zoraxy-waf/main.go

117 lines
2.9 KiB
Go

package main
import (
"embed"
"encoding/json"
"fmt"
"log"
"net/http"
"zoraxy-firewall/zoraxy_plugin"
)
//go:embed web/*
var webFS embed.FS
func main() {
loadConfig()
spec := &zoraxy_plugin.IntroSpect{
ID: "zoraxy-firewall",
Name: "Firewall",
Author: "Zoraxy Community",
AuthorContact: "",
Description: "Inline WAF proxy with health checks and fail-open bypass.",
URL: "",
Type: zoraxy_plugin.PluginType_Router,
VersionMajor: 1,
VersionMinor: 0,
VersionPatch: 0,
UIPath: "/ui",
StaticCapturePaths: []zoraxy_plugin.StaticCaptureRule{{CapturePath: "/"}},
StaticCaptureIngress: "/inspect",
}
config, err := zoraxy_plugin.ServeAndRecvSpec(spec)
if err != nil {
log.Fatalf("failed to receive config: %v", err)
}
// Start background health checker.
startHealthCheck()
mux := http.NewServeMux()
// Static capture handler — all proxied traffic hits this.
mux.HandleFunc("/inspect", handleInspect)
// UI + config API.
uiRouter := zoraxy_plugin.NewPluginEmbedUIRouter(
spec.ID, &webFS, "web", spec.UIPath,
)
uiRouter.HandleFunc("/api/config", handleGetConfig, mux)
uiRouter.HandleFunc("/api/config/save", handleSaveConfig, mux)
uiRouter.HandleFunc("/api/stats", handleGetStats, mux)
uiRouter.RegisterTerminateHandler(func() {
log.Println("firewall shutting down")
}, mux)
uiRouter.AttachHandlerToMux(mux)
addr := fmt.Sprintf("127.0.0.1:%d", config.Port)
log.Printf("firewall v%d.%d.%d listening on %s",
spec.VersionMajor, spec.VersionMinor, spec.VersionPatch, addr)
if err := http.ListenAndServe(addr, mux); err != nil {
log.Fatalf("server error: %v", err)
}
}
// --- Config API ---
func handleGetConfig(w http.ResponseWriter, r *http.Request) {
writeJSON(w, http.StatusOK, getConfig())
}
func handleSaveConfig(w http.ResponseWriter, r *http.Request) {
if err := r.ParseForm(); err != nil {
writeJSON(w, http.StatusBadRequest, map[string]string{"error": "invalid form"})
return
}
cfgMu.Lock()
cfg.Enabled = r.FormValue("enabled") == "true"
if u := r.FormValue("waf_url"); u != "" {
cfg.WAFURL = u
}
if u := r.FormValue("backend_url"); u != "" {
cfg.BackendURL = u
}
if v := r.FormValue("health_interval"); v != "" {
fmt.Sscanf(v, "%d", &cfg.HealthInterval)
}
if v := r.FormValue("timeout_ms"); v != "" {
fmt.Sscanf(v, "%d", &cfg.TimeoutMs)
}
cfgMu.Unlock()
if err := saveConfig(); err != nil {
log.Printf("ERROR saving config: %v", err)
writeJSON(w, http.StatusInternalServerError, map[string]string{"error": "save failed"})
return
}
writeJSON(w, http.StatusOK, map[string]string{"status": "saved"})
}
func handleGetStats(w http.ResponseWriter, r *http.Request) {
writeJSON(w, http.StatusOK, metricsSnapshot())
}
// --- Helpers ---
func writeJSON(w http.ResponseWriter, status int, v interface{}) {
w.Header().Set("Content-Type", "application/json")
w.WriteHeader(status)
json.NewEncoder(w).Encode(v)
}