ื ืคืืจืฉืืืืขืจ ืคืื ืืื ืืืขืจ ืงืืืขื ื, ืืืขืืขื ืก ืึทืคึผืืึทืงืืืฉืึทื ืกืืึทืง ืจืืืืืื ืืื ืื ืืืึธืืงื ืคืื ืืืืงืจืึธืกืึธืคึฟื (Azure), ืืึธื ืืขืจืขืื ืึท ืคึผืจืึธืืืขื: ืืขืฆืื ืก, ืขืืืขืืข ืจืืงืืืขืก ืคืื ืขืืืขืืข ืงืืืืึทื ืฅ ืคืื ืืืืจืึธืคึผืข ืื ืืขืืืืื ืฆื ืขื ืืืงื ืืื ืืขืืช 400 (). ืื ืึทืคึผืืึทืงืืืฉืึทื ื ืืขื ืขื ืืขืฉืจืืื ืืื .NET, ืืืคึผืืืื ืืื Kubernetes ...
ืืืื ืขืจ ืคืื ืื ืึทืคึผืืึทืงืืืฉืึทื ื ืืื ืื API, ืืืจื ืืืึธืก ืึทืืข ืคืึทืจืงืขืจ ืืขืกืึธืฃ ืงืืื. ืืขืจ ืคืึทืจืงืขืจ ืืื ืฆืืืขืืขืจื ืืืจื ืื ืืืืคึผ ืกืขืจืืืขืจ , ืงืึทื ืคืืืืขืจื ืืืจื ืื. ื ืขืฅ ืงืืืขื ื ืืื ืืึธืืกืืื ืืื ืึท ืคึผืึธื. ืืื ืืืืึทืืื ื, ืืืจ ืืขื ืขื ืืึทืืืืืง ืืื ืืขื ืืื ืขื ืึทื ืขืก ืืื ืืขืืืขื ืึท ืกืคึผืขืฆืืคืืฉ ืืึทื ืืฆืขืจ ืืืึธืก ืงืึทื ืกืืกืืึทื ืืื ืจืืคึผืจืึทืืืกื ืื ืคึผืจืึธืืืขื. ืึธืืขืจ, ืึทืืฅ ืืื ืืขืืืขื ืงืึธืืคึผืืืฆืืจื ืืืจื ืื ืคืึทืจืงืขืจ ืงืืื:
ืืขืจ ืืขืืช ืืื Ingress ืืื ืืขืงืืงื ืืื ืืึธืก:
{
"number_fields":{
"status":400,
"request_time":0.001,
"bytes_sent":465,
"upstream_response_time":0,
"upstream_retries":0,
"bytes_received":2328
},
"stream":"stdout",
"string_fields":{
"ingress":"app",
"protocol":"HTTP/1.1",
"request_id":"f9ab8540407208a119463975afda90bc",
"path":"/api/sign-in",
"nginx_upstream_status":"400",
"service":"app",
"namespace":"production",
"location":"/front",
"scheme":"https",
"method":"POST",
"nginx_upstream_response_time":"0.000",
"nginx_upstream_bytes_received":"120",
"vhost":"api.app.example.com",
"host":"api.app.example.com",
"user":"",
"address":"83.41.81.250",
"nginx_upstream_addr":"10.240.0.110:80",
"referrer":"https://api.app.example.com/auth/login?long_encrypted_header",
"service_port":"http",
"user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36",
"time":"2019-03-06T18:29:16+00:00",
"content_kind":"cache-headers-not-present",
"request_query":""
},
"timestamp":"2019-03-06 18:29:16",
"labels":{
"app":"nginx",
"pod-template-generation":"6",
"controller-revision-hash":"1682636041"
},
"namespace":"kube-nginx-ingress",
"nsec":6726612,
"source":"kubernetes",
"host":"k8s-node-55555-0",
"pod_name":"nginx-v2hcb",
"container_name":"nginx",
"boolean_fields":{}
}ืืขืจืืฒึท ืืึธื ืงืขืกืืจืขื ืืขืืขืื:
HTTP/1.1 400 Bad Request
Connection: close
Date: Wed, 06 Mar 2019 12:34:20 GMT
Server: Kestrel
Content-Length: 0ืืคืืื ืืื ืืึทืงืกืืืื ืืืขืจืืึธืืกืึทืื, ืื ืงืขืกืืจืขื ืืขืืช ืงืึทื ืืืื ื ืืึธืจ ืืืกื ื ืืฆืืง ืืื ืคึฟืึธืจืืึทืฆืืข:
{
"number_fields":{"ThreadId":76},
"stream":"stdout",
"string_fields":{
"EventId":"{"Id"=>17, "Name"=>"ConnectionBadRequest"}",
"SourceContext":"Microsoft.AspNetCore.Server.Kestrel",
"ConnectionId":"0HLL2VJSST5KV",
"@mt":"Connection id "{ConnectionId}" bad request data: "{message}"",
"@t":"2019-03-07T13:06:48.1449083Z",
"@x":"Microsoft.AspNetCore.Server.Kestrel.Core.BadHttpRequestException: Malformed request: invalid headers.n at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.Http1Connection.TryParseRequest(ReadResult result, Boolean& endConnection)n at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.HttpProtocol.<ProcessRequestsAsync>d__185`1.MoveNext()",
"message":"Malformed request: invalid headers."
