Skip to main content

rust_web_server/server/
mod.rs

1#[cfg(test)]
2pub mod tests;
3#[cfg(test)]
4mod example;
5
6use std::io::prelude::*;
7use std::borrow::Borrow;
8use std::net::{IpAddr, SocketAddr, TcpListener};
9use std::str::FromStr;
10use std::time::Duration;
11
12use crate::request::{METHOD, Request};
13use crate::response::{Response, STATUS_CODE_REASON_PHRASE};
14use crate::app::App;
15use crate::application::Application;
16use crate::entry_point::{bootstrap, get_ip_port_thread_count, get_request_allocation_size, set_default_values};
17use crate::header::Header;
18use crate::log::Log;
19use crate::mime_type::MimeType;
20use crate::range::{ContentRange, Range};
21use crate::symbol::SYMBOL;
22use crate::thread_pool::ThreadPool;
23
24pub struct Server {}
25impl Server {
26    pub fn process_request(mut stream: impl Read + Write + Unpin, peer_addr: SocketAddr) -> Vec<u8> {
27        let request_allocation_size = get_request_allocation_size();
28        let mut buffer = vec![0; request_allocation_size as usize];
29        let boxed_read = stream.read(&mut buffer);
30        if boxed_read.is_err() {
31            let message = boxed_read.err().unwrap().to_string();
32            eprintln!("unable to read TCP stream {}", &message);
33
34            let raw_response = Server::bad_request_response(message);
35            let boxed_stream = stream.write(raw_response.borrow());
36            if boxed_stream.is_ok() {
37                stream.flush().unwrap();
38            };
39            return raw_response;
40        }
41
42        boxed_read.unwrap();
43        let request : &[u8] = &buffer;
44
45        // let raw_request = String::from_utf8(Vec::from(request)).unwrap();
46        // println!("\n\n______{}______\n\n", raw_request);
47
48
49        let boxed_request = Request::parse_request(request);
50        if boxed_request.is_err() {
51            let message = boxed_request.err().unwrap();
52            eprintln!("unable to parse request: {}", &message);
53
54            let raw_response = Server::bad_request_response(message);
55            let boxed_stream = stream.write(raw_response.borrow());
56            if boxed_stream.is_ok() {
57                stream.flush().unwrap();
58            };
59            return raw_response;
60        }
61
62
63        let request: Request = boxed_request.unwrap();
64        let (response, request) = App::handle_request(request);
65
66
67        let log_request_response = Log::combined(&request, &response, &peer_addr);
68        println!("{}", log_request_response);
69        let raw_response = Response::generate_response(response, request);
70
71        let boxed_stream = stream.write(raw_response.borrow());
72        if boxed_stream.is_ok() {
73            stream.flush().unwrap();
74        };
75
76        raw_response
77    }
78
79    pub fn bad_request_response(message: String) -> Vec<u8> {
80        let error_request = Request {
81            method: METHOD.get.to_string(),
82            request_uri: "".to_string(),
83            http_version: "".to_string(),
84            headers: vec![],
85            body: vec![],
86        };
87
88        let size = message.chars().count() as u64;
89        let content_range = ContentRange {
90            unit: Range::BYTES.to_string(),
91            range: Range { start: 0, end: size },
92            size: size.to_string(),
93            body: Vec::from(message.as_bytes()),
94            content_type: MimeType::TEXT_PLAIN.to_string(),
95        };
96
97        let header_list = Header::get_header_list(&error_request);
98        let error_response: Response = Response::get_response(
99            STATUS_CODE_REASON_PHRASE.n400_bad_request,
100            Some(header_list),
101            Some(vec![content_range])
102        );
103
104        let response = Response::generate_response(error_response, error_request);
105        return response;
106    }
107
108    pub fn process(mut stream: impl Read + Write + Unpin,
109                   connection: ConnectionInfo,
110                   app: impl Application) -> Result<(), String> {
111        use crate::http::VERSION;
112
113        let request_allocation_size = connection.request_size;
114        let client = connection.client.clone();
115        let client_addr = SocketAddr::new(IpAddr::from_str(client.ip.as_str()).unwrap(), client.port as u16);
116
117        loop {
118            let mut buffer = vec![0; request_allocation_size as usize];
119            let boxed_read = stream.read(&mut buffer);
120            if boxed_read.is_err() {
121                // timeout or client closed — normal end of keep-alive session
122                break;
123            }
124            if boxed_read.unwrap() == 0 {
125                break;
126            }
127
