ead41055ca
Add nested rules Add backend action, allow wildcard in backends Remove poison from tree, update README with action table Allow defining pass/fail actions on challenge, Remove redirect/referer parameters on backend pass Set challenge cookie tied to host Rewrite DNSBL condition into a challenge Allow passing an arbitrary path for assets to js challenges Optimize programs exhaustively on compilation Activation instead of map for CEL context, faster map access, new network override Return valid host on cookie setting in case Host is an IP address. bug: does not work with IPv6, see https://github.com/golang/go/issues/65521 Apply TLS fingerprinter on GetConfigForClient instead of GetCertificate Cleanup go-away cookies before passing to backend Code action for specifically replying with an HTTP code
41 lines
1.2 KiB
Go
41 lines
1.2 KiB
Go
package policy
|
|
|
|
import "github.com/goccy/go-yaml/ast"
|
|
|
|
type RuleAction string
|
|
|
|
const (
|
|
// RuleActionNONE Does nothing. Useful for parent rules when children want to be specified
|
|
RuleActionNONE RuleAction = "NONE"
|
|
// RuleActionPASS Passes the connection immediately
|
|
RuleActionPASS RuleAction = "PASS"
|
|
// RuleActionDENY Denies the connection with a fancy page
|
|
RuleActionDENY RuleAction = "DENY"
|
|
// RuleActionBLOCK Denies the connection with a response code
|
|
RuleActionBLOCK RuleAction = "BLOCK"
|
|
// RuleActionCODE Returns a specified HTTP code
|
|
RuleActionCODE RuleAction = "CODE"
|
|
|
|
// RuleActionDROP Drops the connection without sending a reply
|
|
RuleActionDROP RuleAction = "DROP"
|
|
|
|
// RuleActionCHALLENGE Issues a challenge that when passed, passes the connection
|
|
RuleActionCHALLENGE RuleAction = "CHALLENGE"
|
|
// RuleActionCHECK Issues a challenge that when passed, continues checking rules
|
|
RuleActionCHECK RuleAction = "CHECK"
|
|
|
|
// RuleActionPROXY Proxies request to a backend, with optional path replacements
|
|
RuleActionPROXY RuleAction = "PROXY"
|
|
)
|
|
|
|
type Rule struct {
|
|
Name string `yaml:"name"`
|
|
Conditions []string `yaml:"conditions"`
|
|
|
|
Action string `yaml:"action"`
|
|
|
|
Settings ast.Node `yaml:"settings"`
|
|
|
|
Children []Rule `yaml:"children"`
|
|
}
|