55 lines
1.9 KiB
Lua
55 lines
1.9 KiB
Lua
|
local _M = {}
|
||
|
|
|
||
|
|
function _M.reload()
|
||
|
|
local httpc = require("resty.http").new()
|
||
|
|
|
||
|
|
-- fetch blocklist records (all blocked skylink hashes)
|
||
|
|
-- 10.10.10.10 points to sia service (alias not available when using resty-http)
|
||
|
|
local res, err = httpc:request_uri("http://10.10.10.10:9980/skynet/blocklist", {
|
||
|
|
headers = {
|
||
|
|
["User-Agent"] = "Sia-Agent",
|
||
|
|
}
|
||
|
|
})
|
||
|
|
|
||
|
|
-- fail whole request in case this request failed, we want to make sure
|
||
|
|
-- the blocklist is pre cached before serving first skylink
|
||
|
|
if err or (res and res.status ~= ngx.HTTP_OK) then
|
||
|
|
ngx.log(ngx.ERR, "Failed skyd service request /skynet/blocklist: ", err or ("[HTTP " .. res.status .. "] " .. res.body))
|
||
|
|
ngx.status = (err and ngx.HTTP_INTERNAL_SERVER_ERROR) or res.status
|
||
|
|
ngx.header["content-type"] = "text/plain"
|
||
|
|
ngx.say(err or res.body)
|
||
|
|
return ngx.exit(ngx.status)
|
||
|
|
elseif res and res.status == ngx.HTTP_OK then
|
||
|
|
local json = require('cjson')
|
||
|
|
local data = json.decode(res.body)
|
||
|
|
|
||
|
|
-- mark all existing entries as expired
|
||
|
|
ngx.shared.blocklist:flush_all()
|
||
|
|
|
||
|
|
-- set all cache entries one by one (resets expiration)
|
||
|
|
for i, hash in ipairs(data.blocklist) do
|
||
|
|
ngx.shared.blocklist:set(hash, true)
|
||
|
|
end
|
||
|
|
|
||
|
|
-- ensure that init flag is persisted
|
||
|
|
ngx.shared.blocklist:set("__init", true)
|
||
|
|
|
||
|
|
-- remove all leftover expired entries
|
||
|
|
ngx.shared.blocklist:flush_expired()
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
function _M.is_blocked(skylink)
|
||
|
|
-- make sure that blocklist has been preloaded
|
||
|
|
if not ngx.shared.blocklist:get("__init") then _M.reload() end
|
||
|
|
|
||
|
|
-- hash skylink before comparing it with blocklist
|
||
|
|
local hash = require("skynet.skylink").hash(skylink)
|
||
|
|
|
||
|
|
-- we need to use get stale because we're using expiring when updating blocklist
|
||
|
|
-- and we want to make sure that we're blocking the skylink
|
||
|
|
return ngx.shared.blocklist:get_stale(hash) == true
|
||
|
|
end
|
||
|
|
|
||
|
|
return _M
|