5 struct DOHServerConfig;
7 class DOHResponseMapEntry
10 DOHResponseMapEntry(const std::string& regex, uint16_t status, const std::string& content, const boost::optional<std::vector<std::pair<std::string, std::string>>>& headers): d_regex(regex), d_customHeaders(headers), d_content(content), d_status(status)
14 bool matches(const std::string& path) const
16 return d_regex.match(path);
19 uint16_t getStatusCode() const
24 const std::string& getContent() const
29 const boost::optional<std::vector<std::pair<std::string, std::string>>>& getHeaders() const
31 return d_customHeaders;
36 boost::optional<std::vector<std::pair<std::string, std::string>>> d_customHeaders;
37 std::string d_content;
45 d_rotatingTicketsKey.clear();
48 std::shared_ptr<DOHServerConfig> d_dsc{nullptr};
49 std::vector<std::pair<std::string, std::string>> d_certKeyPairs;
50 std::vector<std::string> d_ocspFiles;
51 std::vector<std::shared_ptr<DOHResponseMapEntry>> d_responsesMap;
52 std::string d_ciphers;
53 std::string d_ciphers13;
54 std::string d_serverTokens{"h2o/dnsdist"};
55 LibsslTLSVersion d_minTLSVersion{LibsslTLSVersion::TLS10};
56 #ifdef HAVE_DNS_OVER_HTTPS
57 std::unique_ptr<OpenSSLTLSTicketKeysRing> d_ticketKeys{nullptr};
59 std::vector<std::pair<std::string, std::string>> d_customResponseHeaders;
62 uint32_t d_idleTimeout{30}; // HTTP idle timeout in seconds
63 std::vector<std::string> d_urls;
64 std::string d_ticketKeyFile;
66 time_t d_ticketsKeyRotationDelay{43200};
67 size_t d_maxStoredSessions{20480};
68 uint8_t d_numberOfTicketsKeys{5};
69 bool d_enableTickets{true};
70 bool d_preferServerCiphers{false};
72 std::atomic<uint64_t> d_httpconnects; // number of TCP/IP connections established
73 std::atomic<uint64_t> d_tls10queries; // valid DNS queries received via TLSv1.0
74 std::atomic<uint64_t> d_tls11queries; // valid DNS queries received via TLSv1.1
75 std::atomic<uint64_t> d_tls12queries; // valid DNS queries received via TLSv1.2
76 std::atomic<uint64_t> d_tls13queries; // valid DNS queries received via TLSv1.3
77 std::atomic<uint64_t> d_tlsUnknownqueries; // valid DNS queries received via unknown TLS version
79 std::atomic<uint64_t> d_getqueries; // valid DNS queries received via GET
80 std::atomic<uint64_t> d_postqueries; // valid DNS queries received via POST
81 std::atomic<uint64_t> d_badrequests; // request could not be converted to dns query
82 std::atomic<uint64_t> d_errorresponses; // dnsdist set 'error' on response
83 std::atomic<uint64_t> d_redirectresponses; // dnsdist set 'redirect' on response
84 std::atomic<uint64_t> d_validresponses; // valid responses sent out
86 struct HTTPVersionStats
88 std::atomic<uint64_t> d_nbQueries{0}; // valid DNS queries received
89 std::atomic<uint64_t> d_nb200Responses{0};
90 std::atomic<uint64_t> d_nb400Responses{0};
91 std::atomic<uint64_t> d_nb403Responses{0};
92 std::atomic<uint64_t> d_nb500Responses{0};
93 std::atomic<uint64_t> d_nb502Responses{0};
94 std::atomic<uint64_t> d_nbOtherResponses{0};
97 HTTPVersionStats d_http1Stats;
98 HTTPVersionStats d_http2Stats;
101 #ifndef HAVE_DNS_OVER_HTTPS
106 void reloadCertificates()
110 void rotateTicketsKey(time_t now)
114 void loadTicketsKeys(const std::string& keyFile)
118 void handleTicketsKeyRotation()
124 void reloadCertificates();
126 void rotateTicketsKey(time_t now);
127 void loadTicketsKeys(const std::string& keyFile);
128 void handleTicketsKeyRotation();
130 #endif /* HAVE_DNS_OVER_HTTPS */
133 time_t d_ticketsKeyNextRotation{0};
134 std::atomic_flag d_rotatingTicketsKey;
137 #ifndef HAVE_DNS_OVER_HTTPS
142 #else /* HAVE_DNS_OVER_HTTPS */
143 #include <unordered_map>
150 std::string response;
153 st_h2o_req_t* req{nullptr};
154 DOHUnit** self{nullptr};
155 std::string contentType;
158 /* the status_code is set from
159 processDOHQuery() (which is executed in
160 the DOH client thread) so that the correct
161 response can be sent in on_dnsdist(),
162 after the DOHUnit has been passed back to
165 uint16_t status_code{200};
166 bool ednsAdded{false};
168 std::string getHTTPPath() const;
169 std::string getHTTPHost() const;
170 std::string getHTTPScheme() const;
171 std::string getHTTPQueryString() const;
172 std::unordered_map<std::string, std::string> getHTTPHeaders() const;
173 void setHTTPResponse(uint16_t statusCode, const std::string& body, const std::string& contentType="");
176 #endif /* HAVE_DNS_OVER_HTTPS */
178 void handleDOHTimeout(DOHUnit* oldDU);