Esempio n. 1
0
        public RemoteIpSet()
        {
            VirtualRoot.BuildEventPath <WsTcpClientAcceptedEvent>("收集Ws客户端IP和端口", LogEnum.None, path: message => {
                if (_dicByIp.TryGetValue(message.RemoteIp, out RemoteIpEntry entry))
                {
                    entry.IncActionTimes();
                }
                else
                {
                    entry = new RemoteIpEntry(message.RemoteIp);
                    entry.IncActionTimes();
                    _dicByIp.Add(message.RemoteIp, entry);
                }
            }, this.GetType());
            VirtualRoot.BuildEventPath <WebApiRequestEvent>("收集WebApi客户端IP和端口", LogEnum.None, path: message => {
                if (_dicByIp.TryGetValue(message.RemoteIp, out RemoteIpEntry entry))
                {
                    entry.IncActionTimes();
                }
                else
                {
                    entry = new RemoteIpEntry(message.RemoteIp);
                    entry.IncActionTimes();
                    _dicByIp.Add(message.RemoteIp, entry);
                }
            }, this.GetType());

            VirtualRoot.BuildEventPath <Per10SecondEvent>("周期找出恶意IP封掉", LogEnum.None, path: message => {
                // TODO:阿里云AuthorizeSecurityGroup
            }, this.GetType());
        }
Esempio n. 2
0
        public RemoteIpSet()
        {
            void IncActionTimes(IPAddress remoteIp)
            {
                if (_dicByIp.TryGetValue(remoteIp, out RemoteIpEntry entry))
                {
                    entry.IncActionTimes();
                }
                else
                {
                    entry = new RemoteIpEntry(remoteIp);
                    entry.IncActionTimes();
                    if (!_dicByIp.TryAdd(remoteIp, entry))
                    {
                        _dicByIp[remoteIp].IncActionTimes();
                    }
                }
            }

            VirtualRoot.BuildEventPath <WsTcpClientAcceptedEvent>("收集Ws客户端IP和端口", LogEnum.None, path: message => {
                IncActionTimes(message.RemoteIp);
            }, this.GetType());
            VirtualRoot.BuildEventPath <WebApiRequestEvent>("收集WebApi客户端IP和端口", LogEnum.None, path: message => {
                IncActionTimes(message.RemoteIp);
            }, this.GetType());

            VirtualRoot.BuildEventPath <Per10SecondEvent>("周期找出恶意IP封掉", LogEnum.None, path: message => {
                // TODO:阿里云AuthorizeSecurityGroup
            }, this.GetType());
            VirtualRoot.BuildEventPath <Per100MinuteEvent>("清理长久不活跃的记录", LogEnum.DevConsole, path: message => {
                List <IPAddress> toRemoves = new List <IPAddress>();
                DateTime time = message.BornOn.AddHours(-1);
                foreach (var remoteIp in _dicByIp.Values.ToArray())
                {
                    if (remoteIp.LastActionOn < time)
                    {
                        toRemoves.Add(remoteIp.RemoteIp);
                    }
                }
                foreach (var remoteIp in toRemoves)
                {
                    _dicByIp.TryRemove(remoteIp, out _);
                }
            }, this.GetType());
        }