| line |
stmt |
bran |
cond |
sub |
pod |
time |
code |
|
1
|
|
|
|
|
|
|
package Schedule::AdaptiveThrottler; |
|
2
|
|
|
|
|
|
|
|
|
3
|
7
|
|
|
7
|
|
135244
|
use warnings; |
|
|
7
|
|
|
|
|
19
|
|
|
|
7
|
|
|
|
|
355
|
|
|
4
|
7
|
|
|
7
|
|
45
|
use strict; |
|
|
7
|
|
|
|
|
17
|
|
|
|
7
|
|
|
|
|
696
|
|
|
5
|
|
|
|
|
|
|
|
|
6
|
|
|
|
|
|
|
our $VERSION = '0.06'; |
|
7
|
|
|
|
|
|
|
our $DEBUG = 0; |
|
8
|
|
|
|
|
|
|
our $QUIET = 0; |
|
9
|
|
|
|
|
|
|
|
|
10
|
7
|
|
|
7
|
|
51
|
use Scalar::Util qw(reftype blessed); |
|
|
7
|
|
|
|
|
24
|
|
|
|
7
|
|
|
|
|
739
|
|
|
11
|
7
|
|
|
7
|
|
43
|
use Digest::MD5 qw(md5_hex); |
|
|
7
|
|
|
|
|
26
|
|
|
|
7
|
|
|
|
|
1017
|
|
|
12
|
|
|
|
|
|
|
|
|
13
|
|
|
|
|
|
|
require Exporter; |
|
14
|
|
|
|
|
|
|
our @ISA = qw(Exporter); |
|
15
|
|
|
|
|
|
|
our @EXPORT_OK = qw(&authorize &set_client); |
|
16
|
|
|
|
|
|
|
our @EXPORT = qw( |
|
17
|
|
|
|
|
|
|
SCHED_ADAPTHROTTLE_AUTHORIZED |
|
18
|
|
|
|
|
|
|
SCHED_ADAPTHROTTLE_BLOCKED |
|
19
|
|
|
|
|
|
|
); |
|
20
|
|
|
|
|
|
|
our %EXPORT_TAGS = ( ALL => [ @EXPORT_OK, @EXPORT ] ); |
|
21
|
|
|
|
|
|
|
|
|
22
|
7
|
|
|
7
|
|
74
|
use constant SCHED_ADAPTHROTTLE_BLOCKED => 0; |
|
|
7
|
|
|
|
|
12
|
|
|
|
7
|
|
|
|
|
503
|
|
|
23
|
7
|
|
|
7
|
|
54
|
use constant SCHED_ADAPTHROTTLE_AUTHORIZED => 1; |
|
|
7
|
|
|
|
|
18
|
|
|
|
7
|
|
|
|
|
10547
|
|
|
24
|
|
|
|
|
|
|
|
|
25
|
|
|
|
|
|
|
my $memcached_client; # used for the non-OO form |
|
26
|
|
|
|
|
|
|
|
|
27
|
|
|
|
|
|
|
sub set_client { |
|
28
|
8
|
|
|
8
|
1
|
1337
|
my $client = pop; # keep ordered |
|
29
|
8
|
|
|
|
|
16
|
my $self = shift; |
|
30
|
8
|
50
|
33
|
|
|
444
|
die "Invalid storage client object\n" |
|
|
|
|
33
|
|
|
|
|
|
31
|
|
|
|
|
|
|
if ( !blessed($client) |
|
32
|
|
|
|
|
|
|
|| !$client->can('set') |
|
33
|
|
|
|
|
|
|
|| !$client->can('get') ); |
|
34
|
8
|
100
|
|
|
|
60
|
return $memcached_client = $client if !blessed $self; # non-OO form |
|
35
|
6
|
|
|
|
|
31
|
return $self->{memcached_client} = $client; # Guess what? OO-form |
|
36
|
|
|
|
|
|
|
} |
|
37
|
|
|
|
|
|
|
|
|
38
|
|
|
|
|
|
|
# OO-style |
|
39
|
|
|
|
|
|
|
sub new { |
|
40
|
6
|
|
|
6
|
1
|
2609
|
my $class = shift; |
|
41
|
6
|
|
|
|
|
14
|
my $params; |
|
42
|
6
|
100
|
|
|
|
28
|
if ( @_ == 1 ) { |
|
43
|
2
|
100
|
|
|
|
13
|
if ( !blessed $_[0] ) { |
|
44
|
1
|
|
|
|
|
6
|
$params = shift; |
|
45
|
|
|
|
|
|
|
} |
|
46
|
|
|
|
|
|
|
else { |
|
47
|
1
|
|
|
|
|
5
|
$params->{memcached_client} = shift; |
|
48
|
|
|
|
|
|
|
} |
|
49
|
|
|
|
|
|
|
} |
|
50
|
|
|
|
|
|
|
else { |
|
51
|
4
|
|
|
|
|
13
|
$params = {@_}; |
|
52
|
|
|
|
|
|
|
} |
|
53
|
6
|
|
|
|
|
26
|
my $self = bless $params, $class; |
|