128            let request = match Request::parse(&buffer) {
129                Ok(r) => r,
130                Err(message) => {
131                    let raw_response = Server::bad_request_response(message.clone());
132                    let boxed_stream = stream.write(raw_response.borrow());
133                    if boxed_stream.is_ok() { stream.flush().unwrap(); }
134                    return Err(message);
135                }
136            };
137
138            let keep_alive = {
139                let conn_hdr = request.get_header(Header::_CONNECTION.to_string());
140                match conn_hdr {
141                    Some(h) => h.value.to_lowercase() != "close",
142                    None => request.http_version == VERSION.http_1_1,
143                }
144            };
145
146            let mut response = match app.execute(&request, &connection) {
147                Ok(r) => r,
148                Err(message) => {
149                    let raw_response = Server::bad_request_response(message.clone());
150                    let boxed_stream = stream.write(raw_response.borrow());
151                    if boxed_stream.is_ok() { stream.flush().unwrap(); }
152                    return Err(message);
153                }
154            };
155
156            crate::metrics::record_request();
157            crate::compression::apply_gzip(&request, &mut response);
158
159            response.headers.push(Header {
160                name: Header::_CONNECTION.to_string(),
161                value: if keep_alive { "keep-alive".to_string() } else { "close".to_string() },
162            });
163
164            Log::log_access(&request, &response, &client_addr);
165
166            if let Some(ref filepath) = response.stream_file.clone() {
167                if let Err(e) = Server::write_chunked_file(&mut stream, response, request, filepath) {
168                    return Err(e);
169                }
170            } else {
171                let raw_response = Response::generate_response(response, request);
172                if let Err(e) = stream.write(raw_response.borrow()) {
173                    return Err(e.to_string());
174                }
175                stream.flush().unwrap();
176            }
177
178            if !keep_alive { break; }
179        }
180
181        Ok(())
182    }
183
184    /// Streams a file to `stream` using HTTP/1.1 chunked transfer encoding.
185    /// The response headers are written first, then the file is read and written in 64 KB chunks.
186    pub(crate) fn write_chunked_file(
187        stream: &mut impl Write,
188        mut response: Response,
189        request: Request,
190        filepath: &str,
191    ) -> Result<(), String> {
192        use std::fs::File;
193        use std::io::Read as _;
194
195        response.headers.push(Header {
196            name: Header::_TRANSFER_ENCODING.to_string(),
197            value: "chunked".to_string(),
198        });
199
200        // build status line + headers (no body)
201        let status = [
202            response.http_version.clone(),
203            response.status_code.to_string(),
204            response.reason_phrase.clone(),
205        ].join(SYMBOL.whitespace);
206
207        let mut headers_str = SYMBOL.new_line_carriage_return.to_string();
208        for header in &response.headers {
209            headers_str.push_str(&header.name);
210            headers_str.push_str(Header::NAME_VALUE_SEPARATOR);
211            headers_str.push_str(&header.value);
212            headers_str.push_str(SYMBOL.new_line_carriage_return);
213        }
214        let head = format!("{}{}{}", status, headers_str, SYMBOL.new_line_carriage_return);
215
216        stream.write_all(head.as_bytes()).map_err(|e| e.to_string())?;
217
218        if request.method != METHOD.head && request.method != METHOD.options {
219            let mut file = File::open(filepath).map_err(|e| e.to_string())?;
220            let mut buf = vec![0u8; 65536];
221            loop {
222                let n = file.read(&mut buf).map_err(|e| e.to_string())?;
223                if n == 0 { break; }
224                // chunk header: hex size + CRLF
225                stream.write_all(format!("{:x}\r\n", n).as_bytes()).map_err(|e| e.to_string())?;
226                stream.write_all(&buf[..n]).map_err(|e| e.to_string())?;
227                stream.write_all(b"\r\n").map_err(|e| e.to_string())?;
228            }
229            // terminal chunk
230            stream.write_all(b"0\r\n\r\n").map_err(|e| e.to_string())?;
231        }
232
233        stream.flush().map_err(|e| e.to_string())
234    }
235
236    /// Reads configuration (IP, port, thread count, TLS paths) from the layered config system
237    /// and returns a bound `TcpListener` and a sized `ThreadPool`. Call once at startup.
