Package org.eclipse.jetty.proxy
Class ConnectHandler
- All Implemented Interfaces:
Handler
,HandlerContainer
,Container
,Destroyable
,Dumpable
,Dumpable.DumpableContainer
,LifeCycle
Implementation of a Handler
that supports HTTP CONNECT.
-
Nested Class Summary
Modifier and TypeClassDescriptionprotected static class
protected class
class
class
Nested classes/interfaces inherited from class org.eclipse.jetty.server.handler.AbstractHandler
AbstractHandler.ErrorDispatchHandler
Nested classes/interfaces inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle
AbstractLifeCycle.AbstractLifeCycleListener, AbstractLifeCycle.StopException
Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.Container
Container.InheritedListener, Container.Listener
Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.Dumpable
Dumpable.DumpableContainer
Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.LifeCycle
LifeCycle.Listener
-
Field Summary
Fields inherited from class org.eclipse.jetty.server.handler.HandlerWrapper
_handler
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionprotected void
connectToServer
(jakarta.servlet.http.HttpServletRequest request, String host, int port, Promise<SocketChannel> promise) protected void
doStart()
Starts the managed lifecycle beans in the order they were added.int
long
long
void
handle
(String target, Request jettyRequest, jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response) Handle a request.protected boolean
handleAuthentication
(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, String address) Handles the authentication before setting up the tunnel to the remote server.protected void
handleConnect
(Request baseRequest, jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, String serverAddress) Handles a CONNECT request.protected InetSocketAddress
newConnectAddress
(String host, int port) Creates the server address to connect to.protected ConnectHandler.DownstreamConnection
newDownstreamConnection
(EndPoint endPoint, ConcurrentMap<String, Object> context) protected SelectorManager
protected ConnectHandler.UpstreamConnection
newUpstreamConnection
(EndPoint endPoint, ConnectHandler.ConnectContext connectContext) protected void
onConnectFailure
(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, jakarta.servlet.AsyncContext asyncContext, Throwable failure) protected void
onConnectSuccess
(ConnectHandler.ConnectContext connectContext, ConnectHandler.UpstreamConnection upstreamConnection) protected void
prepareContext
(jakarta.servlet.http.HttpServletRequest request, ConcurrentMap<String, Object> context) protected int
read
(EndPoint endPoint, ByteBuffer buffer, ConcurrentMap<String, Object> context) Reads (with non-blocking semantic) into the givenbuffer
from the givenendPoint
.void
setBufferSize
(int bufferSize) void
setByteBufferPool
(ByteBufferPool bufferPool) void
setConnectTimeout
(long connectTimeout) void
setExecutor
(Executor executor) void
setIdleTimeout
(long idleTimeout) void
setScheduler
(Scheduler scheduler) boolean
validateDestination
(String host, int port) Checks the givenhost
andport
against whitelist and blacklist.protected void
write
(EndPoint endPoint, ByteBuffer buffer, Callback callback, ConcurrentMap<String, Object> context) Writes (with non-blocking semantic) the given buffer of data onto the given endPoint.Methods inherited from class org.eclipse.jetty.server.handler.HandlerWrapper
destroy, expandChildren, getHandler, getHandlers, insertHandler, setHandler
Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandlerContainer
expandHandler, findContainerOf, getChildHandlerByClass, getChildHandlers, getChildHandlersByClass, setServer
Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandler
doError, doStop, getServer
Methods inherited from class org.eclipse.jetty.util.component.ContainerLifeCycle
addBean, addBean, addEventListener, addManaged, contains, dump, dump, dump, dumpObjects, dumpStdErr, getBean, getBeans, getBeans, getContainedBeans, getContainedBeans, isAuto, isManaged, isUnmanaged, manage, removeBean, removeBeans, removeEventListener, setBeans, start, stop, unmanage, updateBean, updateBean, updateBeans, updateBeans
Methods inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle
getEventListeners, getState, getState, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, setEventListeners, start, stop, toString
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait
Methods inherited from interface org.eclipse.jetty.util.component.Container
getCachedBeans, getEventListeners
Methods inherited from interface org.eclipse.jetty.util.component.Dumpable.DumpableContainer
isDumpable
Methods inherited from interface org.eclipse.jetty.util.component.LifeCycle
addEventListener, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeEventListener, start, stop
-
Field Details
-
LOG
protected static final org.slf4j.Logger LOG
-
-
Constructor Details
-
ConnectHandler
public ConnectHandler() -
ConnectHandler
-
-
Method Details
-
getExecutor
-
setExecutor
-
getScheduler
-
setScheduler
-
getByteBufferPool
-
setByteBufferPool
-
getConnectTimeout
public long getConnectTimeout()- Returns:
