mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-02 11:56:02 +02:00
5edfa7b03f
- telemetry/tace: add traces throughout code - telemetry/metrics: nest metrics and trace under telemetry - telemetry/tace: add service name span to HTTPMetricsHandler. - telemetry/metrics: removed chain dependency middleware_tests. - telemetry/metrics: wrap and encapsulate variatic view registration. - telemetry/tace: add jaeger support for tracing. - cmd/pomerium: move `parseOptions` to internal/config. - cmd/pomerium: offload server handling to httputil and sub pkgs. - httputil: standardize creation/shutdown of http listeners. - httputil: prefer curve X25519 to P256 when negotiating TLS. - fileutil: use standardized Getw Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
87 lines
2.3 KiB
Go
87 lines
2.3 KiB
Go
package httputil // import "github.com/pomerium/pomerium/internal/httputil"
|
|
|
|
import (
|
|
"path/filepath"
|
|
"time"
|
|
|
|
"github.com/pomerium/pomerium/internal/fileutil"
|
|
)
|
|
|
|
// ServerOptions contains the configurations settings for a http server.
|
|
type ServerOptions struct {
|
|
// Addr specifies the host and port on which the server should serve
|
|
// HTTPS requests. If empty, ":https" is used.
|
|
Addr string
|
|
|
|
// TLS certificates to use.
|
|
Cert string
|
|
Key string
|
|
CertFile string
|
|
KeyFile string
|
|
|
|
// Timeouts
|
|
ReadHeaderTimeout time.Duration
|
|
ReadTimeout time.Duration
|
|
WriteTimeout time.Duration
|
|
IdleTimeout time.Duration
|
|
}
|
|
|
|
var defaultTLSServerOptions = &ServerOptions{
|
|
Addr: ":https",
|
|
CertFile: filepath.Join(fileutil.Getwd(), "cert.pem"),
|
|
KeyFile: filepath.Join(fileutil.Getwd(), "privkey.pem"),
|
|
ReadHeaderTimeout: 10 * time.Second,
|
|
ReadTimeout: 30 * time.Second,
|
|
WriteTimeout: 0, // support streaming by default
|
|
IdleTimeout: 5 * time.Minute,
|
|
}
|
|
|
|
func (o *ServerOptions) applyTLSDefaults() {
|
|
if o.Addr == "" {
|
|
o.Addr = defaultTLSServerOptions.Addr
|
|
}
|
|
if o.Cert == "" && o.CertFile == "" {
|
|
o.CertFile = defaultTLSServerOptions.CertFile
|
|
}
|
|
if o.Key == "" && o.KeyFile == "" {
|
|
o.KeyFile = defaultTLSServerOptions.KeyFile
|
|
}
|
|
if o.ReadHeaderTimeout == 0 {
|
|
o.ReadHeaderTimeout = defaultTLSServerOptions.ReadHeaderTimeout
|
|
}
|
|
if o.ReadTimeout == 0 {
|
|
o.ReadTimeout = defaultTLSServerOptions.ReadTimeout
|
|
}
|
|
if o.WriteTimeout == 0 {
|
|
o.WriteTimeout = defaultTLSServerOptions.WriteTimeout
|
|
}
|
|
if o.IdleTimeout == 0 {
|
|
o.IdleTimeout = defaultTLSServerOptions.IdleTimeout
|
|
}
|
|
}
|
|
|
|
var defaultHTTPServerOptions = &ServerOptions{
|
|
Addr: ":http",
|
|
ReadHeaderTimeout: 10 * time.Second,
|
|
ReadTimeout: 5 * time.Second,
|
|
WriteTimeout: 5 * time.Second,
|
|
IdleTimeout: 5 * time.Minute,
|
|
}
|
|
|
|
func (o *ServerOptions) applyHTTPDefaults() {
|
|
if o.Addr == "" {
|
|
o.Addr = defaultHTTPServerOptions.Addr
|
|
}
|
|
if o.ReadHeaderTimeout == 0 {
|
|
o.ReadHeaderTimeout = defaultHTTPServerOptions.ReadHeaderTimeout
|
|
}
|
|
if o.ReadTimeout == 0 {
|
|
o.ReadTimeout = defaultHTTPServerOptions.ReadTimeout
|
|
}
|
|
if o.WriteTimeout == 0 {
|
|
o.WriteTimeout = defaultHTTPServerOptions.WriteTimeout
|
|
}
|
|
if o.IdleTimeout == 0 {
|
|
o.IdleTimeout = defaultHTTPServerOptions.IdleTimeout
|
|
}
|
|
}
|