54
|
6
|
100
|
|
|
|
64
|
$self->set_client( $params->{memcached_client} ) |
|
55
|
|
|
|
|
|
|
if $params->{memcached_client}; |
|
56
|
6
|
|
|
|
|
40
|
return $self; |
|
57
|
|
|
|
|
|
|
} |
|
58
|
|
|
|
|
|
|
|
|
59
|
|
|
|
|
|
|
sub authorize { |
|
60
|
|
|
|
|
|
|
|
|
61
|
74
|
|
|
74
|
1
|
260
|
my %params; |
|
62
|
|
|
|
|
|
|
my $self; |
|
63
|
|
|
|
|
|
|
|
|
64
|
|
|
|
|
|
|
# Call it as a method or a sub, with a hash or a hashref, |
|
65
|
|
|
|
|
|
|
# as a class or an instance |
|
66
|
74
|
100
|
|
|
|
252
|
if ( @_ < 3 ) { |
|
67
|
54
|
|
|
|
|
74
|
%params = %{ pop() }; |
|
|
54
|
|
|
|
|
294
|
|
|
68
|
54
|
|
|
|
|
141
|
$self = shift; |
|
69
|
|
|
|
|
|
|
} |
|
70
|
|
|
|
|
|
|
else { |
|
71
|
20
|
100
|
|
|
|
84
|
$self = shift if ( @_ % 2 ); |
|
72
|
20
|
|
|
|
|
85
|
%params = @_; |
|
73
|
|
|
|
|
|
|
} |
|
74
|
74
|
100
|
|
|
|
392
|
my $cur_memcached_client |
|
75
|
|
|
|
|
|
|
= blessed $self ? $self->{memcached_client} : $memcached_client; # can it get uglier? |
|
76
|
|
|
|
|
|
|
|
|
77
|
74
|
|
|
|
|
158
|
my $frozen_time = time; |
|
78
|
74
|
|
|
|
|
103
|
my %conditions; |
|
79
|
|
|
|
|
|
|
|
|
80
|
|
|
|
|
|
|
# Check the conditions |
|
81
|
|
|
|
|
|
|
|
|
82
|
|
|
|
|
|
|
my $condition_type; |
|
83
|
74
|
|
|
|
|
152
|
for my $condition_type_tmp (qw(all either)) { |
|
84
|
|
|
|
|
|
|
|
|
85
|
74
|
50
|
33
|
|
|
565
|
if ( exists $params{$condition_type_tmp} |
|
86
|
|
|
|
|
|
|
&& reftype $params{$condition_type_tmp} eq 'HASH' ) |
|
87
|
|
|
|
|
|
|
{ |
|
88
|
74
|
|
|
|
|
97
|
%conditions = %{ $params{$condition_type_tmp} }; |
|
|
74
|
|
|
|
|
250
|
|
|
89
|
74
|
50
|
|
|
|
400
|
die "Conditions improperly defined (must be a hashref)" |
|
90
|
|
|
|
|
|
|
if !%conditions; |
|
91
|
|
|
|
|
|
|
|
|
92
|
|
|
|
|
|
|
# Check the parameters |
|
93
|
|
|
|
|
|
|
|
|
94
|
74
|
|
|
|
|
268
|
for my $condition_params ( values %conditions ) { |
|
95
|
74
|
|
|
|
|
156
|
for my $condition_param_key (qw{max ttl message value}) { |
|
96
|
|
|
|
|
|
|
|
|
97
|
|
|
|
|
|
|
# message & value are strings (or just anything for 'value'), the rest are integers |
|
98
|
296
|
50
|
|
|
|
741
|
die |
|
99
|
|
|
|
|
|
|
"Condition parameter $condition_param_key is '$condition_params->{$condition_param_key}'" |
|
100
|
|
|
|
|
|
|
if !$condition_params->{$condition_param_key}; |
|
101
|
296
|
50
|
100
|
|
|
2199
|
die "Condition parameter $condition_param_key must be positive integer" |
|
|
|
|
66
|
|
|
|
|
|
102
|
|
|
|
|
|
|
if ( ( $condition_param_key eq 'max' || $condition_param_key eq 'ttl' ) |
|
103
|
|
|
|
|
|
|
&& $condition_params->{$condition_param_key} !~ /^[1-9][0-9]*$/ ); |
|
104
|
|
|
|
|
|
|
} |
|
105
|
|
|
|
|
|
|
} |
