feat: support ip whitelist (#1038)

* feat:
support ip whitelist

* feat:
support ip whitelist

* style: Clang Format

* feat: add client_filter

* style: Clang Format

* delete ip_whitelist.hpp

* test: add client_filter test

* fix:
1.clang-format issues in test files

---------

Co-authored-by: qicosmos <qicosmos@linux.alibaba.com>

Author: shenxuebing

include/ylt/coro_rpc/impl/coro_rpc_server.hpp

@@ -172,7 +172,7 @@ class coro_rpc_server_base {
       }
       errc_ = listen();
       if (!errc_) {
-        if constexpr (requires(typename server_config::executor_pool_t &pool) {
+        if constexpr (requires(typename server_config::executor_pool_t & pool) {
                         pool.run();
                       }) {
           thd_ = std::thread([this] {
@@ -348,6 +348,16 @@ class coro_rpc_server_base {
 
   auto &get_io_context_pool() noexcept { return pool_; }
 
+  /*!
+   * Set client filter callback
+   * @param filter callback function that takes endpoint and returns bool
+   *               true to allow connection, false to reject
+   */
+  void client_filter(
+      std::function<bool(const asio::ip::tcp::endpoint &)> filter) {
+    client_filter_ = std::move(filter);
+  }
+
  private:
   coro_rpc::err_code listen() {
     ELOG_INFO << "begin to listen";
@@ -434,6 +444,26 @@ class coro_rpc_server_base {
         continue;
       }
 
+      // Client filter check
+      if (client_filter_) {
+        asio::error_code ec;
+        auto remote_endpoint = socket.remote_endpoint(ec);
+        if (ec) {
+          ELOG_WARN << "Failed to get remote endpoint: " << ec.message();
+          continue;
+        }
+
+        if (!client_filter_(remote_endpoint)) {
+          ELOG_WARN << "Connection from "
+                    << remote_endpoint.address().to_string()
+                    << " rejected by client filter";
+          continue;
+        }
+
+        ELOG_INFO << "Connection from " << remote_endpoint.address().to_string()
+                  << " allowed by client filter";
+      }
+
       int64_t conn_id = ++conn_id_;
       ELOG_INFO << "new client conn_id " << conn_id << " coming";
       if (is_enable_tcp_no_delay_) {
@@ -545,5 +575,7 @@ class coro_rpc_server_base {
 #ifdef YLT_ENABLE_IBV
   std::optional<coro_io::ib_socket_t::config_t> ibv_config_;
 #endif
+
+  std::function<bool(const asio::ip::tcp::endpoint &)> client_filter_;
 };
 }  // namespace coro_rpc

include/ylt/standalone/cinatra/coro_http_server.hpp

@@ -605,6 +605,16 @@ class coro_http_server {
   std::string_view address() { return address_; }
   std::error_code get_errc() { return errc_; }
 
+  /*!
+   * Set client filter callback
+   * @param filter callback function that takes endpoint and returns bool
+   *               true to allow connection, false to reject
+   */
+  void client_filter(
+      std::function<bool(const asio::ip::tcp::endpoint &)> filter) {
+    client_filter_ = std::move(filter);
+  }
+
  private:
   std::error_code listen() {
     CINATRA_LOG_INFO << "begin to listen " << port_;
@@ -749,6 +759,28 @@ class coro_http_server {
         }
         continue;
       }
+
+      // Client filter check
+      if (client_filter_) {
+        auto remote_endpoint = socket.remote_endpoint(error);
+        if (error) {
+          CINATRA_LOG_WARNING << "Failed to get remote endpoint: "
+                              << error.message();
+          continue;
+        }
+
+        if (!client_filter_(remote_endpoint)) {
+          CINATRA_LOG_WARNING << "HTTP connection rejected from "
+                              << remote_endpoint.address().to_string()
+                              << " by client filter";
+          continue;
+        }
+
+        CINATRA_LOG_DEBUG << "HTTP connection accepted from "
+                          << remote_endpoint.address().to_string()
+                          << " (client filter passed)";
+      }
+
       auto conn =
           accept_impl(coro_io::socket_wrapper_t{std::move(socket), executor});
       start_one(conn).via(conn->get_executor()).detach();
@@ -1044,6 +1076,8 @@ class coro_http_server {
   bool write_failed_forever_ = false;
   bool read_failed_forever_ = false;
 #endif
+
+  std::function<bool(const asio::ip::tcp::endpoint &)> client_filter_;
 };
 
 using http_server = coro_http_server;

src/coro_http/tests/CMakeLists.txt

@@ -26,6 +26,7 @@ add_executable(coro_http_test
         test_cinatra.cpp
         test_cinatra_websocket.cpp
         test_http_parse.cpp
+        test_http_client_filter.cpp
         main.cpp
         )