Call namespaced Pingora hosts from RustScript

Author: fffonion

Cargo.lock

@@ -5,6 +5,7 @@ edition = "2024"
 license = "Apache-2.0"
 
 [dependencies]
+pd-host-function = { path = "../rustscript/pd-vm/pd-host-function" }
 pingora = "0.8.1"
 vm = { package = "pd-vm", path = "../rustscript/pd-vm", default-features = false, features = ["runtime"] }
 

Cargo.toml

@@ -4,13 +4,13 @@ Standalone Pingora integration demo for `pd-vm` / RustScript.
 
 ## What it proves
 
-A Pingora gateway can keep the framework and proxy code compiled while moving request policy into RustScript:
+A Pingora gateway can keep the framework and proxy code compiled while moving request/response policy into RustScript:
 
-- input from `pingora::http::RequestHeader`: method, path, `x-user-tier`
-- scripted output: `allow`, `route:<upstream>`, or `deny:<status>:<reason>`
-- optional conversion of deny decisions back into `pingora::http::ResponseHeader`
+- live `pingora::http::RequestHeader` reads: `pingora::request::method`, `pingora::request::path`, `pingora::request::header`
+- live Pingora mutations: `pingora::request::insert_header`, `pingora::response::set_status`, `pingora::response::insert_header`
+- host functions are exported with `#[pd_host_function(name = "pingora::...")]`; the `.rss` names and namespaces match the bound host names exactly
 
-This does not fork or patch Pingora. It depends on the upstream `pingora` crate and local `pd-vm` path only.
+This does not fork or patch Pingora. It depends on the upstream `pingora` crate plus local `pd-vm` / `pd-host-function` paths only.
 
 ## Run
 

README.md

@@ -9,8 +9,22 @@ fn main() {
         .insert_header("x-user-tier", "free")
         .expect("tier header should insert");
 
-    let decision = policy
-        .evaluate_request(&request)
+    let response = policy
+        .evaluate_request(&mut request)
         .expect("policy should evaluate");
-    println!("{decision:?}");
+    let reason = response
+        .headers
+        .get("x-rustscript-deny-reason")
+        .and_then(|value| value.to_str().ok())
+        .unwrap_or("");
+    println!(
+        "status={}, reason={}, request_checked={}",
+        response.status.as_u16(),
+        reason,
+        request
+            .headers
+            .get("x-rustscript-checked")
+            .and_then(|value| value.to_str().ok())
+            .unwrap_or("")
+    );
 }

examples/decision.rs

@@ -1,12 +1,20 @@
-fn gateway_decision(decision) -> string;
-
-let blocked_admin = path == "/admin" && tier != "pro";
-let canary = path == "/canary" && method == "GET";
-let decision = if blocked_admin => {
-    "deny:403:upgrade required"
-} else if canary => {
-    "route:canary-upstream"
-} else => {
-    "allow"
-};
-gateway_decision(decision);
+use pingora;
+
+let method: string = pingora::request::method();
+let path: string = pingora::request::path();
+let tier: string = pingora::request::header("x-user-tier");
+
+let request_marked: bool = pingora::request::insert_header("x-rustscript-checked", "true");
+let policy_marked: bool = pingora::response::insert_header("x-rustscript-policy", "gateway_policy");
+
+if path == "/admin" && tier != "pro" {
+    pingora::response::set_status(403);
+    pingora::response::insert_header("x-rustscript-deny-reason", "upgrade required");
+} else if path == "/canary" && method == "GET" {
+    pingora::response::set_status(200);
+    pingora::response::insert_header("x-rustscript-upstream", "canary-upstream");
+} else {
+    pingora::response::set_status(204);
+}
+
+pingora::response::status();