|
106
|
74
|
|
|
|
|
128
|
$condition_type = $condition_type_tmp; |
|
107
|
74
|
|
|
|
|
149
|
last; # process either 'all' or 'either', not both |
|
108
|
|
|
|
|
|
|
} |
|
109
|
|
|
|
|
|
|
} |
|
110
|
74
|
50
|
|
|
|
178
|
die "No conditions defined" |
|
111
|
|
|
|
|
|
|
if !$condition_type; |
|
112
|
|
|
|
|
|
|
|
|
113
|
|
|
|
|
|
|
# if lockout is defined, use the 'lockout/ban' scheme. if not, we'll use a |
|
114
|
|
|
|
|
|
|
# bucket algorithm |
|
115
|
74
|
|
|
|
|
134
|
my $lockout = $params{lockout}; |
|
116
|
74
|
50
|
33
|
|
|
487
|
die "'Lockout' parameter must be positive integer" |
|
117
|
|
|
|
|
|
|
if ( defined $lockout && $lockout !~ /^[1-9][0-9]*$/ ); |
|
118
|
|
|
|
|
|
|
|
|
119
|
74
|
|
|
|
|
151
|
my $identifier = $params{identifier}; |
|
120
|
74
|
50
|
33
|
|
|
381
|
die "'Identifier' should be a non-empty string" |
|
121
|
|
|
|
|
|
|
if ( !defined $identifier || length($identifier) < 1 ); |
|
122
|
|
|
|
|
|
|
|
|
123
|
|
|
|
|
|
|
# Loop on the conditions. For 'either', we need to find one that is not yet |
|
124
|
|
|
|
|
|
|
# satisfied, for 'all' we need to find lockouts for all of them |
|
125
|
|
|
|
|
|
|
|
|
126
|
|
|
|
|
|
|
# Make the memcached keys a identifier + key name + value |
|
127
|
|
|
|
|
|
|
# TODO: Retrieve the records in 1 operation with get_multi |
|
128
|
|
|
|
|
|
|
# @conditions_names = sort keys %conditions; |
|
129
|
|
|
|
|
|
|
# @keys = map { $_ . '#' . $conditions{$_}->{value} } @conditions_names ) { |
|
130
|
|
|
|
|
|
|
|
|
131
|
74
|
|
|
|
|
134
|
my ( $conditions_ok, $conditions_unknown ) = ( 0, 0 ); |
|
132
|
74
|
|
|
|
|
130
|
my $messages_notok = []; |
|
133
|
|
|
|
|
|
|
|
|
134
|
74
|
|
|
|
|
268
|
while ( my ( $condition_name, $condition ) = each %conditions ) { |
|
135
|
74
|
|
|
|
|
218
|
my $memcached_key = $identifier . '#' . $condition_name . '#' . $condition->{value}; |
|
136
|
74
|
100
|
|
|
|
202
|
$memcached_key = md5_hex($memcached_key) if length $memcached_key > 249; |
|
137
|
|
|
|
|
|
|
|
|
138
|
74
|
|
|
|
|
386
|
my $record = $cur_memcached_client->get($memcached_key); |
|
139
|
|
|
|
|
|
|
|
|
140
|
74
|
100
|
|
|
|
947
|
if ( defined $record ) { |
|
141
|
|
|
|
|
|
|
|
|
142
|
|
|
|
|
|
|
# Do we have a 'block' value in the record, in which case we return |
|
143
|
|
|
|
|
|
|
# a message indicating so. The 'block' record will be automatically |
|
144
|
|
|
|
|
|
|
# removed from memcached at the object's expiry time, so don't |
|
145
|
|
|
|
|
|
|
# touch it. |
|
146
|
59
|
100
|
|
|
|
279
|
if ( $record eq 'block' ) { |
|
|
|
50
|
|
|
|
|
|
|
147
|
8
|
|
|
|
|
32
|
push @$messages_notok, $condition->{message}; |
|
148
|
8
|
50
|
|
|
|
59
|