238    pub fn setup() -> Result<(TcpListener, ThreadPool), String> {
239        let info = Log::info("Rust Web Server");
240        println!("{}", info);
241
242        let usage_info = Log::usage_information();
243        println!("{}", usage_info);
244
245
246        println!("RWS Configuration Start: \n");
247
248        set_default_values();
249        bootstrap();
250
251        println!("\nRWS Configuration End\n\n");
252
253
254        let (ip, port, thread_count) = get_ip_port_thread_count();
255
256
257        let mut ip_readable = ip.to_string();
258
259        if ip.contains(":") {
260            ip_readable = [SYMBOL.opening_square_bracket, &ip, SYMBOL.closing_square_bracket].join("");
261        }
262
263        let bind_addr = [ip_readable, SYMBOL.colon.to_string(), port.to_string()].join(SYMBOL.empty_string);
264
265        #[cfg(feature = "http2")]
266        let protocol = {
267            let cert = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_CERT_FILE).unwrap_or_default();
268            if cert.is_empty() { "http" } else { "https" }
269        };
270        #[cfg(not(feature = "http2"))]
271        let protocol = "http";
272
273        println!("Setting up {}://{}...", protocol, &bind_addr);
274
275        let boxed_listener = TcpListener::bind(&bind_addr);
276        if boxed_listener.is_err() {
277            let message = format!("unable to set up TCP listener: {}", boxed_listener.err().unwrap());
278            return Err(message);
279        }
280
281        let listener = boxed_listener.unwrap();
282        let pool = ThreadPool::new(thread_count as usize);
283
284
285        let server_url_thread_count = Log::server_url_thread_count(protocol, &bind_addr, thread_count);
286        println!("{}", server_url_thread_count);
287
288        Ok((listener, pool))
289    }
290
291    /// Accepts TCP connections in a loop and dispatches each to the thread pool.
292    ///
293    /// When built with the `http1` feature, Ctrl+C and SIGTERM stop the accept
294    /// loop gracefully: `SERVER_READY` is cleared and the pool drains all
295    /// in-flight connections before returning.
296    ///
297    /// For TLS/HTTP2/HTTP3 use [`Server::run_tls`].
298    pub fn run(listener: TcpListener,
299               pool: ThreadPool,
300               app: impl Application + Send + 'static + Clone) {
301        #[cfg(feature = "http1")]
302        {
303            use std::sync::Arc;
304            use std::sync::atomic::{AtomicBool, Ordering};
305
306            let shutdown = Arc::new(AtomicBool::new(false));
307            let s = shutdown.clone();
308            if let Err(e) = ctrlc::set_handler(move || {
309                s.store(true, Ordering::SeqCst);
310            }) {
311                eprintln!("unable to install signal handler: {}", e);
312            }
313            crate::config_reload::install_sighup_handler();
314            if let Err(e) = listener.set_nonblocking(true) {
315                eprintln!("unable to set non-blocking listener: {}", e);
316            }
317
318            loop {
319                if shutdown.load(Ordering::SeqCst) {
320                    break;
321                }
322                if crate::config_reload::RELOAD_REQUESTED
323                    .compare_exchange(true, false, Ordering::SeqCst, Ordering::Relaxed)
324                    .is_ok()
325                {
326                    crate::config_reload::reload();
327                }
328                match listener.accept() {
329                    Ok((stream, peer_addr)) => {
330                        Server::dispatch_connection(stream, peer_addr, &pool, app.clone());
331                    }
332                    Err(ref e) if e.kind() == std::io::ErrorKind::WouldBlock => {
333                        std::thread::sleep(Duration::from_millis(10));
334                    }
335                    Err(e) => {
336                        eprintln!("accept error: {}", e);
337                        break;
338                    }
339                }
340            }
341
342            crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
343            println!("Shutting down — waiting for in-flight connections to finish");
344            pool.join();
