搜索限制

This commit is contained in:
xing 2022-10-02 10:58:48 +08:00
parent 8efddea822
commit 0ddd39e209
3 changed files with 32 additions and 34 deletions

View File

@ -13,7 +13,7 @@ import (
type IpLimitMap struct { type IpLimitMap struct {
mux *sync.Mutex mux *sync.Mutex
m map[string]int m map[string]*int64
} }
func FlowLimit() func(ctx *gin.Context) { func FlowLimit() func(ctx *gin.Context) {
@ -25,7 +25,7 @@ func FlowLimit() func(ctx *gin.Context) {
} }
m := IpLimitMap{ m := IpLimitMap{
mux: &sync.Mutex{}, mux: &sync.Mutex{},
m: make(map[string]int), m: make(map[string]*int64),
} }
statPath := map[string]struct{}{ statPath := map[string]struct{}{
"wp-includes": {}, "wp-includes": {},
@ -39,56 +39,54 @@ func FlowLimit() func(ctx *gin.Context) {
c.Next() c.Next()
return return
} }
s := false
ip := c.ClientIP() ip := c.ClientIP()
if m.searchLimit(true, c, ip, f) { defer m.searchLimit(false, c, ip, f, &s)
if m.searchLimit(true, c, ip, f, &s) {
c.Abort() c.Abort()
return return
} }
atomic.AddInt64(&flow, 1) atomic.AddInt64(&flow, 1)
defer func() {
atomic.AddInt64(&flow, -1)
}()
if flow >= vars.Conf.MaxRequestSleepNum && flow <= vars.Conf.MaxRequestNum { if flow >= vars.Conf.MaxRequestSleepNum && flow <= vars.Conf.MaxRequestNum {
t := randFn(vars.Conf.SleepTime[0], vars.Conf.SleepTime[1]) t := randFn(vars.Conf.SleepTime[0], vars.Conf.SleepTime[1])
time.Sleep(t) time.Sleep(t)
} else if flow > vars.Conf.MaxRequestNum { } else if flow > vars.Conf.MaxRequestNum {
c.String(http.StatusForbidden, "请求太多了,服务器君压力山大中==!, 请稍后访问") c.String(http.StatusForbidden, "请求太多了,服务器君压力山大中==!, 请稍后访问")
c.Abort() c.Abort()
atomic.AddInt64(&flow, -1)
m.searchLimit(false, c, ip, f)
return return
} }
c.Next() c.Next()
m.searchLimit(false, c, ip, f)
atomic.AddInt64(&flow, -1)
} }
} }
func (m *IpLimitMap) set(k string, n int) { func (m *IpLimitMap) searchLimit(start bool, c *gin.Context, ip string, f []string, s *bool) (isForbid bool) {
m.mux.Lock()
defer m.mux.Unlock()
m.m[k] = n
}
func (m *IpLimitMap) searchLimit(a bool, c *gin.Context, ip string, f []string) (isForbid bool) {
if f[0] == "" && c.Query("s") != "" { if f[0] == "" && c.Query("s") != "" {
if a { if start {
i, ok := m.m[ip] i, ok := m.m[ip]
if ok { num := vars.Conf.SingleIpSearchNum
num := vars.Conf.SingleIpSearchNum if !ok {
if num < 1 { m.mux.Lock()
num = 10 i = new(int64)
} m.m[ip] = i
if i > num { m.mux.Unlock()
return true
}
} else {
i = 0
} }
i++ if num > 0 && *i >= num {
m.set(ip, i) isForbid = true
} else { return
m.set(ip, m.m[ip]-1) }
if m.m[ip] == 0 { *s = true
atomic.AddInt64(i, 1)
return
}
i, ok := m.m[ip]
if ok && *s && *i > 0 {
atomic.AddInt64(i, -1)
if *i == 0 {
m.mux.Lock() m.mux.Lock()
delete(m.m, ip) delete(m.m, ip)
m.mux.Unlock() m.mux.Unlock()

View File

@ -27,7 +27,7 @@ func SetupRouter() *gin.Engine {
return t.Format("2006年 01月 02日") return t.Format("2006年 01月 02日")
}, },
}).SetTemplate() }).SetTemplate()
r.Use(gin.Logger(), gin.Recovery(), middleware.FlowLimit(), middleware.SetStaticFileCache) r.Use(gin.Logger(), middleware.FlowLimit(), gin.Recovery(), middleware.SetStaticFileCache)
//gzip 因为一般会用nginx做反代时自动使用gzip,所以go这边本身可以不用 //gzip 因为一般会用nginx做反代时自动使用gzip,所以go这边本身可以不用
/*r.Use(gzip.Gzip(gzip.DefaultCompression, gzip.WithExcludedPaths([]string{ /*r.Use(gzip.Gzip(gzip.DefaultCompression, gzip.WithExcludedPaths([]string{
"/wp-includes/", "/wp-content/", "/wp-includes/", "/wp-content/",

View File

@ -27,7 +27,7 @@ type Config struct {
MaxRequestSleepNum int64 `yaml:"maxRequestSleepNum"` MaxRequestSleepNum int64 `yaml:"maxRequestSleepNum"`
SleepTime []time.Duration `yaml:"sleepTime"` SleepTime []time.Duration `yaml:"sleepTime"`
MaxRequestNum int64 `yaml:"maxRequestNum"` MaxRequestNum int64 `yaml:"maxRequestNum"`
SingleIpSearchNum int `yaml:"singleIpSearchNum"` SingleIpSearchNum int64 `yaml:"singleIpSearchNum"`
} }
type Mysql struct { type Mysql struct {