print STDERR "Access already blocked by " . __PACKAGE__ . "\n" |
|
149
|
|
|
|
|
|
|
if $DEBUG; |
|
150
|
|
|
|
|
|
|
} |
|
151
|
|
|
|
|
|
|
|
|
152
|
|
|
|
|
|
|
# the object in memcached is a list of timestamps, and nothing else. |
|
153
|
|
|
|
|
|
|
elsif ( reftype $record eq 'ARRAY' ) { |
|
154
|
51
|
50
|
|
|
|
128
|
print STDERR "Current timestamps in \$record: " . join( '|', @$record ) . "\n" |
|
155
|
|
|
|
|
|
|
|
|
156
|
|
|
|
|
|
|
if $DEBUG; |
|
157
|
51
|
50
|
|
|
|
113
|
print STDERR "Current frozen time: $frozen_time" . "\n" |
|
158
|
|
|
|
|
|
|
if $DEBUG; |
|
159
|
|
|
|
|
|
|
|
|
160
|
|
|
|
|
|
|
# cleanup the records (remove expired timestamps). This is |
|
161
|
|
|
|
|
|
|
# where it all happens, giving us this "magic sliding time |
|
162
|
|
|
|
|
|
|
# window". |
|
163
|
51
|
|
|
|
|
197
|
@$record = grep { $_ > $frozen_time } @$record; |
|
|
151
|
|
|
|
|
383
|
|
|
164
|
51
|
50
|
|
|
|
122
|
print STDERR "Currently unexpired timestamps in \$record: " |
|
165
|
|
|
|
|
|
|
. join( '|', @$record ) . "\n" |
|
166
|
|
|
|
|
|
|
|
|
167
|
|
|
|
|
|
|
if $DEBUG; |
|
168
|
|
|
|
|
|
|
|
|
169
|
|
|
|
|
|
|
# Since we are about to add a record, if we already have the |
|
170
|
|
|
|
|
|
|
# max number of records, set to blocked. If no lockout time |
|
171
|
|
|
|
|
|
|
# specified, use the bucket algorithm: deny access, but do not |
|
172
|
|
|
|
|
|
|
# update the record. The expired timestamps will be evicted in |
|
173
|
|
|
|
|
|
|
# due time (next access, possibly), giving us more tokens. |
|
174
|
51
|
50
|
|
|
|
109
|
print STDERR "Maximum is " |
|
175
|
|
|
|
|
|
|
. $condition->{max} |
|
176
|
|
|
|
|
|
|
. " and current number of timestamps is " |
|
177
|
|
|
|
|
|
|
. @$record . "\n" |
|
178
|
|
|
|
|
|
|
|
|
179
|
|
|
|
|
|
|
if $DEBUG; |
|
180
|
51
|
100
|
|
|
|
136
|
if ( @$record >= $condition->{max} ) { |
|
181
|
11
|
50
|
|
|
|
36
|
print STDERR "Maximum reached" . "\n" |
|
182
|
|
|
|
|
|
|
if $DEBUG; |
|
183
|
11
|
50
|
|
|
|
33
|
if ($lockout) { |
|
184
|
11
|
50
|
|
|
|
31
|
print STDERR "Setting a timed lock" . "\n" |
|
185
|
|
|
|
|
|
|
if $DEBUG; |
|
186
|
11
|
|
|
|
|
41
|
$cur_memcached_client->set( $memcached_key, 'block', $lockout ); |
|
187
|
|
|
|
|
|
|
} |
|
188
|
11
|
|
|
|
|
188
|
push @$messages_notok, $condition->{message}; |
|
189
|
|
|
|
|
|
|
} |
|
190
|
|
|
|
|
|
|
|
|
191
|
|
|
|
|
|
|
# Add a timestamp to the list. This is NOT the current |
|
192
|
|
|
|
|
|
|
# timestamp, but a timestamp in the future (a TTL record), |
|
193
|
|
|
|
|
|
|
# which allowws for easy filtering by the grep above. And set |
|
194
|
|
|
|
|
|
|
# the memcached record expiration time at the most recent TTL |
|
195
|
|
|
|
