reductstore 1.19.8

ReductStore is a time series database designed specifically for storing and managing large amounts of blob data.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

// Copyright 2021-2026 ReductSoftware UG
// Licensed under the Apache License, Version 2.0

use axum::body::Body;
use axum::extract::ConnectInfo;
use axum::http::{HeaderMap, Request};
use std::net::{IpAddr, Ipv4Addr, Ipv6Addr, SocketAddr};

pub(super) fn client_ip_from_request(request: &Request<Body>) -> Option<IpAddr> {
    let peer_ip = request
        .extensions()
        .get::<ConnectInfo<SocketAddr>>()
        .map(|connect_info| connect_info.0.ip())?;

    if is_trusted_proxy(peer_ip) {
        Some(client_ip_from_forward_headers(request.headers()).unwrap_or(peer_ip))
    } else {
        Some(peer_ip)
    }
}

fn is_trusted_proxy(ip: IpAddr) -> bool {
    match ip {
        IpAddr::V4(ip) => is_trusted_proxy_v4(ip),
        IpAddr::V6(ip) => is_trusted_proxy_v6(ip),
    }
}

fn is_trusted_proxy_v4(ip: Ipv4Addr) -> bool {
    ip.is_loopback() || ip.is_private() || ip.is_link_local()
}

fn is_trusted_proxy_v6(ip: Ipv6Addr) -> bool {
    ip.is_loopback() || ip.is_unique_local() || ip.is_unicast_link_local()
}

fn client_ip_from_forward_headers(headers: &HeaderMap) -> Option<IpAddr> {
    if let Some(value) = headers.get("forwarded").and_then(|v| v.to_str().ok()) {
        if let Some(ip) = parse_forwarded_for(value) {
            return Some(ip);
        }
    }

    headers
        .get("x-forwarded-for")
        .and_then(|v| v.to_str().ok())
        .and_then(parse_x_forwarded_for)
}

pub(super) fn parse_x_forwarded_for(value: &str) -> Option<IpAddr> {
    value
        .split(',')
        .next()
        .map(str::trim)
        .and_then(|ip| ip.parse::<IpAddr>().ok())
}

pub(super) fn parse_forwarded_for(value: &str) -> Option<IpAddr> {
    for part in value.split(';') {
        let mut kv = part.splitn(2, '=');
        let key = kv.next()?.trim();
        let val = kv.next()?.trim();
        if key.eq_ignore_ascii_case("for") {
            let token = val.trim_matches('"').trim();
            let token = token
                .strip_prefix('[')
                .and_then(|t| t.strip_suffix(']'))
                .unwrap_or(token);

            if let Ok(ip) = token.parse::<IpAddr>() {
                return Some(ip);
            }

            if token.matches(':').count() == 1 {
                if let Some((ip, _port)) = token.split_once(':') {
                    if let Ok(ip) = ip.parse::<IpAddr>() {
                        return Some(ip);
                    }
                }
            }
        }
    }
    None
}