| #!/usr/bin/perl |
| |
| # (C) Maxim Dounin |
| # (C) Andrey Zelenkov |
| # (C) Nginx, Inc. |
| |
| # Tests for nginx geo module. |
| |
| ############################################################################### |
| |
| use warnings; |
| use strict; |
| |
| use Test::More; |
| |
| BEGIN { use FindBin; chdir($FindBin::Bin); } |
| |
| use lib 'lib'; |
| use Test::Nginx; |
| |
| ############################################################################### |
| |
| select STDERR; $| = 1; |
| select STDOUT; $| = 1; |
| |
| my $t = Test::Nginx->new()->has(qw/http geo/); |
| |
| $t->write_file_expand('nginx.conf', <<'EOF'); |
| |
| %%TEST_GLOBALS%% |
| |
| daemon off; |
| |
| events { |
| } |
| |
| http { |
| %%TEST_GLOBALS_HTTP%% |
| |
| geo $geo { |
| 127.0.0.0/8 loopback; |
| 192.0.2.0/24 test; |
| 0.0.0.0/0 world; |
| } |
| |
| geo $geo_include { |
| include geo.conf; |
| 192.0.2.0/24 test; |
| 0.0.0.0/0 world; |
| } |
| |
| geo $geo_delete { |
| 127.0.0.0/8 loopback; |
| 192.0.2.0/24 test; |
| 0.0.0.0/0 world; |
| delete 127.0.0.0/8; |
| } |
| |
| geo $arg_ip $geo_from_arg { |
| default default; |
| 127.0.0.0/8 loopback; |
| 192.0.2.0/24 test; |
| } |
| |
| geo $arg_ip $geo_arg_ranges { |
| ranges; |
| default default; |
| 127.0.0.0-127.0.0.1 loopback; |
| |
| # ranges with two /16 networks |
| # the latter network has greater two least octets |
| # (see 1301a58b5dac for details) |
| 10.10.3.0-10.11.2.255 foo; |
| 10.12.3.0-10.13.2.255 foo2; |
| delete 10.10.3.0-10.11.2.255; |
| } |
| |
| geo $geo_proxy { |
| default default; |
| proxy 127.0.0.1; |
| 127.0.0.0/8 loopback; |
| 192.0.2.0/24 test; |
| } |
| |
| geo $geo_proxy_recursive { |
| proxy_recursive; |
| default default; |
| proxy 127.0.0.1; |
| 127.0.0.0/8 loopback; |
| 192.0.2.0/24 test; |
| } |
| |
| geo $geo_ranges { |
| ranges; |
| default default; |
| 127.0.0.0-127.255.255.255 loopback; |
| 192.0.2.0-192.0.2.255 test; |
| } |
| |
| geo $geo_ranges_include { |
| ranges; |
| default default; |
| include geo-ranges.conf; |
| 192.0.2.0-192.0.2.255 test; |
| } |
| |
| geo $geo_ranges_delete { |
| ranges; |
| default default; |
| 127.0.0.0-127.0.0.255 test; |
| 127.0.0.1-127.0.0.1 loopback; |
| delete 127.0.0.0-127.0.0.0; |
| delete 127.0.0.2-127.0.0.255; |
| delete 127.0.0.1-127.0.0.1; |
| } |
| |
| # delete range with two /16 |
| geo $geo_ranges_delete_2 { |
| ranges; |
| default default; |
| 127.0.0.0-127.1.0.0 loopback; |
| delete 127.0.0.0-127.1.0.0; |
| } |
| |
| geo $geo_before { |
| ranges; |
| default default; |
| 127.0.0.1-127.0.0.255 loopback; |
| 127.0.0.0-127.0.0.0 test; |
| } |
| |
| geo $geo_after { |
| ranges; |
| default default; |
| 127.0.0.0-127.0.0.1 loopback; |
| 127.0.0.2-127.0.0.255 test; |
| } |
| |
| geo $geo_insert { |
| ranges; |
| default default; |
| 127.0.0.0-127.0.0.255 test; |
| 127.0.0.1-127.0.0.2 test2; |
| 127.0.0.1-127.0.0.1 loopback; |
| } |
| |
| geo $geo_insert_before { |
| ranges; |
| default default; |
| 127.0.0.0-127.0.0.255 test; |
| 127.0.0.0-127.0.0.1 loopback; |
| } |
| |
| geo $geo_insert_after { |
| ranges; |
| default default; |
| 127.0.0.0-127.0.0.255 test; |
