19f5aa252f
update them to the new tokio-openssl API and remove socket buffer size setting - it was removed from the TcpStream API, and is now only available via TcpSocket (which can in turn be converted to a TcpListener), but this is not needed for this example. Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
80 lines
2.6 KiB
Rust
80 lines
2.6 KiB
Rust
use std::sync::Arc;
|
|
|
|
use anyhow::{format_err, Error};
|
|
use futures::*;
|
|
use hyper::{Body, Request, Response};
|
|
use openssl::ssl::{SslAcceptor, SslFiletype, SslMethod};
|
|
use tokio::net::{TcpListener, TcpStream};
|
|
|
|
use proxmox_backup::configdir;
|
|
|
|
fn main() -> Result<(), Error> {
|
|
proxmox_backup::tools::runtime::main(run())
|
|
}
|
|
|
|
async fn run() -> Result<(), Error> {
|
|
let key_path = configdir!("/proxy.key");
|
|
let cert_path = configdir!("/proxy.pem");
|
|
|
|
let mut acceptor = SslAcceptor::mozilla_intermediate(SslMethod::tls()).unwrap();
|
|
acceptor
|
|
.set_private_key_file(key_path, SslFiletype::PEM)
|
|
.map_err(|err| format_err!("unable to read proxy key {} - {}", key_path, err))?;
|
|
acceptor
|
|
.set_certificate_chain_file(cert_path)
|
|
.map_err(|err| format_err!("unable to read proxy cert {} - {}", cert_path, err))?;
|
|
acceptor.check_private_key().unwrap();
|
|
|
|
let acceptor = Arc::new(acceptor.build());
|
|
|
|
let listener = TcpListener::bind(std::net::SocketAddr::from(([127, 0, 0, 1], 8008))).await?;
|
|
|
|
println!("listening on {:?}", listener.local_addr());
|
|
|
|
loop {
|
|
let (socket, _addr) = listener.accept().await?;
|
|
tokio::spawn(handle_connection(socket, Arc::clone(&acceptor)).map(|res| {
|
|
if let Err(err) = res {
|
|
eprintln!("Error: {}", err);
|
|
}
|
|
}));
|
|
}
|
|
}
|
|
|
|
async fn handle_connection(socket: TcpStream, acceptor: Arc<SslAcceptor>) -> Result<(), Error> {
|
|
socket.set_nodelay(true).unwrap();
|
|
|
|
let ssl = openssl::ssl::Ssl::new(acceptor.context())?;
|
|
let stream = tokio_openssl::SslStream::new(ssl, socket)?;
|
|
let mut stream = Box::pin(stream);
|
|
|
|
stream.as_mut().accept().await?;
|
|
|
|
let mut http = hyper::server::conn::Http::new();
|
|
http.http2_only(true);
|
|
// increase window size: todo - find optiomal size
|
|
let max_window_size = (1 << 31) - 2;
|
|
http.http2_initial_stream_window_size(max_window_size);
|
|
http.http2_initial_connection_window_size(max_window_size);
|
|
|
|
let service = hyper::service::service_fn(|_req: Request<Body>| {
|
|
println!("Got request");
|
|
let buffer = vec![65u8; 4 * 1024 * 1024]; // nonsense [A,A,A,A...]
|
|
let body = Body::from(buffer);
|
|
|
|
let response = Response::builder()
|
|
.status(http::StatusCode::OK)
|
|
.header(http::header::CONTENT_TYPE, "application/octet-stream")
|
|
.body(body)
|
|
.unwrap();
|
|
future::ok::<_, Error>(response)
|
|
});
|
|
|
|
http.serve_connection(stream, service)
|
|
.map_err(Error::from)
|
|
.await?;
|
|
|
|
println!("H2 connection CLOSE !");
|
|
Ok(())
|
|
}
|