Moemeli oa moreki oa rona, eo pokello ea hae ea kopo e lulang lerung la Microsoft (Azure), o ile a rarolla bothata: haufinyane tjena, likopo tse ling tse tsoang ho bareki ba bang ba tsoang Europe li ile tsa qala ho fela ka phoso 400 (). Lisebelisoa tsohle li ngotsoe ka .NET, li sebelisoa ho Kubernetes...
E 'ngoe ea likopo ke API, eo sephethephethe sohle se tlang ka eona. Sephethephethe sena se mameloa ke seva sa HTTP , e hlophisitsoeng ke moreki oa .NET mme e tšoaroa ka pod. Ka ho lokisa bothata, re bile lehlohonolo ka kutloisiso ea hore ho na le mosebelisi ea itseng ea neng a lula a hlahisa bothata. Leha ho le joalo, ntho e 'ngoe le e' ngoe e ne e rarahane ke ketane ea sephethephethe:
Phoso ea Ingress e ne e shebahala tjena:
{
"number_fields":{
"status":400,
"request_time":0.001,
"bytes_sent":465,
"upstream_response_time":0,
"upstream_retries":0,
"bytes_received":2328
},
"stream":"stdout",
"string_fields":{
"ingress":"app",
"protocol":"HTTP/1.1",
"request_id":"f9ab8540407208a119463975afda90bc",
"path":"/api/sign-in",
"nginx_upstream_status":"400",
"service":"app",
"namespace":"production",
"location":"/front",
"scheme":"https",
"method":"POST",
"nginx_upstream_response_time":"0.000",
"nginx_upstream_bytes_received":"120",
"vhost":"api.app.example.com",
"host":"api.app.example.com",
"user":"",
"address":"83.41.81.250",
"nginx_upstream_addr":"10.240.0.110:80",
"referrer":"https://api.app.example.com/auth/login?long_encrypted_header",
"service_port":"http",
"user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36",
"time":"2019-03-06T18:29:16+00:00",
"content_kind":"cache-headers-not-present",
"request_query":""
},
"timestamp":"2019-03-06 18:29:16",
"labels":{
"app":"nginx",
"pod-template-generation":"6",
"controller-revision-hash":"1682636041"
},
"namespace":"kube-nginx-ingress",
"nsec":6726612,
"source":"kubernetes",
"host":"k8s-node-55555-0",
"pod_name":"nginx-v2hcb",
"container_name":"nginx",
"boolean_fields":{}
}Ka nako e tšoanang, Kestrel o ile a fana ka:
HTTP/1.1 400 Bad Request
Connection: close
Date: Wed, 06 Mar 2019 12:34:20 GMT
Server: Kestrel
Content-Length: 0Leha e na le lentsoe le phahameng haholo, phoso ea Kestrel e ne e le teng haholo boitsebiso bo fokolang ba bohlokoa:
{
"number_fields":{"ThreadId":76},
"stream":"stdout",
"string_fields":{
"EventId":"{"Id"=>17, "Name"=>"ConnectionBadRequest"}",
"SourceContext":"Microsoft.AspNetCore.Server.Kestrel",
"ConnectionId":"0HLL2VJSST5KV",
"@mt":"Connection id "{ConnectionId}" bad request data: "{message}"",
"@t":"2019-03-07T13:06:48.1449083Z",
"@x":"Microsoft.AspNetCore.Server.Kestrel.Core.BadHttpRequestException: Malformed request: invalid headers.n at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.Http1Connection.TryParseRequest(ReadResult result, Boolean& endConnection)n at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.HttpProtocol.<ProcessRequestsAsync>d__185`1.MoveNext()",
"message":"Malformed request: invalid headers."