345            println!("Server stopped");
346        }
347
348        #[cfg(not(feature = "http1"))]
349        {
350            for boxed_stream in listener.incoming() {
351                match boxed_stream {
352                    Err(e) => {
353                        eprintln!("unable to get TCP stream: {}", e);
354                        return;
355                    }
356                    Ok(stream) => {
357                        let peer_addr = match stream.peer_addr() {
358                            Ok(a) => a,
359                            Err(e) => {
360                                eprintln!("unable to read peer addr: {}", e);
361                                return;
362                            }
363                        };
364                        Server::dispatch_connection(stream, peer_addr, &pool, app.clone());
365                    }
366                }
367            }
368        }
369    }
370
371    fn dispatch_connection(
372        stream: std::net::TcpStream,
373        peer_addr: std::net::SocketAddr,
374        pool: &ThreadPool,
375        app: impl Application + Send + 'static + Clone,
376    ) {
377        print!("Connection established, ");
378        if let Ok(local) = stream.local_addr() {
379            print!("local addr: {}", local);
380        }
381        println!(", peer addr: {}", peer_addr);
382
383        let (server_ip, server_port, _thread_count) = get_ip_port_thread_count();
384        let connection = ConnectionInfo {
385            client: Address {
386                ip: peer_addr.ip().to_string(),
387                port: peer_addr.port() as i32,
388            },
389            server: Address {
390                ip: server_ip,
391                port: server_port,
392            },
393            request_size: get_request_allocation_size(),
394        };
395
396        if let Err(e) = stream.set_read_timeout(Some(Duration::from_secs(30))) {
397            eprintln!("failed to set read timeout: {}", e);
398        }
399
400        pool.execute(move || {
401            crate::metrics::connection_open();
402            let result = Server::process(stream, connection, app);
403            crate::metrics::connection_close();
404            if let Err(msg) = result {
405                crate::metrics::record_error();
406                eprintln!("{}", msg);
407            }
408        });
409    }
410
411}
412
413/// Network context for the current connection, passed into every [`Controller`](crate::controller::Controller).
414#[derive(Clone)]
415pub struct ConnectionInfo {
416    /// Client (peer) address.
417    pub client: Address,
418    /// Server (local) address.
419    pub server: Address,
420    /// Bytes allocated for reading the request.
421    pub request_size: i64
422}
423
424/// IP address and port pair.
425#[derive(Clone)]
426pub struct Address {
427    pub ip: String,
428    pub port: i32
429}
430
431impl ConnectionInfo {
432    /// Parse the client address into a [`std::net::SocketAddr`], if the stored
433    /// IP and port are valid. Returns `None` if parsing fails.
434    pub fn peer_addr(&self) -> Option<std::net::SocketAddr> {
435        self.client.to_socket_addr()
436    }
437}
438
439impl Address {
440    /// Parse this address into a [`std::net::SocketAddr`]. Returns `None` if
441    /// the IP string or port value cannot be converted.
442    pub fn to_socket_addr(&self) -> Option<std::net::SocketAddr> {
443        let ip: std::net::IpAddr = self.ip.parse().ok()?;
444        let port = u16::try_from(self.port).ok()?;
445        Some(std::net::SocketAddr::new(ip, port))
446    }
447}
448
449/// Resolves when SIGTERM is received on Unix, or never on other platforms.
450/// Enables a single `select!` branch to handle both SIGTERM and Ctrl+C.
451#[cfg(feature = "http2")]
452async fn sigterm() {
453    #[cfg(unix)]
454    {
455        if let Ok(mut s) = tokio::signal::unix::signal(
456            tokio::signal::unix::SignalKind::terminate()
457        ) {
458            s.recv().await;
459        } else {
460            std::future::pending::<()>().await
461        }
462    }
463    #[cfg(not(unix))]
464    std::future::pending::<()>().await
465}
466
467/// Returns a stream that fires on each SIGHUP on Unix; never fires elsewhere.
