[{conn_id}] read from client count is null, cannot continue!");
let _ = client_write.write_all(ERR_NOT_PROXIFIALBE).await;
return; return;
} }
let headers_processed = process_headers(&buf_client[..count]); total += count;
// Transfer modified headers to upstream match process_headers(&buf_client[..total]) {
let mut upstream = match TcpStream::connect(headers_processed.remote_host).await { Ok(None) => {
log::debug!("[{conn_id}] Insufficient amount of data, need to continue");
continue;
}
Ok(Some(res)) => break res,
Err(e) => {
log::error!("[{conn_id}] failed to parse initial request headers! {e}");
let _ = client_write.write_all(ERR_NOT_PROXIFIALBE).await;
return;
}
}
};
// Connect to upstream
let mut upstream = match TcpStream::connect(headers_processed.target_host).await {
Ok(upstream) => upstream, Ok(upstream) => upstream,
Err(e) => { Err(e) => {
log::error!("Could not connect to upstream! {e}"); log::error!("[{conn_id}] Could not connect to upstream! {e}");
let _ = client_write.write_all(ERR_NOT_PROXIFIALBE).await; let _ = client_write.write_all(ERR_NOT_PROXIFIALBE).await;
return; return;
} }
}; };
// Transfer modified headers to upstream
if let Err(e) = upstream.write_all(&headers_processed.buff).await {
log::error!("[{conn_id}] Could not forward initial bytes to upstream! {e}");
let _ = client_write.write_all(ERR_NOT_PROXIFIALBE).await;
return;
}
// Enter in loop to forward remaining data
loop { loop {
tokio::select! { tokio::select! {
count = client_read.read(&mut buf_client) => { count = client_read.read(&mut buf_client) => {
@@ -137,31 +162,55 @@ async fn main() -> Result<(), Box<dyn Error>> {
struct ProcessHeadersResult { struct ProcessHeadersResult {
buff: Vec<u8>, buff: Vec<u8>,
remote_host: String, target_host: String,
} }
fn process_headers(buff: &[u8]) -> ProcessHeadersResult { fn process_headers(buff: &[u8]) -> anyhow::Result<Option<ProcessHeadersResult>> {
let mut out = Vec::with_capacity(buff.len()); let mut headers = [httparse::EMPTY_HEADER; 64];
let mut req = httparse::Request::new(&mut headers);
let parsing_res = req.parse(buff)?;
let mut i = 0; let target_host = headers
while i < buff.len() { .iter()
if buff[i] != b'\n' || i + 1 == buff.len() || !buff[i + 1..].starts_with(b"Host:") { .find(|h| h.name.eq_ignore_ascii_case(&ARGS.target_host_port_header))
out.push(buff[i]); .map(|h| String::from_utf8_lossy(h.value));
i += 1;
continue; let Some(target_host) = target_host else {
if parsing_res.is_partial() {
return Ok(None);
} else {
anyhow::bail!(
"Request is complete without header {}",
ARGS.target_host_port_header
)
} }
};
i += 1; // Check if path needs to be prefixed
out.push(b'\n'); let prefix_path = if let Some(hname) = &ARGS.path_prefix_header {
headers
.iter()
.find(|h| h.name.eq_ignore_ascii_case(hname))
.map(|h| String::from_utf8_lossy(h.value).replace(['\n', '\r', '\t', ' '], ""))
} else {
None
};
out.append(&mut format!("Host: {host}").as_bytes().to_vec()); // Perform prefix injection
let mut buff = buff.to_vec();
while buff[i] != b'\r' && buff[i] != b'\n' { if let Some(prefix) = prefix_path {
i += 1; let pos = buff.iter().position(|c| c == &b' ');
if let Some(pos) = pos {
for (num, c) in prefix.as_bytes().iter().enumerate() {
buff.insert(pos + 1 + num, *c);
}
} }
} }
todo!() Ok(Some(ProcessHeadersResult {
target_host: target_host.to_string(),
buff,
}))
} }
#[cfg(test)] #[cfg(test)]