},
"timestamp":"2019-03-07 13:06:48",
"labels":{
"pod-template-hash":"2368795483",
"service":"app"
},
"namespace":"production",
"nsec":145341848,
"source":"kubernetes",
"host":"k8s-node-55555-1",
"pod_name":"app-67bdcf98d7-mhktx",
"container_name":"app",
"boolean_fields":{}
}ืขืก ืืืึธืื ืืืกืงืืืขื ืึทื ืืืืื tcpdump ืืืขื ืืขืืคึฟื ืกืึธืืืืข ืืขื ืคึผืจืึธืืืขื ... ืึธืืขืจ ืืื ืืืขื ืืืืขืจืืืจื ืืืขืื ืื ืคืึทืจืงืขืจ ืงืืื:
ืืืกืคืึธืจืฉืื ื
ืืึธื, ืขืก ืืื ืืขืกืขืจ ืฆื ืืขืจื ืฆื ืคืึทืจืงืขืจ ืืืืฃ ืืขื ืกืคึผืขืฆืืคืืฉ ื ืึธืืข, ืืื Kubernetes ืืื ืืืคึผืืืื ืึท ืคึผืึธื: ืืขืจ ืืึทื ื ืคืื ืื ืืึทืืคึผ ืืืขื ืืืื ืึทืืื ืึทื ืขืก ืืืขื ืืืื ืืขืืืขื ืฆื ืืขืคึฟืื ืขื ืืืึท ืืื ืืกืืขืจ ืขืคึผืขืก ืฉืืื ืืขืฉืืืื ื. ืืื ืืืงืข ืืืขื ืืขื ืืื ืขืก ืืื ืืขืจืืืื, ืืื ืืขื ืืืืขืจืงื ืื ืคืืืื ืืข ืจืื:
GET /back/user HTTP/1.1
Host: api.app.example.com
X-Request-ID: 27ceb14972da8c21a8f92904b3eff1e5
X-Real-IP: 83.41.81.250
X-Forwarded-For: 83.41.81.250
X-Forwarded-Host: api.app.example.com
X-Forwarded-Port: 443
X-Forwarded-Proto: https
X-Original-URI: /front/back/user
X-Scheme: https
X-Original-Forwarded-For: 83.41.81.250
X-Nginx-Geo-Client-Country: Spain
X-Nginx-Geo-Client-City: M.laga
Accept-Encoding: gzip
CF-IPCountry: ES
CF-RAY: 4b345cfd1c4ac691-MAD
CF-Visitor: {"scheme":"https"}
pragma: no-cache
cache-control: no-cache
accept: application/json, text/plain, */*
origin: https://app.example.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36
referer: https://app.example.com/auth/login
accept-language: en-US,en;q=0.9,en-GB;q=0.8,pl;q=0.7
cookie: many_encrypted_cookies; .AspNetCore.Identity.Application=something_encrypted;
CF-Connecting-IP: 83.41.81.250
True-Client-IP: 83.41.81.250
CDN-Loop: cloudflare
HTTP/1.1 400 Bad Request
Connection: close
Date: Wed, 06 Mar 2019 12:34:20 GMT
Server: Kestrel
Content-Length: 0
ืืฒ ื ื ืื ืืข ืจ ืืืจืืงืืง ื ื ื ืฐืืจ ื ืื ื ืืข ื ืืืืขืจืง ื ืื ืก ืฐืืจื M.laga. ืขืก ืืื ืืจืื ื ืฆื ืืจืขืคื ืึทื ืขืก ืืื ืงืืื M.laga ืฉืืึธื ืืื ืกืคึผืึทืื (ืึธืืขืจ ืขืก ืืื ). ืืืจ ืึธื ืืึทืคึผื ืืขื ืืขืืึทื ืง, ืืืจ ืืขืงืืงื ืืืืฃ ืื ืื ืืจืขืกืก ืงืึทื ืคืืืืขืจืืืฉืึทื ื, ืืื ืืืจ ืืึธืื ืืขืืขื ืืขื ืืืื ืขืจ ืื ืกืขืจืืึทื ืึท ืืืืฉ ืฆืืจืืง (ืืื ืืขืจ ืืงืฉื ืคืื ืืขื ืงืืืขื ื) "ืืฉืขืืืขื" ืกื ืืคึผืึทื:
ingress.kubernetes.io/configuration-snippet: |
proxy_set_header X-Nginx-Geo-Client-Country $geoip_country_name;
proxy_set_header X-Nginx-Geo-Client-City $geoip_city;ื ืึธื ืืืกืืืืึทืืื ื ืื ืคืึธืจืืืขืจืืื ื ืคืื ืื ืืขืืขืจื, ืึทืืฅ ืืขืืืืจื ืคืืึทื! (ืขืก ืืื ืืึทืื ืืขืืืืจื ืงืืึธืจ ืึทื ืื ืึทืคึผืืึทืงืืืฉืึทื ืืื ื ืื ืืขืจ ืืืจืฃ ืื ืืขืืขืจื.)
