mirror of
https://github.com/pomerium/pomerium.git
synced 2025-04-28 18:06:34 +02:00
90 lines
2.3 KiB
Go
90 lines
2.3 KiB
Go
package config
|
|
|
|
import (
|
|
"fmt"
|
|
"net"
|
|
"strconv"
|
|
"strings"
|
|
|
|
envoy_config_cluster_v3 "github.com/envoyproxy/go-control-plane/envoy/config/cluster/v3"
|
|
)
|
|
|
|
// DNSLookupFamily values.
|
|
const (
|
|
DNSLookupFamilyAuto = "AUTO"
|
|
DNSLookupFamilyV4Only = "V4_ONLY"
|
|
DNSLookupFamilyV6Only = "V6_ONLY"
|
|
DNSLookupFamilyV4Preferred = "V4_PREFERRED"
|
|
DNSLookupFamilyAll = "ALL"
|
|
)
|
|
|
|
// AllDNSLookupFamilies are all the available DNSLookupFamily values.
|
|
var AllDNSLookupFamilies = []string{
|
|
DNSLookupFamilyAuto,
|
|
DNSLookupFamilyV4Only,
|
|
DNSLookupFamilyV6Only,
|
|
DNSLookupFamilyV4Preferred,
|
|
DNSLookupFamilyAll,
|
|
}
|
|
|
|
// ValidateDNSLookupFamily validates the value to confirm its one of the available DNS lookup families.
|
|
func ValidateDNSLookupFamily(value string) error {
|
|
switch value {
|
|
case "",
|
|
DNSLookupFamilyAuto,
|
|
DNSLookupFamilyV4Only,
|
|
DNSLookupFamilyV6Only,
|
|
DNSLookupFamilyV4Preferred,
|
|
DNSLookupFamilyAll:
|
|
return nil
|
|
}
|
|
|
|
return fmt.Errorf("unknown dns_lookup_family: %s, known families are: %s", value, strings.Join(AllDNSLookupFamilies, ", "))
|
|
}
|
|
|
|
// ValidateCookieSameSite validates the cookie same site option.
|
|
func ValidateCookieSameSite(value string) error {
|
|
value = strings.ToLower(value)
|
|
switch value {
|
|
case "", "strict", "lax", "none":
|
|
return nil
|
|
}
|
|
return fmt.Errorf("unknown cookie_same_site: %s", value)
|
|
}
|
|
|
|
// GetEnvoyDNSLookupFamily gets the envoy DNS lookup family.
|
|
func GetEnvoyDNSLookupFamily(value string) envoy_config_cluster_v3.Cluster_DnsLookupFamily {
|
|
switch value {
|
|
case DNSLookupFamilyAuto:
|
|
return envoy_config_cluster_v3.Cluster_AUTO
|
|
case DNSLookupFamilyV4Only:
|
|
return envoy_config_cluster_v3.Cluster_V4_ONLY
|
|
case DNSLookupFamilyV6Only:
|
|
return envoy_config_cluster_v3.Cluster_V6_ONLY
|
|
case DNSLookupFamilyV4Preferred:
|
|
return envoy_config_cluster_v3.Cluster_V4_PREFERRED
|
|
case DNSLookupFamilyAll:
|
|
return envoy_config_cluster_v3.Cluster_ALL
|
|
}
|
|
|
|
// default
|
|
return envoy_config_cluster_v3.Cluster_V4_PREFERRED
|
|
}
|
|
|
|
// ValidateMetricsAddress validates address for the metrics
|
|
func ValidateMetricsAddress(addr string) error {
|
|
_, port, err := net.SplitHostPort(addr)
|
|
if err != nil || port == "" {
|
|
return fmt.Errorf("expected host:port")
|
|
}
|
|
|
|
p, err := strconv.Atoi(port)
|
|
if err != nil {
|
|
return fmt.Errorf("port must be a number")
|
|
}
|
|
if p <= 0 {
|
|
return fmt.Errorf("expected positive port number")
|
|
}
|
|
|
|
return nil
|
|
}
|