Kyle Isom
564e0a9c67
Configurable maximum concurrent connections per listener. When the limit is reached, new connections are closed immediately after accept. 0 means unlimited (default, preserving existing behavior). Config: Listener gains max_connections field, validated non-negative. DB: Migration 3 adds listeners.max_connections column. UpdateListenerMaxConns method for runtime changes via gRPC. CreateListener updated to persist max_connections on seed. Server: ListenerState/ListenerData gain MaxConnections. Limit checked in serve() after Accept but before handleConn — if ActiveConnections >= MaxConnections, connection is closed and the accept loop continues. SetMaxConnections method for runtime updates. Proto: SetListenerMaxConnections RPC added. ListenerStatus gains max_connections field. Generated code regenerated. gRPC server: SetListenerMaxConnections implements write-through (DB first, then in-memory update). GetStatus includes max_connections. Client: SetListenerMaxConnections method, MaxConnections in ListenerStatus. Tests: DB CRUD and UpdateListenerMaxConns, server connection limit enforcement (accept 2, reject 3rd, close one, accept again), gRPC SetListenerMaxConnections round-trip with DB persistence, not-found error handling. Also updates PROJECT_PLAN.md with phases 6-8 and PROGRESS.md with tracking for the new features. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
119 lines
2.7 KiB
Protocol Buffer
119 lines
2.7 KiB
Protocol Buffer
syntax = "proto3";
|
|
|
|
package mc_proxy.v1;
|
|
|
|
option go_package = "git.wntrmute.dev/kyle/mc-proxy/gen/mc_proxy/v1;mcproxyv1";
|
|
|
|
import "google/protobuf/timestamp.proto";
|
|
|
|
service ProxyAdminService {
|
|
// Routes
|
|
rpc ListRoutes(ListRoutesRequest) returns (ListRoutesResponse);
|
|
rpc AddRoute(AddRouteRequest) returns (AddRouteResponse);
|
|
rpc RemoveRoute(RemoveRouteRequest) returns (RemoveRouteResponse);
|
|
|
|
// Firewall
|
|
rpc GetFirewallRules(GetFirewallRulesRequest) returns (GetFirewallRulesResponse);
|
|
rpc AddFirewallRule(AddFirewallRuleRequest) returns (AddFirewallRuleResponse);
|
|
rpc RemoveFirewallRule(RemoveFirewallRuleRequest) returns (RemoveFirewallRuleResponse);
|
|
|
|
// Connection limits
|
|
rpc SetListenerMaxConnections(SetListenerMaxConnectionsRequest) returns (SetListenerMaxConnectionsResponse);
|
|
|
|
// Status
|
|
rpc GetStatus(GetStatusRequest) returns (GetStatusResponse);
|
|
}
|
|
|
|
// Routes
|
|
|
|
message Route {
|
|
string hostname = 1;
|
|
string backend = 2;
|
|
string mode = 3; // "l4" (default) or "l7"
|
|
string tls_cert = 4; // PEM certificate path (L7 only)
|
|
string tls_key = 5; // PEM private key path (L7 only)
|
|
bool backend_tls = 6; // re-encrypt to backend (L7 only)
|
|
bool send_proxy_protocol = 7; // send PROXY v2 header to backend
|
|
}
|
|
|
|
message ListRoutesRequest {
|
|
string listener_addr = 1;
|
|
}
|
|
|
|
message ListRoutesResponse {
|
|
string listener_addr = 1;
|
|
repeated Route routes = 2;
|
|
}
|
|
|
|
message AddRouteRequest {
|
|
string listener_addr = 1;
|
|
Route route = 2;
|
|
}
|
|
|
|
message AddRouteResponse {}
|
|
|
|
message RemoveRouteRequest {
|
|
string listener_addr = 1;
|
|
string hostname = 2;
|
|
}
|
|
|
|
message RemoveRouteResponse {}
|
|
|
|
// Firewall
|
|
|
|
enum FirewallRuleType {
|
|
FIREWALL_RULE_TYPE_UNSPECIFIED = 0;
|
|
FIREWALL_RULE_TYPE_IP = 1;
|
|
FIREWALL_RULE_TYPE_CIDR = 2;
|
|
FIREWALL_RULE_TYPE_COUNTRY = 3;
|
|
}
|
|
|
|
message FirewallRule {
|
|
FirewallRuleType type = 1;
|
|
string value = 2;
|
|
}
|
|
|
|
message GetFirewallRulesRequest {}
|
|
|
|
message GetFirewallRulesResponse {
|
|
repeated FirewallRule rules = 1;
|
|
}
|
|
|
|
message AddFirewallRuleRequest {
|
|
FirewallRule rule = 1;
|
|
}
|
|
|
|
message AddFirewallRuleResponse {}
|
|
|
|
message RemoveFirewallRuleRequest {
|
|
FirewallRule rule = 1;
|
|
}
|
|
|
|
message RemoveFirewallRuleResponse {}
|
|
|
|
// Status
|
|
|
|
message SetListenerMaxConnectionsRequest {
|
|
string listener_addr = 1;
|
|
int64 max_connections = 2; // 0 = unlimited
|
|
}
|
|
|
|
message SetListenerMaxConnectionsResponse {}
|
|
|
|
message ListenerStatus {
|
|
string addr = 1;
|
|
int32 route_count = 2;
|
|
int64 active_connections = 3;
|
|
bool proxy_protocol = 4;
|
|
int64 max_connections = 5;
|
|
}
|
|
|
|
message GetStatusRequest {}
|
|
|
|
message GetStatusResponse {
|
|
string version = 1;
|
|
google.protobuf.Timestamp started_at = 2;
|
|
repeated ListenerStatus listeners = 3;
|
|
int64 total_connections = 4;
|
|
}
|