ืืืฆื ืืึธืืืจ ืงืืงื ืืืืฃ ืื ืคึผืจืึธืืืขื ืืขืจ ืืืื. ืขืก ืงืขื ืขื ืืืื ืืืืื ืจืืคึผืจืึทืืืกื ืื ืืขืจ ืึทืคึผืืึทืงืืืฉืึทื ืืืจื ืืึทืื ืึท ืืขืื ืขื ืืขืื ืฆื localhost:80:
GET /back/user HTTP/1.1
Host: api.app.example.com
cache-control: no-cache
accept: application/json, text/plain, */*
origin: https://app.example.com
Cookie: test=Desiree
... ืงืขืจื ืืื 401 Unauthorized, ืืื ืืขืจืืืึทืจื. ืืืึธืก ืืึทืคึผืึทื ื ืืืื ืืืจ ืืึธื:
GET /back/user HTTP/1.1
Host: api.app.example.com
cache-control: no-cache
accept: application/json, text/plain, */*
origin: https://app.example.com
Cookie: test=Dรฉsirรฉe?
ืืืขื ืฆืืจืืงืงืืืขื 400 Bad request - ืืื ืื ืึทืคึผืืึทืงืืืฉืึทื ืงืืึธืฅ ืืืจ ืืืขืื ืืึทืงืืืขื ืึท ืืขืืช ืืืึธืก ืืื ืฉืืื ืืึทืงืึทื ื ืฆื ืืื ืื:
{
"@t":"2019-03-31T12:59:54.3746446Z",
"@mt":"Connection id "{ConnectionId}" bad request data: "{message}"",
"@x":"Microsoft.AspNetCore.Server.Kestrel.Core.BadHttpRequestException: Malformed request: invalid headers.n at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.Http1Connection.TryParseRequest(ReadResult result, Boolean& endConnection)n at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.HttpProtocol.<ProcessRequestsAsync>d__185`1.MoveNext()",
"ConnectionId":"0HLLLR1J974L9",
"message":"Malformed request: invalid headers.",
"EventId":{
"Id":17,
"Name":"ConnectionBadRequest"
},
"SourceContext":"Microsoft.AspNetCore.Server.Kestrel",
"ThreadId":71
}ืจืขืืืืืึทืื ืคืื
ืกืคึผืขืฆืืขื ืงืขืกืืจืขื ืจืืืืืง ืคึผืจืึธืฆืขืก ืืืืคึผ ืืขืืขืจื ืืื ืื ืจืืืืืง ืืืชืืืช ืืื UTF-8, ืืืึธืก ืืขื ืขื ืงืึทื ืืืื ื ืืื ืื ื ืขืืขื ืคืื ืึท ืืึทื ืฅ ืืจืืืก ื ืืืขืจ ืคืื ืฉืืขื.
ืึทื ื ืึธื ืคืึทืงืืึธืจ ืืื ืืื ืืืขืจ ืคืึทื ืืื ืึทื ืืขืจ ืงืืืขื ื ืืื ื ืืฉื ืืืฆื ืคึผืืึทื ืฆื ืืืืฉื ืื ืืืคึผืืึทืืขื ืืืืฉืึทื ืคืื ืงืขืกืืจืขื ืืื ืื ืึทืคึผืืึทืงืืืฉืึทื. ืึธืืขืจ, ืืฉืื ืืื AspNetCore ืืื (, ) ืืื ืืืื ืื ืืืก ืืืขื ื ืืฉื ืืขืืคื...
ืฆื ืงืืฆืขืจ: ืืขืจ ืฆืขืื ืืื ื ืื ืืขืจ ืืืขืื ืื ืกืคึผืขืฆืืคืืฉ ืคึผืจืึธืืืขืืก ืคืื ืงืขืกืืจืขื ืึธืืขืจ UTF-8 (ืืื 2019?!), ืึธืืขืจ ืืืขืื ืืขื ืคืึทืงื ืึทื ืืื ืืคืืื ืขืกืก ืืื ืงืึธื ืกืืกืืขื ื ืืขืจื ืขื ืืขืืขืจ ืฉืจืื ืืืจ ื ืขืืขื ืืืขื ืืืจ ืืืื ืคึฟืึทืจ ืคึผืจืึธืืืขืืก ืืืขื ืืืืขืจ ืึธืืขืจ ืฉืคึผืขืืขืจ ืืจืึธืื ืคืจืืื. ืืึธื ืืืึทื ืืื ืืึทืื!
ืคึผืก
ืืืืขื ืขื ืืืื ืืืืฃ ืืื ืืืขืจ ืืืึธื:
- ยซ";
- ยซ";
- ยซ";
- ยซ";
- ยซ'.
ืืงืืจ: www.habr.com