58cfaf2659
tested with 32K acl rules, generated by
for x in `seq 128` ; do for y in `seq 255` ; do \
echo "Deny 10.$x.$y.0/24" ; done ; done
after loading the config (which is dogslow too), tinyproxy
required 9.5 seconds for the acl check on every request.
after switching the list implementation to sblist, a request
with the full acl check now takes only 0.025 seconds.
the time spent for loading the config file is identical for both
list implementations, roughly 30 seconds.
(in a previous test, 65K acl rules were generated, but every
connection required almost 2 minutes to crunch through the list...)
37 lines
1.3 KiB
C
37 lines
1.3 KiB
C
/* tinyproxy - A fast light-weight HTTP proxy
|
|
* Copyright (C) 2000 Robert James Kaes <rjkaes@users.sourceforge.net>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*/
|
|
|
|
/* See 'acl.c' for detailed information. */
|
|
|
|
#ifndef TINYPROXY_ACL_H
|
|
#define TINYPROXY_ACL_H
|
|
|
|
#include "sblist.h"
|
|
#include "sock.h"
|
|
|
|
typedef enum { ACL_ALLOW, ACL_DENY } acl_access_t;
|
|
typedef sblist* acl_list_t;
|
|
|
|
extern int insert_acl (char *location, acl_access_t access_type,
|
|
acl_list_t *access_list);
|
|
extern int check_acl (const char *ip_address, union sockaddr_union *addr,
|
|
acl_list_t access_list);
|
|
extern void flush_access_list (acl_list_t access_list);
|
|
|
|
#endif
|