vicarian 0.4.0

Vicarian is a TLS-first reverse-proxy server with ACME support
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123

use http::{
    HeaderMap, HeaderValue, header::{CACHE_CONTROL, CONTENT_ENCODING, CONTENT_TYPE},
};

// Compressible mime-types; generated from mime-db:
//
//     curl -fsSL "https://raw.githubusercontent.com/jshttp/mime-db/refs/heads/master/src/custom-types.json" \
//         | jq -r 'to_entries[] | select(.value.compressible == true) | .key' \
//         | sort
//
const COMPRESSIBLE: &[&str] = &[
    "application/dart",
    "application/ecmascript",
    "application/javascript",
    "application/json",
    "application/octet-stream",
    "application/postscript",
    "application/raml+yaml",
    "application/rdf+xml",
    "application/rtf",
    "application/tar",
    "application/toml",
    "application/vnd.dart",
    "application/vnd.ms-fontobject",
    "application/vnd.ms-opentype",
    "application/wasm",
    "application/x-httpd-php",
    "application/x-ipynb+json",
    "application/x-javascript",
    "application/xml",
    "application/xml-dtd",
    "application/x-ns-proxy-autoconfig",
    "application/x-sh",
    "application/x-tar",
    "application/x-virtualbox-hdd",
    "application/x-virtualbox-ova",
    "application/x-virtualbox-ovf",
    "application/x-virtualbox-vbox",
    "application/x-virtualbox-vdi",
    "application/x-virtualbox-vhd",
    "application/x-virtualbox-vmdk",
    "application/x-www-form-urlencoded",
    "application/yaml",
    "font/otf",
    "font/ttf",
    "image/bmp",
    "image/vnd.adobe.photoshop",
    "image/vnd.microsoft.icon",
    "image/vnd.ms-dds",
    "image/x-icon",
    "image/x-ms-bmp",
    "message/rfc822",
    "model/gltf-binary",
    "text/cache-manifest",
    "text/cmd",
    "text/css",
    "text/csv",
    "text/html",
    "text/javascript",
    "text/jsx",
    "text/less",
    "text/markdown",
    "text/mdx",
    "text/n3",
    "text/plain",
    "text/richtext",
    "text/rtf",
    "text/tab-separated-values",
    "text/uri-list",
    "text/vcard",
    "text/vtt",
    "text/x-component",
    "text/x-gwt-rpc",
    "text/x-jquery-tmpl",
    "text/x-markdown",
    "text/xml",
    "text/x-org",
    "text/x-php",
    "text/x-processing",
    "text/x-suse-ymp",
    "text/yaml",
    "x-shader/x-fragment",
    "x-shader/x-vertex",
];

const IDENTITY_ENC: &str = "identity";
const NO_TRANSFORM: &str = "no-transform";
const X_ACCEL_BUFFERING: &str = "x-accel-buffering";


pub fn is_compressible(headers: &HeaderMap<HeaderValue>) -> bool {
    // Not already compressed
    headers.get(CONTENT_ENCODING)
        .and_then(|v| v.to_str().ok())
        .is_none_or(|enc| enc.eq_ignore_ascii_case(IDENTITY_ENC))

        && // ... and not flagged no-buffering
        headers.get(X_ACCEL_BUFFERING)
        .and_then(|v| v.to_str().ok())
        .is_none_or(|enc| ! enc.eq_ignore_ascii_case("no"))

        && // ... and not flagged 'no-transform' (Cloudflare & haproxy honour this)
        headers.get(CACHE_CONTROL)
        .and_then(|v| v.to_str().ok())
        .map(str::to_ascii_lowercase)
        .is_none_or(|enc| !enc.contains(NO_TRANSFORM))

        && // ... and content-type is known compressible
        headers.get(CONTENT_TYPE)
        .and_then(|ct| ct.to_str().ok())
        .map(|ct| {
            // Trim trailing parameters (e.g: "...; charset=utf-8")
            let mime = &ct.split(';')
                .next().unwrap_or(ct)
                .trim()
                .to_ascii_lowercase();
             // See https://github.com/jshttp/mime-db/blob/master/src/custom-suffix.json
             mime.ends_with("+json")
             || mime.ends_with("+xml")
             || COMPRESSIBLE.contains(&mime.as_str())
        })
        .unwrap_or(false)
}