},
"timestamp":"2019-03-07 13:06:48",
"labels":{
"pod-template-hash":"2368795483",
"service":"app"
},
"namespace":"production",
"nsec":145341848,
"source":"kubernetes",
"host":"k8s-node-55555-1",
"pod_name":"app-67bdcf98d7-mhktx",
"container_name":"app",
"boolean_fields":{}
}Ho ka bonahala eka ke tcpdump feela e tla thusa ho rarolla bothata bona ... empa ke tla pheta ka ketane ea sephethephethe:
Patlisiso
Ho hlakile hore ho molemo ho mamela sephethephethe ka node e khethehileng, moo Kubernetes a sebelisitseng pod: molumo oa ho lahla o tla ba joalo hoo ho tla khoneha ho fumana bonyane ntho e ntle ka potlako. 'Me ka sebele, ha ho hlahlojoa, ho ile ha hlokomeloa foreimi e latelang:
GET /back/user HTTP/1.1
Host: api.app.example.com
X-Request-ID: 27ceb14972da8c21a8f92904b3eff1e5
X-Real-IP: 83.41.81.250
X-Forwarded-For: 83.41.81.250
X-Forwarded-Host: api.app.example.com
X-Forwarded-Port: 443
X-Forwarded-Proto: https
X-Original-URI: /front/back/user
X-Scheme: https
X-Original-Forwarded-For: 83.41.81.250
X-Nginx-Geo-Client-Country: Spain
X-Nginx-Geo-Client-City: M.laga
Accept-Encoding: gzip
CF-IPCountry: ES
CF-RAY: 4b345cfd1c4ac691-MAD
CF-Visitor: {"scheme":"https"}
pragma: no-cache
cache-control: no-cache
accept: application/json, text/plain, */*
origin: https://app.example.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36
referer: https://app.example.com/auth/login
accept-language: en-US,en;q=0.9,en-GB;q=0.8,pl;q=0.7
cookie: many_encrypted_cookies; .AspNetCore.Identity.Application=something_encrypted;
CF-Connecting-IP: 83.41.81.250
True-Client-IP: 83.41.81.250
CDN-Loop: cloudflare
HTTP/1.1 400 Bad Request
Connection: close
Date: Wed, 06 Mar 2019 12:34:20 GMT
Server: Kestrel
Content-Length: 0
Ha ho shejoa thotobolo hantle, lentsoe le ile la hlokomeloa M.laga. Ho bonolo ho hakanya hore ha ho na toropo ea M.laga Spain (empa e teng ). Ha re sebelisa mohopolo ona, re ile ra sheba litlhophiso tsa Ingress, moo re boneng e kentsoeng khoeling e fetileng (ka kopo ea moreki) senepe se "se nang kotsi".:
ingress.kubernetes.io/configuration-snippet: |
proxy_set_header X-Nginx-Geo-Client-Country $geoip_country_name;
proxy_set_header X-Nginx-Geo-Client-City $geoip_city;Kamora ho thibela phetiso ea lihlooho tsena, tsohle li ile tsa loka! (Haufinyane ho ile ha hlaka hore kopo ka boeona ha e sa hloka lihlooho tsena.)
Joale a re shebeng bothata ka kakaretso. E ka hlahisoa habonolo ka har'a sesebelisoa ka ho etsa kopo ea telnet ho localhost:80:
GET /back/user HTTP/1.1
Host: api.app.example.com
cache-control: no-cache
accept: application/json, text/plain, */*
origin: https://app.example.com
Cookie: test=Desiree
... khutla 401 Unauthorized, joalo ka ha ho lebelletsoe. Ho etsahalang haeba re etsa:
GET /back/user HTTP/1.1
Host: api.app.example.com
cache-control: no-cache
accept: application/json, text/plain, */*
origin: https://app.example.com
Cookie: test=Désirée?
E tla khutla 400 Bad request - lethathamong la kopo re tla fumana phoso eo re seng re e tloaetse:
{
"@t":"2019-03-31T12:59:54.3746446Z",
"@mt":"Connection id "{ConnectionId}" bad request data: "{message}"",
"@x":"Microsoft.AspNetCore.Server.Kestrel.Core.BadHttpRequestException: Malformed request: invalid headers.n at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.Http1Connection.TryParseRequest(ReadResult result, Boolean& endConnection)n at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.HttpProtocol.<ProcessRequestsAsync>d__185`1.MoveNext()",
"ConnectionId":"0HLLLR1J974L9",
"message":"Malformed request: invalid headers.",
"EventId":{
"Id":17,
"Name":"ConnectionBadRequest"
},
"SourceContext":"Microsoft.AspNetCore.Server.Kestrel",
"ThreadId":71
}Liphello
Haholo-holo Kestrel sebetsa hantle lihlooho tsa HTTP tse nang le litlhaku tse nepahetseng ho UTF-8, tse fumanehang ka mabitso a palo e kholo ea litoropo.
Ntho e 'ngoe e eketsehileng tabeng ea rona ke hore mofani ha a rera ho fetola ts'ebetsong ea Kestrel kopo. Leha ho le joalo, litaba ho AspNetCore ka boeona (, ) ba re sena ha se na ho thusa ...
Ho akaretsa: lengolo ha le sa bua ka mathata a itseng a Kestrel kapa UTF-8 (ka 2019?!), Empa ka taba ea hore kelello le thuto e tsitsitseng Mohato o mong le o mong oo u o nkang ha u ntse u batla mathata, haufinyane o tla beha litholoana. Mahlohonolo!
PES
Bala hape ho blog ea rona:
- «";
- «";
- «";
- «";
- «".
Source: www.habr.com