| 127.0.0.1-127.0.0.255 loopback; |
| } |
| |
| server { |
| listen 127.0.0.1:8080; |
| server_name localhost; |
| |
| location / { |
| add_header X-IP $remote_addr; |
| add_header X-Geo $geo; |
| add_header X-Inc $geo_include; |
| add_header X-Del $geo_delete; |
| add_header X-Ran $geo_ranges; |
| add_header X-RIn $geo_ranges_include; |
| add_header X-ABe $geo_before; |
| add_header X-AAf $geo_after; |
| add_header X-Ins $geo_insert; |
| add_header X-IBe $geo_insert_before; |
| add_header X-IAf $geo_insert_after; |
| add_header X-Arg $geo_from_arg; |
| add_header X-ARa $geo_arg_ranges; |
| add_header X-XFF $geo_proxy; |
| add_header X-XFR $geo_proxy_recursive; |
| } |
| |
| location /2 { |
| add_header X-RDe $geo_ranges_delete; |
| add_header X-RD2 $geo_ranges_delete_2; |
| } |
| } |
| } |
| |
| EOF |
| |
| $t->write_file('1', ''); |
| $t->write_file('2', ''); |
| $t->write_file('geo.conf', '127.0.0.0/8 loopback;'); |
| $t->write_file('geo-ranges.conf', '127.0.0.0-127.255.255.255 loopback;'); |
| |
| $t->run(); |
| |
| plan(skip_all => 'no 127.0.0.1 on host') |
| if http_get('/1') !~ /X-IP: 127.0.0.1/m; |
| |
| $t->plan(22); |
| |
| ############################################################################### |
| |
| my $r = http_get('/1'); |
| like($r, qr/^X-Geo: loopback/m, 'geo'); |
| like($r, qr/^X-Inc: loopback/m, 'geo include'); |
| like($r, qr/^X-Del: world/m, 'geo delete'); |
| like($r, qr/^X-Ran: loopback/m, 'geo ranges'); |
| like($r, qr/^X-RIn: loopback/m, 'geo ranges include'); |
| |
| like(http_get('/2'), qr/^X-RDe: default/m, 'geo ranges delete'); |
| like(http_get('/2'), qr/^X-RD2: default/m, 'geo ranges delete 2'); |
| |
| like($r, qr/^X-ABe: loopback/m, 'geo ranges add before'); |
| like($r, qr/^X-AAf: loopback/m, 'geo ranges add after'); |
| like($r, qr/^X-Ins: loopback/m, 'geo ranges insert'); |
| like($r, qr/^X-IBe: loopback/m, 'geo ranges insert before'); |
| like($r, qr/^X-IAf: loopback/m, 'geo ranges insert after'); |
| |
| like(http_get('/1?ip=192.0.2.1'), qr/^X-Arg: test/m, 'geo from variable'); |
| like(http_get('/1?ip=10.0.0.1'), qr/^X-Arg: default/m, 'geo default'); |
| like(http_get('/1?ip=10.0.0.1'), qr/^X-ARa: default/m, 'geo ranges default'); |
| like(http_get('/1?ip=10.13.2.1'), qr/^X-ARa: foo2/m, 'geo ranges add'); |
| like(http_get('/1?ip=10.11.2.1'), qr/^X-ARa: default/m, |
| 'geo delete range from variable'); |
| |
| like(http_xff('192.0.2.1'), qr/^X-XFF: test/m, 'geo proxy'); |
| like(http_xff('10.0.0.1'), qr/^X-XFF: default/m, 'geo proxy default'); |
| like(http_xff('10.0.0.1, 192.0.2.1'), qr/^X-XFF: test/m, 'geo proxy long'); |
| |
| like(http_xff('192.0.2.1, 127.0.0.1'), qr/^X-XFF: loopback/m, |
| 'geo proxy_recursive off'); |
| like(http_xff('192.0.2.1, 127.0.0.1'), qr/^X-XFR: test/m, |
| 'geo proxy_recursive on'); |
| |
| ############################################################################### |
| |
| sub http_xff { |
| my ($xff) = @_; |
| return http(<<EOF); |
| GET /1 HTTP/1.0 |
| Host: localhost |
| X-Forwarded-For: $xff |
| |
| EOF |
| } |
| |
| ############################################################################### |