泽民博客 ☰ Menu

web框架

Posted by 夏泽民 Jul 2, 2021

https://www.runoob.com/rust/rust-concurrency.html

阅读全文

The Linux Programming Interface

Posted by 夏泽民 Jul 2, 2021

https://www.man7.org/tlpi/index.html

阅读全文

freecache 无gc的go cache

Posted by 夏泽民 Jul 2, 2021

https://github.com/coocood/freecache 特性 能存储数亿个条目

阅读全文

echo 解析客户端IP的坑clientIp

Posted by 夏泽民 Jul 2, 2021

某些场景我们需要获取客户端的ip，比如埋点、反作弊、审计等等

ip := net.ParseIP(ctx.ClientIP())
ip = ip.To4()
ipInt32 := binary.BigEndian.Uint32(ip)

上面这段代码乍看没有问题，但是实际应用中可能panic 我们来看下echo中相关函数的实现

func (c *Context) ClientIP() string {
	if c.engine.ForwardedByClientIP {
		clientIP := c.requestHeader("X-Forwarded-For")
		clientIP = strings.TrimSpace(strings.Split(clientIP, ",")[0])
		if clientIP == "" {
			clientIP = strings.TrimSpace(c.requestHeader("X-Real-Ip"))
		}
		if clientIP != "" {
			return clientIP
		}
	}

这里直接通过逗号分隔X-Forwarded-For，取第一个字符串，众所周知X-Forwarded-For是可以篡改的，如果用户不遵守代理协议，把第一个ip地址写成非法的ip地址，比如一个字符串，那么这个函数返回的就是一个字符串

阅读全文

bfe

Posted by 夏泽民 Jul 2, 2021

https://www.bfe-networks.net/zh_cn/introduction/route/ https://github.com/gopherchina/conference https://blog.csdn.net/RA681t58CJxsgCkJ31/article/details/116548754 https://github.com/baidu/bfe-book

阅读全文

Search

Blog Categories

jekyll (35)
web (334)
technology (2)
php (201)
linux (415)
spark (51)
deep_learning (2)
storage (290)
golang (1081)
cryptology (15)
lang (74)
docker (100)
zookeeper (11)
elasticsearch (86)
java (7)
algorithm (134)
hadoop (2)
slug (1)
architect (46)
k8s (107)
node (82)
python (18)
mysql (42)
rust (4)
elasticSearch (1)
arch (1)
Javascript (1)
kafka (2)
nginx (7)

Popular posts

Anything in here will be replaced on browsers that support the canvas element

Recent posts

Tags

This blog is maintained by 夏泽民

Get in touch with me at 465474307@qq.com

Subscribe to our mailing list

* indicates required