- the timeout, in milliseconds, to connect to the remote server
-
setConnectTimeout
public void setConnectTimeout(long connectTimeout) - Parameters:
connectTimeout
- the timeout, in milliseconds, to connect to the remote server
-
getIdleTimeout
public long getIdleTimeout()- Returns:
- the idle timeout, in milliseconds
-
setIdleTimeout
public void setIdleTimeout(long idleTimeout) - Parameters:
idleTimeout
- the idle timeout, in milliseconds
-
getBufferSize
public int getBufferSize() -
setBufferSize
public void setBufferSize(int bufferSize) -
doStart
Description copied from class:ContainerLifeCycle
Starts the managed lifecycle beans in the order they were added.- Overrides:
doStart
in classAbstractHandler
- Throws:
AbstractLifeCycle.StopException
- If thrown, the lifecycle will immediately be stopped.Exception
- If there was a problem starting. Will cause a transition to FAILED state
-
newSelectorManager
-
handle
public void handle(String target, Request jettyRequest, jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response) throws jakarta.servlet.ServletException, IOException Description copied from interface:Handler
Handle a request.- Specified by:
handle
in interfaceHandler
- Overrides:
handle
in classHandlerWrapper
- Parameters:
target
- The target of the request - either a URI or a name.jettyRequest
- The original unwrapped request object.request
- The request either as theRequest
object or a wrapper of that request. The
method can be used access the Request object if required.HttpConnection.getCurrentConnection()
.getHttpChannel()
.getRequest()
response
- The response as theResponse
object or a wrapper of that request. The
method can be used access the Response object if required.HttpConnection.getCurrentConnection()
.getHttpChannel()
.getResponse()
- Throws:
jakarta.servlet.ServletException
- if unable to handle the request or response due to underlying servlet issueIOException
- if unable to handle the request or response processing
-
handleConnect
protected void handleConnect(Request baseRequest, jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, String serverAddress) Handles a CONNECT request.
CONNECT requests may have authentication headers such as
Proxy-Authorization
that authenticate the client with the proxy.- Parameters:
baseRequest
- Jetty-specific http requestrequest
- the http requestresponse
- the http responseserverAddress
- the remote server address in the formhost:port
-
connectToServer
protected void connectToServer(jakarta.servlet.http.HttpServletRequest request, String host, int port, Promise<SocketChannel> promise) -
newConnectAddress
Creates the server address to connect to.- Parameters:
host
- The host from the CONNECT requestport
- The port from the CONNECT request- Returns:
- The InetSocketAddress to connect to.
-
onConnectSuccess
protected void onConnectSuccess(ConnectHandler.ConnectContext connectContext, ConnectHandler.UpstreamConnection upstreamConnection) -
onConnectFailure
protected void onConnectFailure(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, jakarta.servlet.AsyncContext asyncContext, Throwable failure) -
handleAuthentication
protected boolean handleAuthentication(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, String address) Handles the authentication before setting up the tunnel to the remote server.
The default implementation returns true.
- Parameters:
request
- the HTTP requestresponse
- the HTTP responseaddress
- the address of the remote server in the formhost:port
.- Returns:
- true to allow to connect to the remote host, false otherwise
-
newDownstreamConnection
protected ConnectHandler.DownstreamConnection newDownstreamConnection(EndPoint endPoint, ConcurrentMap<String, Object> context) -
newUpstreamConnection
protected ConnectHandler.UpstreamConnection newUpstreamConnection(EndPoint endPoint, ConnectHandler.ConnectContext connectContext) -
prepareContext
protected void prepareContext(jakarta.servlet.http.HttpServletRequest request, ConcurrentMap<String, Object> context) -
read
protected int read(EndPoint endPoint, ByteBuffer buffer, ConcurrentMap<String, Object> context) throws IOExceptionReads (with non-blocking semantic) into the given
buffer
from the givenendPoint
.- Parameters:
endPoint
- the endPoint to read frombuffer
- the buffer to read data intocontext
- the context information related to the connection- Returns:
- the number of bytes read (possibly 0 since the read is non-blocking) or -1 if the channel has been closed remotely
- Throws:
IOException
- if the endPoint cannot be read
-
write
protected void write(EndPoint endPoint, ByteBuffer buffer, Callback callback, ConcurrentMap<String, Object> context) Writes (with non-blocking semantic) the given buffer of data onto the given endPoint.
- Parameters:
endPoint
- the endPoint to write tobuffer
- the buffer to writecallback
- the completion callback to invokecontext
- the context information related to the connection
-
getWhiteListHosts
-
getBlackListHosts
-
validateDestination
Checks the givenhost
andport
against whitelist and blacklist.- Parameters:
host
- the host to checkport
- the port to check- Returns:
- true if it is allowed to connect to the given host and port
-