|
@@ -1185,36 +1185,42 @@ int rrdpush_receiver_thread_spawn(RRDHOST *host, struct web_client *w, char *url
|
|
|
}
|
|
|
|
|
|
if(!key || !*key) {
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
log_stream_connection(w->client_ip, w->client_port, (key && *key)?key:"-", (machine_guid && *machine_guid)?machine_guid:"-", (hostname && *hostname)?hostname:"-", "ACCESS DENIED - NO KEY");
|
|
|
error("STREAM [receive from [%s]:%s]: request without an API key. Forbidding access.", w->client_ip, w->client_port);
|
|
|
return rrdpush_receiver_permission_denied(w);
|
|
|
}
|
|
|
|
|
|
if(!hostname || !*hostname) {
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
log_stream_connection(w->client_ip, w->client_port, (key && *key)?key:"-", (machine_guid && *machine_guid)?machine_guid:"-", (hostname && *hostname)?hostname:"-", "ACCESS DENIED - NO HOSTNAME");
|
|
|
error("STREAM [receive from [%s]:%s]: request without a hostname. Forbidding access.", w->client_ip, w->client_port);
|
|
|
return rrdpush_receiver_permission_denied(w);
|
|
|
}
|
|
|
|
|
|
if(!machine_guid || !*machine_guid) {
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
log_stream_connection(w->client_ip, w->client_port, (key && *key)?key:"-", (machine_guid && *machine_guid)?machine_guid:"-", (hostname && *hostname)?hostname:"-", "ACCESS DENIED - NO MACHINE GUID");
|
|
|
error("STREAM [receive from [%s]:%s]: request without a machine GUID. Forbidding access.", w->client_ip, w->client_port);
|
|
|
return rrdpush_receiver_permission_denied(w);
|
|
|
}
|
|
|
|
|
|
if(regenerate_guid(key, buf) == -1) {
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
log_stream_connection(w->client_ip, w->client_port, (key && *key)?key:"-", (machine_guid && *machine_guid)?machine_guid:"-", (hostname && *hostname)?hostname:"-", "ACCESS DENIED - INVALID KEY");
|
|
|
error("STREAM [receive from [%s]:%s]: API key '%s' is not valid GUID (use the command uuidgen to generate one). Forbidding access.", w->client_ip, w->client_port, key);
|
|
|
return rrdpush_receiver_permission_denied(w);
|
|
|
}
|
|
|
|
|
|
if(regenerate_guid(machine_guid, buf) == -1) {
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
log_stream_connection(w->client_ip, w->client_port, (key && *key)?key:"-", (machine_guid && *machine_guid)?machine_guid:"-", (hostname && *hostname)?hostname:"-", "ACCESS DENIED - INVALID MACHINE GUID");
|
|
|
error("STREAM [receive from [%s]:%s]: machine GUID '%s' is not GUID. Forbidding access.", w->client_ip, w->client_port, machine_guid);
|
|
|
return rrdpush_receiver_permission_denied(w);
|
|
|
}
|
|
|
|
|
|
if(!appconfig_get_boolean(&stream_config, key, "enabled", 0)) {
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
log_stream_connection(w->client_ip, w->client_port, (key && *key)?key:"-", (machine_guid && *machine_guid)?machine_guid:"-", (hostname && *hostname)?hostname:"-", "ACCESS DENIED - KEY NOT ENABLED");
|
|
|
error("STREAM [receive from [%s]:%s]: API key '%s' is not allowed. Forbidding access.", w->client_ip, w->client_port, key);
|
|
|
return rrdpush_receiver_permission_denied(w);
|
|
@@ -1225,6 +1231,7 @@ int rrdpush_receiver_thread_spawn(RRDHOST *host, struct web_client *w, char *url
|
|
|
if(key_allow_from) {
|
|
|
if(!simple_pattern_matches(key_allow_from, w->client_ip)) {
|
|
|
simple_pattern_free(key_allow_from);
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
log_stream_connection(w->client_ip, w->client_port, (key && *key)?key:"-", (machine_guid && *machine_guid)?machine_guid:"-", (hostname && *hostname) ? hostname : "-", "ACCESS DENIED - KEY NOT ALLOWED FROM THIS IP");
|
|
|
error("STREAM [receive from [%s]:%s]: API key '%s' is not permitted from this IP. Forbidding access.", w->client_ip, w->client_port, key);
|
|
|
return rrdpush_receiver_permission_denied(w);
|
|
@@ -1234,6 +1241,7 @@ int rrdpush_receiver_thread_spawn(RRDHOST *host, struct web_client *w, char *url
|
|
|
}
|
|
|
|
|
|
if(!appconfig_get_boolean(&stream_config, machine_guid, "enabled", 1)) {
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
log_stream_connection(w->client_ip, w->client_port, (key && *key)?key:"-", (machine_guid && *machine_guid)?machine_guid:"-", (hostname && *hostname)?hostname:"-", "ACCESS DENIED - MACHINE GUID NOT ENABLED");
|
|
|
error("STREAM [receive from [%s]:%s]: machine GUID '%s' is not allowed. Forbidding access.", w->client_ip, w->client_port, machine_guid);
|
|
|
return rrdpush_receiver_permission_denied(w);
|
|
@@ -1244,6 +1252,7 @@ int rrdpush_receiver_thread_spawn(RRDHOST *host, struct web_client *w, char *url
|
|
|
if(machine_allow_from) {
|
|
|
if(!simple_pattern_matches(machine_allow_from, w->client_ip)) {
|
|
|
simple_pattern_free(machine_allow_from);
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
log_stream_connection(w->client_ip, w->client_port, (key && *key)?key:"-", (machine_guid && *machine_guid)?machine_guid:"-", (hostname && *hostname) ? hostname : "-", "ACCESS DENIED - MACHINE GUID NOT ALLOWED FROM THIS IP");
|
|
|
error("STREAM [receive from [%s]:%s]: Machine GUID '%s' is not permitted from this IP. Forbidding access.", w->client_ip, w->client_port, machine_guid);
|
|
|
return rrdpush_receiver_permission_denied(w);
|
|
@@ -1264,6 +1273,7 @@ int rrdpush_receiver_thread_spawn(RRDHOST *host, struct web_client *w, char *url
|
|
|
|
|
|
if(now - last_stream_accepted_t < web_client_streaming_rate_t) {
|
|
|
netdata_mutex_unlock(&stream_rate_mutex);
|
|
|
+ rrdhost_system_info_free(system_info);
|
|
|
error("STREAM [receive from [%s]:%s]: too busy to accept new streaming request. Will be allowed in %ld secs.", w->client_ip, w->client_port, (long)(web_client_streaming_rate_t - (now - last_stream_accepted_t)));
|
|
|
return rrdpush_receiver_too_busy_now(w);
|
|
|
}
|