【云+社区年度征文】腾讯防疫健康码-远程协作环境优化

let urls = {
"msyql_host:3306": 1,
"es_host:9200": 1
}
let user = {
        "userA":"tokenA",
         "userB":"tokenB",
}
let ip = {
        "ipA": 1,
        "ipB":1
}
if (urls[req.url] && (authUser(req) || ip[req.remoteAddress])) {
        socket.connect(req.url); // 连接目标服务
        socket.pipe(req.socket); // 管道转发
}

function authUser(req) {
        // 可根据客户选择的算法支持，basic auth 或其他自定义算法判断请求是否合法,return 1 or 0
}

Authenticator.setDefault (new Authenticator() {

   protected PasswordAuthentication getPasswordAuthentication() {

   return new PasswordAuthentication ("username", "password".toCharArray());

   }

});

<dependency>
    <groupId>org.elasticsearch.client</groupId>
	<artifactId>elasticsearch-rest-high-level-client</artifactId>
	<version>6.4.3</version>
</dependency>

builder.setHttpClientConfigCallback(new RestClientBuilder.HttpClientConfigCallback() {
    @Override
    public HttpAsyncClientBuilder customizeHttpClient(HttpAsyncClientBuilder httpClientBuilder) {
        httpClientBuilder.useSystemProperties(); //显示调用使用系统属性。
        return httpClientBuilder.setDefaultCredentialsProvider(credentialsProvider);
    }
});

const map = {
        {
  "3306": {
    "proxy": "gateway.com:443",
    "auth": "", //认证签名串
    "target": "mysql_host:3306"
  },
  "9200": {
    "proxy": "gateway.com:443",
    "auth": "", //认证签名串
    "target": "es_host:9200"
  }
}
for (const port in map) {
  const cfg = map[port];
  const pxyopt = (i => ({ host: i[0], port: i[1]}))(cfg.proxy.split(':'));
  const server = net.createServer(socket => {
    if (pxyopt['port'] !== '443') {
      const proxy = net.connect(pxyopt, () => {
      var timestamp = (Date.now() / 1000).toFixed();
      var random = Math.floor(Math.random() * 10000);
      var result = signature(cfg.auth, random, timestamp);
      var pxyauth = result ? `Proxy-Authorization: Basic ${result}\\r\\n` : '';
      proxy.write(`CONNECT ${cfg.target} HTTP/1.1\\r\\nHost: ${cfg.target}\\r\\n${pxyauth}\\r\\n`);
      proxy.once('data', d => {
        let s = d.toString();
        if (s.startsWith('HTTP/1.1 200 ')) {
          setImmediate(() => socket.pipe(proxy).pipe(socket));
        } else {
          proxy.destroy(new Error(s));
        }
      });
      });
      var onerr = err => {
        socket.destroy();
        proxy.destroy();
        log(err.message);
      };
      socket.on('error', onerr)
      socket.setTimeout(TIMEOUT, () => proxy.destroy(new Error('timeout')));
      proxy.on('error', onerr);
      proxy.setTimeout(TIMEOUT, () => proxy.destroy(new Error('timeout')))
    } else {
      var timestamp = (Date.now() / 1000).toFixed();
      var random = Math.floor(Math.random() * 10000);
      var result = signature(cfg.auth, random, timestamp);
      var options = {
        hostname : pxyopt['host'],
        port     : pxyopt['port'],
        path     : cfg.target,
        method     : 'CONNECT',
        headers: {
          'Proxy-Authorization': `Basic ${result}`
        }
      };
      var req = https.request(options);
      req.on('connect', function(res, skt) {
        setImmediate(() => socket.pipe(skt).pipe(socket));
        socket.on('end', function() {
          console.log('socket end.');
        });
        var onerr = err => {
          socket.destroy();
          skt.destroy();
          log(err.message);
        };
        socket.on('error', onerr)
        socket.setTimeout(TIMEOUT, () => skt.destroy(new Error('timeout')));
        skt.on('error', onerr);
        skt.setTimeout(TIMEOUT, () => skt.destroy(new Error('timeout')))
      });
      req.end();
    }
   
    
  }).listen(port, '127.0.0.1', () => console.log(`127.0.0.1:${port} => ${cfg.proxy} => ${cfg.target}`));
  server.timeout = TIMEOUT;
}

function signature(appkey, random, timestamp) {
//　自定义签名算法
}