mirror of
https://github.com/netbirdio/netbird.git
synced 2026-04-18 00:06:38 +00:00
83 lines
2.4 KiB
Go
83 lines
2.4 KiB
Go
package accesslog
|
|
|
|
import (
|
|
"context"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
"google.golang.org/grpc"
|
|
"google.golang.org/protobuf/types/known/timestamppb"
|
|
|
|
"github.com/netbirdio/netbird/shared/management/proto"
|
|
)
|
|
|
|
type gRPCClient interface {
|
|
SendAccessLog(ctx context.Context, in *proto.SendAccessLogRequest, opts ...grpc.CallOption) (*proto.SendAccessLogResponse, error)
|
|
}
|
|
|
|
type Logger struct {
|
|
client gRPCClient
|
|
}
|
|
|
|
func NewLogger(client gRPCClient) *Logger {
|
|
return &Logger{
|
|
client: client,
|
|
}
|
|
}
|
|
|
|
type logEntry struct {
|
|
ServiceId string
|
|
Host string
|
|
Path string
|
|
DurationMs int64
|
|
Method string
|
|
ResponseCode int32
|
|
SourceIp string
|
|
AuthMechanism string
|
|
UserId string
|
|
AuthSuccess bool
|
|
}
|
|
|
|
func (l *Logger) log(ctx context.Context, entry logEntry) {
|
|
// Fire off the log request in a separate routine.
|
|
// This increases the possibility of losing a log message
|
|
// (although it should still get logged in the event of an error),
|
|
// but it will reduce latency returning the request in the
|
|
// middleware.
|
|
// There is also a chance that log messages will arrive at
|
|
// the server out of order; however, the timestamp should
|
|
// allow for resolving that on the server.
|
|
now := timestamppb.Now() // Grab the timestamp before launching the goroutine to try to prevent weird timing issues. This is probably unnecessary.
|
|
go func() {
|
|
if _, err := l.client.SendAccessLog(context.Background(), &proto.SendAccessLogRequest{
|
|
Log: &proto.AccessLog{
|
|
Timestamp: now,
|
|
ServiceId: entry.ServiceId,
|
|
Host: entry.Host,
|
|
Path: entry.Path,
|
|
DurationMs: entry.DurationMs,
|
|
Method: entry.Method,
|
|
ResponseCode: entry.ResponseCode,
|
|
SourceIp: entry.SourceIp,
|
|
AuthMechanism: entry.AuthMechanism,
|
|
UserId: entry.UserId,
|
|
AuthSuccess: entry.AuthSuccess,
|
|
},
|
|
}); err != nil {
|
|
// If it fails to send on the gRPC connection, then at least log it to the error log.
|
|
log.WithFields(log.Fields{
|
|
"service_id": entry.ServiceId,
|
|
"host": entry.Host,
|
|
"path": entry.Path,
|
|
"duration": entry.DurationMs,
|
|
"method": entry.Method,
|
|
"response_code": entry.ResponseCode,
|
|
"source_ip": entry.SourceIp,
|
|
"auth_mechanism": entry.AuthMechanism,
|
|
"user_id": entry.UserId,
|
|
"auth_success": entry.AuthSuccess,
|
|
"error": err,
|
|
}).Error("Error sending access log on gRPC connection")
|
|
}
|
|
}()
|
|
}
|