qps-path.js
2.75 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
/**
* 控制路由请求次数
* @date: 2018/03/05
*/
'use strict';
const _ = require('lodash');
const cache = global.yoho.cache.master;
const logger = global.yoho.logger;
const md5 = require('md5');
const pathToRegexp = require('path-to-regexp');
const Promise = require('bluebird');
const zk = require('./zk');
const {limitKey} = require('./vars');
const INVALIDTIME = 3600 * 24; // 24h
const IP_WHITE_LIST = [
'106.38.38.146',
'106.38.38.147',
'106.39.86.227',
'218.94.75.58',
'218.94.75.50',
'218.94.77.166'
];
module.exports = async({user}, next) => {
if (!user.app || !user.path || !user.ip) {
return next();
}
const app = user.app;
if (_.get(zk, `${app}.close.risk`, false)) {
return next();
}
const ip = user.ip;
const path = user.path;
// const risks = _.get(zk, `${app}.json.risk`, [{route: '/product/(.*).html', interval: 5000, requests: 10}]);
const risks = _.get(zk, `${app}.json.risk`, []);
let router = {};
if (_.isEmpty(path) || _.isEmpty(risks) || IP_WHITE_LIST.indexOf(ip) > -1) {
return next();
}
_.isArray(risks) && risks.some(item => {
if (item.state === 'off') {
return false;
}
if (!item.regRoute) {
item.regRoute = pathToRegexp(item.route);
item.interval = parseInt(item.interval, 10);
item.requests = parseInt(item.requests, 10);
}
if (item.regRoute.test(path)) {
router = item;
return true;
}
return false;
});
logger.debug(`risk==> router: ${JSON.stringify(router)}, path: ${path}, app: ${app}, ip: ${ip}`); // eslint-disable-line
if (_.isEmpty(router)) {
return next();
}
let keyPath = md5(`${router.regRoute}`);
let limitEnable = `${app}:risk:${limitKey}:${keyPath}:${ip}`; // 查询这个key是否生效
let configKey = `${app}:risk:count:${keyPath}:${ip}`;
const inters = await Promise.all([
cache.getAsync(limitEnable),
cache.getAsync(configKey),
]);
logger.debug(`risk==> cache: %s %d`, limitEnable, inters[0], configKey, inters[1]); // eslint-disable-line
if (inters[0]) {
logger.debug('[qps:route] this user[%j] has rejected', user);
return;
}
if (!inters[1]) {
cache.setAsync(configKey, 1, router.interval || 300);
return next();
}
inters[1] = parseInt(`0${inters[1]}`, 10);
if (inters[1] <= router.requests) {
router = [];
cache.incrAsync(configKey, 1);
return next();
}
logger.info('[qps:route] this user[%j] is being marked as rejected', user);
await Promise.all([
cache.setAsync(limitEnable, 1, INVALIDTIME),
cache.delAsync(configKey)
]);
};