mirror of
https://github.com/fatedier/frp.git
synced 2026-10-19 23:33:27 +08:00
fatedierandGitHub
f13fdd58d4
Add a separate HTTP listener for observability, configured through metricsServer in both frps and frpc. It serves /healthz and, when pprofEnable is set, the pprof handlers except /debug/pprof/cmdline. It never serves the dashboard, static assets or the admin API, and it does not touch the global assets filesystem. frps also serves /metrics on this listener with both runtime and business metrics, enabled by metricsServer.port alone. The in-memory collector still starts only with the dashboard, and the Prometheus collector starts either with metricsServer or with enablePrometheus plus webServer, so a configuration that collected nothing before still collects nothing. The /healthz, /metrics and pprof endpoints on webServer, and enablePrometheus, keep working but are deprecated and log a hint at startup. frpc does not serve /metrics yet.
71 lines
2.5 KiB
Go
71 lines
2.5 KiB
Go
// Copyright 2023 The frp Authors
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package validation
|
|
|
|
import (
|
|
"fmt"
|
|
"slices"
|
|
|
|
"github.com/samber/lo"
|
|
|
|
v1 "github.com/fatedier/frp/pkg/config/v1"
|
|
)
|
|
|
|
func (v *ConfigValidator) ValidateServerConfig(c *v1.ServerConfig) (Warning, error) {
|
|
var (
|
|
warnings Warning
|
|
errs error
|
|
)
|
|
if !slices.Contains(SupportedAuthMethods, c.Auth.Method) {
|
|
errs = AppendError(errs, fmt.Errorf("invalid auth method, optional values are %v", SupportedAuthMethods))
|
|
}
|
|
if !lo.Every(SupportedAuthAdditionalScopes, c.Auth.AdditionalScopes) {
|
|
errs = AppendError(errs, fmt.Errorf("invalid auth additional scopes, optional values are %v", SupportedAuthAdditionalScopes))
|
|
}
|
|
|
|
errs = AppendError(errs, v.validateAuthTokenSource(c.Auth.Token, c.Auth.TokenSource))
|
|
|
|
if err := validateLogConfig(&c.Log); err != nil {
|
|
errs = AppendError(errs, err)
|
|
}
|
|
|
|
if err := validateWebServerConfig(&c.WebServer); err != nil {
|
|
errs = AppendError(errs, err)
|
|
}
|
|
if err := validateMetricsServerConfig(&c.MetricsServer, &c.WebServer); err != nil {
|
|
errs = AppendError(errs, err)
|
|
}
|
|
if c.Transport.TLS.UseSystemCa {
|
|
errs = AppendError(errs, fmt.Errorf("transport.tls.useSystemCa is only supported in frpc transport.tls"))
|
|
}
|
|
|
|
errs = AppendError(errs, ValidatePort(c.BindPort, "bindPort"))
|
|
errs = AppendError(errs, ValidatePort(c.KCPBindPort, "kcpBindPort"))
|
|
errs = AppendError(errs, ValidatePort(c.QUICBindPort, "quicBindPort"))
|
|
errs = AppendError(errs, ValidatePort(c.VhostHTTPPort, "vhostHTTPPort"))
|
|
errs = AppendError(errs, ValidatePort(c.VhostHTTPSPort, "vhostHTTPSPort"))
|
|
errs = AppendError(errs, ValidatePort(c.TCPMuxHTTPConnectPort, "tcpMuxHTTPConnectPort"))
|
|
if c.Transport.MaxPoolCount < 0 {
|
|
errs = AppendError(errs, fmt.Errorf("invalid transport.maxPoolCount, must be non-negative"))
|
|
}
|
|
|
|
for _, p := range c.HTTPPlugins {
|
|
if !lo.Every(SupportedHTTPPluginOps, p.Ops) {
|
|
errs = AppendError(errs, fmt.Errorf("invalid http plugin ops, optional values are %v", SupportedHTTPPluginOps))
|
|
}
|
|
}
|
|
return warnings, errs
|
|
}
|