use std::sync::Arc; use anyhow::{format_err, Error}; use futures::*; use hyper::{Body, Request, Response}; use openssl::ssl::{SslAcceptor, SslFiletype, SslMethod}; use tokio::net::{TcpListener, TcpStream}; use proxmox_backup::configdir; fn main() -> Result<(), Error> { proxmox_backup::tools::runtime::main(run()) } async fn run() -> Result<(), Error> { let key_path = configdir!("/proxy.key"); let cert_path = configdir!("/proxy.pem"); let mut acceptor = SslAcceptor::mozilla_intermediate(SslMethod::tls()).unwrap(); acceptor .set_private_key_file(key_path, SslFiletype::PEM) .map_err(|err| format_err!("unable to read proxy key {} - {}", key_path, err))?; acceptor .set_certificate_chain_file(cert_path) .map_err(|err| format_err!("unable to read proxy cert {} - {}", cert_path, err))?; acceptor.check_private_key().unwrap(); let acceptor = Arc::new(acceptor.build()); let listener = TcpListener::bind(std::net::SocketAddr::from(([127, 0, 0, 1], 8008))).await?; println!("listening on {:?}", listener.local_addr()); loop { let (socket, _addr) = listener.accept().await?; tokio::spawn(handle_connection(socket, Arc::clone(&acceptor)).map(|res| { if let Err(err) = res { eprintln!("Error: {}", err); } })); } } async fn handle_connection(socket: TcpStream, acceptor: Arc) -> Result<(), Error> { socket.set_nodelay(true).unwrap(); let ssl = openssl::ssl::Ssl::new(acceptor.context())?; let stream = tokio_openssl::SslStream::new(ssl, socket)?; let mut stream = Box::pin(stream); stream.as_mut().accept().await?; let mut http = hyper::server::conn::Http::new(); http.http2_only(true); // increase window size: todo - find optiomal size let max_window_size = (1 << 31) - 2; http.http2_initial_stream_window_size(max_window_size); http.http2_initial_connection_window_size(max_window_size); let service = hyper::service::service_fn(|_req: Request| { println!("Got request"); let buffer = vec![65u8; 4 * 1024 * 1024]; // nonsense [A,A,A,A...] let body = Body::from(buffer); let response = Response::builder() .status(http::StatusCode::OK) .header(http::header::CONTENT_TYPE, "application/octet-stream") .body(body) .unwrap(); future::ok::<_, Error>(response) }); http.serve_connection(stream, service) .map_err(Error::from) .await?; println!("H2 connection CLOSE !"); Ok(()) }