gandalf/secubox-openwrt
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(catalog): Use original_backend when mitmproxy inspection enabled

Browse Source 
When HAProxy inspection mode routes all vhosts through mitmproxy_inspector,
the catalog now uses the original_backend UCI property to correctly map
domains to their actual services.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
CyberMind-FR 2026-02-01 07:05:47 +01:00
parent a4e6d65e34
commit f44d218b7d
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
package/secubox/secubox-p2p/root/www/api/factory/catalog
View File

@ -58,25 +58,32 @@ get_mesh_ip() {
# Build HAProxy vhost map: domain -> backend # Build HAProxy vhost map: domain -> backend
# Returns: domain|backend|ssl|enabled for each vhost # Returns: domain|backend|ssl|enabled for each vhost
# Note: When mitmproxy inspection is enabled, uses original_backend to find real service
get_haproxy_vhosts() { get_haproxy_vhosts() {
config_load haproxy 2>/dev/null || return config_load haproxy 2>/dev/null || return
# Callback function for each vhost # Callback function for each vhost
_emit_vhost() { _emit_vhost() {
local section="$1" local section="$1"
local enabled domain backend ssl ssl_redirect local enabled domain backend original_backend ssl ssl_redirect
config_get enabled "$section" enabled "0" config_get enabled "$section" enabled "0"
[ "$enabled" = "1" ] || return [ "$enabled" = "1" ] || return
config_get domain "$section" domain config_get domain "$section" domain
config_get backend "$section" backend config_get backend "$section" backend
config_get original_backend "$section" original_backend
config_get ssl "$section" ssl "0" config_get ssl "$section" ssl "0"
config_get ssl_redirect "$section" ssl_redirect "0" config_get ssl_redirect "$section" ssl_redirect "0"
[ -n "$domain" ] || return [ -n "$domain" ] || return
[ -n "$backend" ] || return [ -n "$backend" ] || return
# If backend is mitmproxy_inspector and original_backend exists, use the real backend
if [ "$backend" = "mitmproxy_inspector" ] && [ -n "$original_backend" ]; then
backend="$original_backend"
fi
# Determine scheme # Determine scheme
local scheme="http" local scheme="http"
[ "$ssl" = "1" ] && scheme="https" [ "$ssl" = "1" ] && scheme="https"