468#[cfg(feature = "http2")]
469async fn sighup() {
470    #[cfg(unix)]
471    {
472        if let Ok(mut s) = tokio::signal::unix::signal(
473            tokio::signal::unix::SignalKind::hangup()
474        ) {
475            s.recv().await;
476        } else {
477            std::future::pending::<()>().await
478        }
479    }
480    #[cfg(not(unix))]
481    std::future::pending::<()>().await
482}
483
484#[cfg(feature = "http2")]
485impl Server {
486    pub async fn run_tls(
487        listener: TcpListener,
488        pool: ThreadPool,
489        app: impl Application + Send + 'static + Clone,
490    ) {
491        use crate::tls::create_tls_acceptor;
492        use crate::h2_handler;
493
494        let cert_path = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_CERT_FILE)
495            .unwrap_or_default();
496        let key_path = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_KEY_FILE)
497            .unwrap_or_default();
498
499        if cert_path.is_empty() || key_path.is_empty() {
500            println!("No TLS certificate configured — serving plain HTTP/1.1.");
501            tokio::task::block_in_place(|| Server::run(listener, pool, app));
502            return;
503        }
504
505        let mut tls_acceptor = match create_tls_acceptor(&cert_path, &key_path) {
506            Ok(a) => a,
507            Err(e) => {
508                eprintln!("TLS setup failed: {}", e);
509                return;
510            }
511        };
512
513        listener
514            .set_nonblocking(true)
515            .expect("failed to set TCP listener to non-blocking");
516        let tokio_listener = tokio::net::TcpListener::from_std(listener)
517            .expect("failed to convert TCP listener to tokio");
518
519        println!("Listening for TLS connections (HTTP/1.1 + HTTP/2)...");
520
521        loop {
522            tokio::select! {
523                result = tokio_listener.accept() => {
524                    match result {
525                        Ok((tcp_stream, peer_addr)) => {
526                            let acceptor = tls_acceptor.clone();
527                            let app = app.clone();
528                            tokio::spawn(async move {
529                                match acceptor.accept(tcp_stream).await {
530                                    Ok(tls_stream) => {
531                                        let protocol = tls_stream
532                                            .get_ref()
533                                            .1
534                                            .alpn_protocol()
535                                            .map(|p| p.to_vec());
536
537                                        match protocol.as_deref() {
538                                            Some(b"h2") => {
539                                                if let Err(e) =
540                                                    h2_handler::handle_connection(tls_stream, peer_addr, app)
541                                                        .await
542                                                {
543                                                    eprintln!("H2 connection error: {}", e);
544                                                }
545                                            }
546                                            _ => {
547                                                if let Err(e) =
548                                                    Server::process_h1_tls(tls_stream, peer_addr, app).await
549                                                {
550                                                    eprintln!("H1 TLS error: {}", e);
551                                                }
552                                            }
553                                        }
554                                    }
555                                    Err(e) => eprintln!("TLS handshake failed: {}", e),
556                                }
557                            });
558                        }
559                        Err(e) => eprintln!("TCP accept error: {}", e),
560                    }
561                }
562                _ = tokio::signal::ctrl_c() => {
563                    crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
564                    println!("\nShutting down gracefully (SIGINT).");
565                    break;
566                }
567                _ = sigterm() => {
568                    crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
569                    println!("\nShutting down gracefully (SIGTERM).");
570                    break;
571                }
572                _ = sighup() => {
573                    crate::config_reload::reload();
574                    // Reload TLS cert in place — picks up renewed certificates (e.g. from ACME).
575                    if let Ok(new_acceptor) = create_tls_acceptor(&cert_path, &key_path) {
576                        tls_acceptor = new_acceptor;
577                        println!("[TLS] Certificate reloaded from '{}'.", cert_path);
578                    }
579                }
580            }
581        }
582    }
583
584    /// Binds a plain-HTTP listener on the port in `RWS_CONFIG_HTTP_REDIRECT_PORT` and sends
585    /// `301 Moved Permanently` to the HTTPS equivalent of every incoming URL.
586    /// Returns immediately if TLS is not configured or the redirect port is not set.
587    pub async fn run_redirect() {
588        use std::env;
589        use tokio::io::{AsyncReadExt, AsyncWriteExt};
590        use tokio::net::TcpListener as TokioListener;
591
592        let cert_path = env::var(crate::entry_point::Config::RWS_CONFIG_TLS_CERT_FILE)
593            .unwrap_or_default();
594        if cert_path.is_empty() {
595            return;
596        }
597
598        let redirect_port_str = env::var(crate::entry_point::Config::RWS_CONFIG_HTTP_REDIRECT_PORT)
599            .unwrap_or_default();
600        if redirect_port_str.is_empty() {
601            return;
602        }
603
604        let redirect_port: u16 = match redirect_port_str.parse() {
605            Ok(p) => p,
606            Err(_) => {
607                eprintln!("Invalid RWS_CONFIG_HTTP_REDIRECT_PORT: {}", redirect_port_str);
608                return;
609            }
610        };
611
612        let (server_ip, server_port, _) = get_ip_port_thread_count();
613        let bind_addr = format!("{}:{}", server_ip, redirect_port);
614
615        let listener = match TokioListener::bind(&bind_addr).await {
616            Ok(l) => l,
617            Err(e) => {
618                eprintln!("HTTP redirect listener error on {}: {}", bind_addr, e);
619                return;
620            }
621        };
622
623        println!("HTTP→HTTPS redirect listening on http://{}:{}", server_ip, redirect_port);
624
625        loop {
626            tokio::select! {
627                result = listener.accept() => {
628                    match result {
629                        Ok((mut stream, _peer)) => {
630                            let https_port = server_port;
631                            tokio::spawn(async move {
632                                let mut buf = vec![0u8; 4096];
633                                let n = match stream.read(&mut buf).await {
634                                    Ok(n) => n,
635                                    Err(_) => return,
636                                };
637                                let text = String::from_utf8_lossy(&buf[..n]);
638
639                                let uri = text.lines()
640                                    .next()
641                                    .and_then(|line| line.split_whitespace().nth(1))
642                                    .unwrap_or("/")
643                                    .to_string();
644
645                                let host_header = text.lines()
646                                    .find(|l| l.to_lowercase().starts_with("host:"))
647                                    .map(|l| l[5..].trim().to_string());
648
649                                let location = match host_header {
650                                    Some(h) => {
651                                        // strip existing port from Host header
652                                        let h_no_port = if h.starts_with('[') {
653                                            // IPv6: [::1] or [::1]:port
654                                            h.find(']')
655                                                .map(|i| h[..=i].to_string())
656                                                .unwrap_or(h.clone())
657                                        } else {
658                                            h.rfind(':')
659                                                .map(|i| h[..i].to_string())
660                                                .unwrap_or(h.clone())
661                                        };
662                                        if https_port == 443 {
663                                            format!("https://{}{}", h_no_port, uri)
664                                        } else {
665                                            format!("https://{}:{}{}", h_no_port, https_port, uri)
666                                        }
667                                    }
668                                    None => format!("https://localhost:{}{}", https_port, uri),
669                                };
670
671                                let response = format!(
672                                    "HTTP/1.1 301 Moved Permanently\r\nLocation: {}\r\nContent-Length: 0\r\nConnection: close\r\n\r\n",
673                                    location
674                                );
675                                let _ = stream.write_all(response.as_bytes()).await;
676                            });
677                        }
678                        Err(e) => eprintln!("HTTP redirect accept error: {}", e),
679                    }
680                }
681                _ = tokio::signal::ctrl_c() => {
682                    println!("\nShutting down HTTP redirect listener (SIGINT).");
683                    break;
684                }
685                _ = sigterm() => {
686                    println!("\nShutting down HTTP redirect listener (SIGTERM).");
687                    break;
688                }
689                _ = sighup() => {
690                    crate::config_reload::reload();
691                }
692            }
693        }
694    }
695
696    async fn process_h1_tls(
697        mut stream: tokio_rustls::server::TlsStream<tokio::net::TcpStream>,
698        peer_addr: std::net::SocketAddr,
699        app: impl Application,
700    ) -> Result<(), String> {
701        use tokio::io::{AsyncReadExt, AsyncWriteExt};
702
703        let (server_ip, server_port, _) = get_ip_port_thread_count();
704        let request_allocation_size = get_request_allocation_size();
705
706        let mut buffer = vec![0u8; request_allocation_size as usize];
707        if let Err(e) = stream.read(&mut buffer).await {
708            let raw = Server::bad_request_response(e.to_string());
709            let _ = stream.write_all(&raw).await;
710            return Ok(());
711        }
712
713        let request = match Request::parse(&buffer) {
714            Ok(r) => r,
715            Err(message) => {
716                let raw = Server::bad_request_response(message);
717                let _ = stream.write_all(&raw).await;
718                return Ok(());
719            }
720        };
721
722        let connection = ConnectionInfo {
723            client: Address {
724                ip: peer_addr.ip().to_string(),
725                port: peer_addr.port() as i32,
726            },
727            server: Address {
728                ip: server_ip,
729                port: server_port,
730            },
731            request_size: request_allocation_size,
732        };
733
734        let mut response = match app.execute(&request, &connection) {
735            Ok(r) => r,
736            Err(message) => {
737                let raw = Server::bad_request_response(message);
738                let _ = stream.write_all(&raw).await;
739                return Ok(());
740            }
741        };
742
743        crate::metrics::record_request();
744        crate::compression::apply_gzip(&request, &mut response);
745        response.headers.push(Header::get_hsts_header());
746
747        #[cfg(feature = "http3")]
748        response.headers.push(Header {
749            name: Header::_ALT_SVC.to_string(),
750            value: format!("h3=\":{}\"", server_port),
751        });
752        #[cfg(not(feature = "http3"))]
753        response.headers.push(Header {
754            name: Header::_ALT_SVC.to_string(),
755            value: format!("h2=\":{}\"", server_port),
756        });
757
758        Log::log_access(&request, &response, &peer_addr);
759
760        let raw = Response::generate_response(response, request);
761        stream
762            .write_all(&raw)
763            .await
764            .map_err(|e| e.to_string())?;
765        stream.flush().await.map_err(|e| e.to_string())?;
766
767        Ok(())
768    }
769}
770
771#[cfg(feature = "http3")]
772impl Server {
773    pub async fn run_quic(
774        app: impl Application + Send + 'static + Clone,
775    ) {
776        use crate::tls::create_quinn_server_config;
777        use crate::h3_handler;
778
779        let cert_path = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_CERT_FILE)
780            .unwrap_or_default();
781        let key_path = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_KEY_FILE)
782            .unwrap_or_default();
783
784        if cert_path.is_empty() || key_path.is_empty() {
785            return;
786        }
787
788        let server_config = match create_quinn_server_config(&cert_path, &key_path) {
789            Ok(c) => c,
790            Err(e) => {
791                eprintln!("QUIC TLS setup failed: {}", e);
792                return;
793            }
794        };
795
796        let (server_ip, server_port, _) = get_ip_port_thread_count();
797        let bind_addr = format!("{}:{}", server_ip, server_port);
798        let addr: std::net::SocketAddr = match bind_addr.parse() {
799            Ok(a) => a,
800            Err(e) => {
801                eprintln!("Invalid QUIC bind address '{}': {}", bind_addr, e);
802                return;
803            }
804        };
805
806        let endpoint = match quinn::Endpoint::server(server_config, addr) {
807            Ok(e) => e,
808            Err(e) => {
809                eprintln!("QUIC endpoint error: {}", e);
810                return;
811            }
812        };
813
814        println!("Listening for QUIC/HTTP3 on UDP {}:{}", server_ip, server_port);
815
816        loop {
817            tokio::select! {
818                maybe = endpoint.accept() => {
819                    match maybe {
820                        Some(incoming) => {
821                            let app = app.clone();
822                            tokio::spawn(async move {
823                                match incoming.await {
824                                    Ok(conn) => {
825                                        let peer_addr = conn.remote_address();
826                                        if let Err(e) = h3_handler::handle_connection(conn, peer_addr, app).await {
827                                            eprintln!("H3 connection error: {}", e);
828                                        }
829                                    }
830                                    Err(e) => eprintln!("QUIC connection error: {}", e),
831                                }
832                            });
833                        }
834                        None => break,
835                    }
836                }
837                _ = tokio::signal::ctrl_c() => {
838                    crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
839                    println!("\nShutting down QUIC (SIGINT).");
840                    endpoint.close(0u32.into(), b"shutdown");
841                    break;
842                }
843                _ = sigterm() => {
844                    crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
845                    println!("\nShutting down QUIC (SIGTERM).");
846                    endpoint.close(0u32.into(), b"shutdown");
847                    break;
848                }
849                _ = sighup() => {
850                    crate::config_reload::reload();
851                }
852            }
853        }
854    }
855}
856
857