|
|
|
# of the list (for automatic cleanup: the object will be |
|
196
|
|
|
|
|
|
|
# discarded from memcached automatically if it is not updated |
|
197
|
|
|
|
|
|
|
# before the longest TTL) |
|
198
|
|
|
|
|
|
|
else { |
|
199
|
40
|
50
|
|
|
|
85
|
print STDERR "Adding a timestamp to the list" . "\n" |
|
200
|
|
|
|
|
|
|
if $DEBUG; |
|
201
|
40
|
|
|
|
|
88
|
push @$record, $frozen_time + $condition->{ttl}; |
|
202
|
40
|
|
|
|
|
149
|
$cur_memcached_client->set( $memcached_key, $record, $condition->{ttl} ); |
|
203
|
40
|
|
|
|
|
597
|
$conditions_ok++; |
|
204
|
|
|
|
|
|
|
} |
|
205
|
|
|
|
|
|
|
} |
|
206
|
|
|
|
|
|
|
else { # This should not happen, but catch it if it does. |
|
207
|
0
|
|
|
|
|
0
|
$conditions_unknown++; |
|
208
|
|
|
|
|
|
|
} |
|
209
|
|
|
|
|
|
|
} |
|
210
|
|
|
|
|
|
|
|
|
211
|
|
|
|
|
|
|
# $record is undef, either not accessible, or not yet created |
|
212
|
|
|
|
|
|
|
else { |
|
213
|
15
|
50
|
|
|
|
57
|
print STDERR "No record found, creating a new one" . "\n" |
|
214
|
|
|
|
|
|
|
if $DEBUG; |
|
215
|
15
|
|
|
|
|
110
|
my $ret |
|
216
|
|
|
|
|
|
|
= $cur_memcached_client->set( $memcached_key, |
|
217
|
|
|
|
|
|
|
[ $condition->{ttl} + $frozen_time ], |
|
218
|
|
|
|
|
|
|
$condition->{ttl} ); |
|
219
|
15
|
|
|
|
|
264
|
$conditions_ok++; |
|
220
|
|
|
|
|
|
|
} |
|
221
|
|
|
|
|
|
|
} |
|
222
|
|
|
|
|
|
|
|
|
223
|
74
|
50
|
33
|
|
|
196
|
if ( $conditions_unknown && !$QUIET ) { |
|
224
|
0
|
|
|
|
|
0
|
warn "Unknown conditions count is over 0, this should not happen"; |
|
225
|
0
|
|
|
|
|
0
|
print STDERR "Current conditions hash: " . Dumper( \%conditions ) . "\n"; |
|
226
|
|
|
|
|
|
|
} |
|
227
|
|
|
|
|
|
|
|
|
228
|
|
|
|
|
|
|
# If logic was 'either', 1 'notok' or more should block |
|
229
|
|
|
|
|
|
|
# If logic was 'all', we should have 0 'ok' to block |
|
230
|
|
|
|
|
|
|
# TODO: re-work the variable names because the explanation above is a bit |
|
231
|
|
|
|
|
|
|
# tricky although the logic is correct :( |
|
232
|
74
|
50
|
|
|
|
175
|
if ( $condition_type eq 'either' ) { |
|
233
|
0
|
0
|
|
|
|
0
|
return ( @$messages_notok > 0 ) |
|
234
|
|
|
|
|
|
|
? ( SCHED_ADAPTHROTTLE_BLOCKED, $messages_notok ) |
|
235
|
|
|
|
|
|
|
: ( SCHED_ADAPTHROTTLE_AUTHORIZED, undef ); |
|
236
|
|
|
|
|
|
|
} |
|
237
|
|
|
|
|
|
|
else { # condition is 'all' |
|
238
|
74
|
100
|
|
|
|
625
|
return ( $conditions_ok == 0 ) |
|
239
|
|
|
|
|
|
|
? ( SCHED_ADAPTHROTTLE_BLOCKED, $messages_notok ) |
|
240
|
|
|
|
|
|
|
: ( SCHED_ADAPTHROTTLE_AUTHORIZED, undef ); |
|
241
|
|
|
|
|
|
|
} |
|
242
|
|
|
|
|
|
|
} |
|
243
|
|
|
|
|
|
|
|
|
244
|
|
|
|
|
|
|
1; |
|
245
|
|
|
|
|
|
|
|
|
246
|
|
|
|
|
|
|
__END__ |