Authored by chunhua.zhang

Merge branch 'master' of git.yoho.cn:ops/yoho-ansible-roles

@@ -178,19 +178,11 @@ local subscribe_mal_ips=function() @@ -178,19 +178,11 @@ local subscribe_mal_ips=function()
178 if res[3] then 178 if res[3] then
179 local t=cjson.decode(res[3]) 179 local t=cjson.decode(res[3])
180 local ips=t.ips 180 local ips=t.ips
181 - local expire=(not t.expire) and 43200 or t.expire  
182 - if t.type == "add" then  
183 - for ip in string.gmatch(ips,"[^',']+") do  
184 - cache:set("yh:mip:" .. ip,"1",expire)  
185 - ngx.log(ngx.INFO,"nginx subscribe add mal ip:" .. tostring(ip) .. ":" .. tostring(expire))  
186 - end  
187 - elseif t.type == "del" then  
188 - for ip in string.gmatch(ips,"[^',']+") do  
189 - cache:delete("yh:mip:" .. ip)  
190 - ngx.log(ngx.INFO,"nginx subscribe del mal ip:" .. tostring(ip) .. ":" .. tostring(expire))  
191 - end  
192 - end  
193 - 181 + local expire=(not t.expire) and 86400 or t.expire
  182 + for ip in string.gmatch(ips,"[^',']+") do
  183 + cache:set("yh:mip:" .. ip,"1",expire)
  184 + ngx.log(ngx.INFO,"nginx subscribe mal ip:" .. tostring(ip) .. ":" .. tostring(expire))
  185 + end
194 end 186 end
195 elseif err ~= "timeout" then 187 elseif err ~= "timeout" then
196 connect:close() 188 connect:close()
@@ -267,8 +259,7 @@ function limit_ip_access_conf_to_worker() @@ -267,8 +259,7 @@ function limit_ip_access_conf_to_worker()
267 local t=lua_context.lua_conf_cache:get("limit_ip_access") 259 local t=lua_context.lua_conf_cache:get("limit_ip_access")
268 if t then 260 if t then
269 local r=cjson.decode(t) 261 local r=cjson.decode(t)
270 - if r then  
271 - r["white_method"]={"app.graphic.img","app.graphic.verify"} 262 + if r then
272 lua_context.configs["limit_ip_access"]=r 263 lua_context.configs["limit_ip_access"]=r
273 --ngx.log(ngx.INFO,"++++++++++++++" .. cjson.encode(lua_context.configs["limit_ip_access"])) 264 --ngx.log(ngx.INFO,"++++++++++++++" .. cjson.encode(lua_context.configs["limit_ip_access"]))
274 end 265 end
@@ -3,7 +3,9 @@ local lrucache = require "resty.lrucache" @@ -3,7 +3,9 @@ local lrucache = require "resty.lrucache"
3 -- init redis twemproxy config 3 -- init redis twemproxy config
4 local redis_config1={host="127.0.0.1",port="6379",auth=nil,timeout=20,max_idle_timeout=60000,pool_size=200} 4 local redis_config1={host="127.0.0.1",port="6379",auth=nil,timeout=20,max_idle_timeout=60000,pool_size=200}
5 5
6 -local ip_limit_redis_config={host="redis.nginx.yohoops.org",port="6379",auth=redis9646,timeout=20,max_idle_timeout=60000,pool_size=100} 6 +
  7 +local ip_limit_redis_config={host="127.0.0.1",port="6379",auth=nil,timeout=20,max_idle_timeout=60000,pool_size=100}
  8 +
7 9
8 10
9 local redis_util=require("redisutil") 11 local redis_util=require("redisutil")
@@ -134,31 +134,24 @@ function M:mal_ip() @@ -134,31 +134,24 @@ function M:mal_ip()
134 ngx.say('{"code": 400, "msg": "params error!"}') 134 ngx.say('{"code": 400, "msg": "params error!"}')
135 ngx.exit(ngx.HTTP_OK) 135 ngx.exit(ngx.HTTP_OK)
136 end 136 end
137 - local exists={}  
138 - if method == 'pubAdd' then 137 + if method == 'publish' then
139 local t={} 138 local t={}
140 t.ips=ips 139 t.ips=ips
141 t.expire=expire 140 t.expire=expire
142 - t.type="add"  
143 - redis_limit_ip:cmd("publish","mal_ips",cjson.encode(t))  
144 - elseif method == 'pubDel' then  
145 - local t={}  
146 - t.ips=ips  
147 - t.type="del"  
148 redis_limit_ip:cmd("publish","mal_ips",cjson.encode(t)) 141 redis_limit_ip:cmd("publish","mal_ips",cjson.encode(t))
149 - else  
150 - for ip in string.gmatch(ips,"[^',']+") do  
151 - if method == 'add' then  
152 - local expire= (not expire) and 43200 or expire  
153 - cache:set("yh:mip:" .. ip,"1",expire)  
154 - elseif method == 'del' then  
155 - cache:delete("yh:mip:" .. ip)  
156 - elseif method == 'exists' then  
157 - local res=cache:get("yh:mip:" .. ip)  
158 - res= res and true or false  
159 - exists[#exists+1]=tostring(res)  
160 - end  
161 - end 142 + end
  143 + local exists={}
  144 + for ip in string.gmatch(ips,"[^',']+") do
  145 + if method == 'add' then
  146 + local expire= (not expire) and 86400 or expire
  147 + cache:set("yh:mip:" .. ip,"1",expire)
  148 + elseif method == 'del' then
  149 + cache:delete("yh:mip:" .. ip)
  150 + elseif method == 'exists' then
  151 + local res=cache:get("yh:mip:" .. ip)
  152 + res= res and true or false
  153 + exists[#exists+1]=tostring(res)
  154 + end
162 end 155 end
163 local body=table.concat(exists,",") 156 local body=table.concat(exists,",")
164 ngx.say('{"code": 200, "msg": "'.. body ..'"}') 157 ngx.say('{"code": 200, "msg": "'.. body ..'"}')