2017-10-30 12:02:03 +03:00
package integration
import (
"net/http"
"os"
"time"
2019-08-03 04:58:23 +03:00
"github.com/containous/traefik/v2/integration/try"
2017-10-30 12:02:03 +03:00
"github.com/go-check/check"
checker "github.com/vdemeester/shakers"
)
type ProxyProtocolSuite struct { BaseSuite }
func ( s * ProxyProtocolSuite ) SetUpSuite ( c * check . C ) {
s . createComposeProject ( c , "proxy-protocol" )
s . composeProject . Start ( c )
}
func ( s * ProxyProtocolSuite ) TestProxyProtocolTrusted ( c * check . C ) {
gatewayIP := s . composeProject . Container ( c , "haproxy" ) . NetworkSettings . Gateway
haproxyIP := s . composeProject . Container ( c , "haproxy" ) . NetworkSettings . IPAddress
whoamiIP := s . composeProject . Container ( c , "whoami" ) . NetworkSettings . IPAddress
2019-08-26 15:40:04 +03:00
file := s . adaptFile ( c , "fixtures/proxy-protocol/with.toml" , struct {
HaproxyIP string
WhoamiIP string
} { HaproxyIP : haproxyIP , WhoamiIP : whoamiIP } )
defer os . Remove ( file )
cmd , display := s . traefikCmd ( withConfigFile ( file ) )
defer display ( c )
err := cmd . Start ( )
c . Assert ( err , checker . IsNil )
defer cmd . Process . Kill ( )
err = try . GetRequest ( "http://" + haproxyIP + "/whoami" , 500 * time . Millisecond ,
try . StatusCodeIs ( http . StatusOK ) ,
try . BodyContains ( "X-Forwarded-For: " + gatewayIP ) )
c . Assert ( err , checker . IsNil )
}
func ( s * ProxyProtocolSuite ) TestProxyProtocolV2Trusted ( c * check . C ) {
gatewayIP := s . composeProject . Container ( c , "haproxy" ) . NetworkSettings . Gateway
haproxyIP := s . composeProject . Container ( c , "haproxy" ) . NetworkSettings . IPAddress
whoamiIP := s . composeProject . Container ( c , "whoami" ) . NetworkSettings . IPAddress
2017-10-30 12:02:03 +03:00
file := s . adaptFile ( c , "fixtures/proxy-protocol/with.toml" , struct {
HaproxyIP string
WhoamiIP string
2019-08-26 15:40:04 +03:00
} { HaproxyIP : haproxyIP , WhoamiIP : whoamiIP } )
2017-10-30 12:02:03 +03:00
defer os . Remove ( file )
cmd , display := s . traefikCmd ( withConfigFile ( file ) )
defer display ( c )
err := cmd . Start ( )
c . Assert ( err , checker . IsNil )
defer cmd . Process . Kill ( )
2019-08-26 15:40:04 +03:00
err = try . GetRequest ( "http://" + haproxyIP + ":81/whoami" , 500 * time . Millisecond ,
try . StatusCodeIs ( http . StatusOK ) ,
try . BodyContains ( "X-Forwarded-For: " + gatewayIP ) )
2017-10-30 12:02:03 +03:00
c . Assert ( err , checker . IsNil )
}
func ( s * ProxyProtocolSuite ) TestProxyProtocolNotTrusted ( c * check . C ) {
haproxyIP := s . composeProject . Container ( c , "haproxy" ) . NetworkSettings . IPAddress
whoamiIP := s . composeProject . Container ( c , "whoami" ) . NetworkSettings . IPAddress
2019-08-26 15:40:04 +03:00
file := s . adaptFile ( c , "fixtures/proxy-protocol/without.toml" , struct {
HaproxyIP string
WhoamiIP string
} { HaproxyIP : haproxyIP , WhoamiIP : whoamiIP } )
defer os . Remove ( file )
cmd , display := s . traefikCmd ( withConfigFile ( file ) )
defer display ( c )
err := cmd . Start ( )
c . Assert ( err , checker . IsNil )
defer cmd . Process . Kill ( )
err = try . GetRequest ( "http://" + haproxyIP + "/whoami" , 500 * time . Millisecond ,
try . StatusCodeIs ( http . StatusOK ) ,
try . BodyContains ( "X-Forwarded-For: " + haproxyIP ) )
c . Assert ( err , checker . IsNil )
}
func ( s * ProxyProtocolSuite ) TestProxyProtocolV2NotTrusted ( c * check . C ) {
haproxyIP := s . composeProject . Container ( c , "haproxy" ) . NetworkSettings . IPAddress
whoamiIP := s . composeProject . Container ( c , "whoami" ) . NetworkSettings . IPAddress
2017-10-30 12:02:03 +03:00
file := s . adaptFile ( c , "fixtures/proxy-protocol/without.toml" , struct {
HaproxyIP string
WhoamiIP string
2019-08-26 15:40:04 +03:00
} { HaproxyIP : haproxyIP , WhoamiIP : whoamiIP } )
2017-10-30 12:02:03 +03:00
defer os . Remove ( file )
cmd , display := s . traefikCmd ( withConfigFile ( file ) )
defer display ( c )
err := cmd . Start ( )
c . Assert ( err , checker . IsNil )
defer cmd . Process . Kill ( )
2019-08-26 15:40:04 +03:00
err = try . GetRequest ( "http://" + haproxyIP + ":81/whoami" , 500 * time . Millisecond ,
try . StatusCodeIs ( http . StatusOK ) ,
try . BodyContains ( "X-Forwarded-For: " + haproxyIP ) )
2017-10-30 12:02:03 +03:00
c . Assert ( err , checker . IsNil )
}