A body-rewriting (hijacking) golang reverse proxy.
TLSrproxy is a proxy server that replaces strings in request and responses, it serves as a sandbox for debugging mixed-content errors, it uses a yaml config file which can be overrided by environment variaboles.
-
SERVER_HTTP_ADDR: The host and port. Default:
":8888" -
SERVER_CERT: Path to cert file. Default:
"" -
CERT_KEY: Path to key file. Default:
"" -
SERVER_DRAIN: How long application will wait to drain old requests before restarting. Default:
"1s" -
PROXY_UPSTREAM Forward incoming requests to this host.
Setting up a proxy to httpbin.org and post a json.
$ docker run -it --rm -e PROXY_UPSTREAM=https://httpbin.org -p8888:8888 quay.io/jfardello/tlsrproxy:latest
INFO[0000] Running HTTP server on :8888
INFO[0000] Forwarding to upstream on https://httpbin.org
Warning! Serving clear text http!
(it should change "http://" for "https://")
$curl -i -H 'X-foo: bart' http://localhost:8888/anything/barbar/barbar
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Content-Length: 424
Content-Type: application/json
Date: Mon, 28 Dec 2020 20:57:13 GMT
Server: gunicorn/19.9.0
{
"args": {},
"data": "",
"files": {},
"form": {},
"headers": {
"Accept": "*/*",
"Accept-Encoding": "gzip",
"Host": "httpbin.org",
"User-Agent": "curl/7.69.1",
"X-Amzn-Trace-Id": "Root=1-5fea46a9-5bc577145bbcc9195c73730d",
"X-Foo": "bert"
},
"json": null,
"method": "GET",
"origin": "127.0.0.1, 88.53.64.95",
"url": "https://httpbin.org/anything/pepepeo/pepepeo"
}
It should be overrided in a volume, to get the file from the image:
mkdir config
docker run -it --rm --entrypoint cat quai.io/jfardello/tlsrproxy /config/tlsrproxy.yaml > /config/tlsrproxy.yaml
After editing config/tlsrproxy.yaml you can launch the same docker command with a volume (or attach a permanent one)
docker run -it --rm -v ./config:/config -e PROXY_UPSTREAM=https://httpbin.org -p8888:8888 quay.io/jfardello/tlsrproxy:latest
server:
cert: ""
key: ""
drain: 1s
proxy:
upstream: http://localhost:9090
#Replaces body strings we get from upstream.
replaces:
request: #Replaces the headers we send.
headers:
- - bart
- bert
response: #Replaces the content in the response.
mimes: #Only deal with this types (Dont break downloads or othe content.)
- text/html
- text/css
- application/javascript
- application/json
- application/xhtml+xml
body:
- - http://
- https://
- - barbar
- pepepeo
headers:
- - header1
- header2
- - headerA
- headerB
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent