orca-proxy 0.3.0-rc.5

Reverse proxy with HTTP routing and Wasm trigger dispatch
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

//! #192: an upstream failure must not echo the backend's internal address.

use std::collections::HashMap;
use std::sync::Arc;
use std::time::Duration;

use orca_proxy::{RouteTarget, run_proxy_with_fallback};
use tokio::net::{TcpListener, TcpStream};
use tokio::sync::RwLock;

async fn free_port() -> u16 {
    TcpListener::bind("127.0.0.1:0")
        .await
        .unwrap()
        .local_addr()
        .unwrap()
        .port()
}

/// #206: hostnames are case-insensitive; a mixed-case Host must route.
#[tokio::test]
async fn a_mixed_case_host_header_is_routed() {
    let dead = free_port().await;
    let routes = Arc::new(RwLock::new(HashMap::from([(
        "app.test".to_string(),
        vec![RouteTarget {
            address: format!("127.0.0.1:{dead}"),
            service_name: "app".into(),
            path_pattern: None,
            weight: 100,
            strip_prefix: None,
        }],
    )])));
    let port = free_port().await;
    let triggers = Arc::new(RwLock::new(Vec::new()));
    tokio::spawn(async move {
        let _ = run_proxy_with_fallback(routes, triggers, None, port, None, None, None).await;
    });
    while TcpStream::connect(("127.0.0.1", port)).await.is_err() {
        tokio::time::sleep(Duration::from_millis(50)).await;
    }

    let resp = reqwest::Client::new()
        .get(format!("http://127.0.0.1:{port}/"))
        .header("host", "App.Test")
        .send()
        .await
        .unwrap();

    // Routed to the (dead) backend: 502, not the unknown-host 404.
    assert_eq!(resp.status(), 502);
}

#[tokio::test]
async fn a_dead_backend_gives_a_502_without_leaking_its_address() {
    let dead = free_port().await;
    let routes = Arc::new(RwLock::new(HashMap::from([(
        "app.test".to_string(),
        vec![RouteTarget {
            address: format!("127.0.0.1:{dead}"),
            service_name: "app".into(),
            path_pattern: None,
            weight: 100,
            strip_prefix: None,
        }],
    )])));
    let port = free_port().await;
    let triggers = Arc::new(RwLock::new(Vec::new()));
    tokio::spawn(async move {
        let _ = run_proxy_with_fallback(routes, triggers, None, port, None, None, None).await;
    });
    while TcpStream::connect(("127.0.0.1", port)).await.is_err() {
        tokio::time::sleep(Duration::from_millis(50)).await;
    }

    let resp = reqwest::Client::new()
        .get(format!("http://127.0.0.1:{port}/"))
        .header("host", "app.test")
        .send()
        .await
        .unwrap();
    let status = resp.status();
    let body = resp.text().await.unwrap();

    assert_eq!(status, 502);
    assert!(
        !body.contains("127.0.0.1"),
        "internal address leaked: {body}"
    );
}