.github/workflows | ||
caddy | ||
docker | ||
systemd | ||
.gitignore | ||
go.mod | ||
go.sum | ||
LICENSE | ||
main.go | ||
README.md |
probehost2
a http endpoint to query network diagnosis tools from remote hosts
Disclaimer
Don't expect good or even mediocre code here. This is my first take at go and is mostly for myself to learn. Suggestions and improvements are welcome.
Please note that this project does not include any kind of rate limiting or other protection. It is therefore heavily advised to only make it publicly reachable if a reverse proxy is in place. A sample config for Caddy can be found in the caddy
subfolder.
Installation
The runtime dependencies are currently iputils
, traceroute
, nping
(usually provided by nmap) and mtr
(sometimes called mtr-tiny
). iputils
and traceroute
can be substituted by busybox
.
Building
The app can be built with the latest Go toolchain.
First get the external module dependencies:
go get -u
Then build the app, this already strips debug symbols.
go build -ldflags "-s -w" -o "probehost2" main.go
(if this is unwanted, just leave out the ldflags argument)
Systemd
Example files for a systemd service can be found in the systemd
subfolder.
Docker
A docker container based on Alpine can be built by using the included dockerfile (docker/Dockerfile
).
docker build -f docker/Dockerfile . -t byreqz/probehost2:latest
A compose file can also be found in docker/docker-compose.yml
.
Proxy
It's recommended to only run this app together with a rate-limiting reverse-proxy. An example configuration for Caddy can be found in the caddy
subfolder.
Usage
Server
The app currently has 4 runtime flags:
-p / --listenport
-- sets the port to listen on-o / --logfilepath
-- sets the log output file-x / --disable-x-forwarded-for
-- disables checking for the X-Forwarded-For header-l / --allow-private
-- allows lookups of private IP ranges--request-ttl
-- sets the maximum request time to live in seconds
All the Flags also have an accompanying environment value: PROBEHOST_LOGPATH
, PROBEHOST_ALLOW_PRIVATE
, PROBEHOST_LISTEN_PORT
, PROBEHOST_DISABLE_X_FORWARDED_FOR
and PROBEHOST_REQUEST_TTL
but the options given via commandline have priority.
The app will log every request including the IP that's querying and show failed requests on stdout.
Requests that contain an X-Forwarded-For header (implying the app is behind a reverse proxy) will automatically log that address instead of the requesting IP (the proxy itself), this can be turned off with -x.
Client
General
The app can be queried via HTTP/HTTPS with the following scheme:
https://[address]/[command]/[host](_[port]),[host].../[options]
- [address] = the IP or domain serving the site
- [command] = the command to return, currently available:
- ping
- mtr
- traceroute
- nping
- [host] = can be one or more hosts query, seperated by a comma
- [port] = port to be queried, optional
- [options] = options to run the command with, seperated by a comma
All inputs are validated and invalid input is discarded. If the request contains no valid data, the server will return HTTP 500.
Local IP ranges are by default excluded from lookups, this currently only includes IPs and not hostnames and can be disabled on the server by passing the -l flag.
Command options are based on the originally given cli flags but also have a more understandable altname.
Ping
The default options are:
-c 10
: send 10 pings
Available options are:
4
/force4
: force IPv46
/force6
: force IPv6d
/timestamps
: print timestampsn
/nodns
: no dns name resolutionv
/verbose
: verbose outputc1
/count1
: send 1 pingc5
/count5
: send 5 pingsc10
/count10
: send 10 pings
Example query:
$ curl http://localhost:8000/ping/localhost/c1
PING localhost(localhost (::1)) 56 data bytes
64 bytes from localhost (::1): icmp_seq=1 ttl=64 time=0.189 ms
--- localhost ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.189/0.189/0.189/0.000 ms
MTR
The default options are:
-r
: output using report mode-w
: output wide report-c10
: send 10 pings
Available options are:
4
/force4
: force IPv46
/force6
: force IPv6u
/udp
: use UDP instead of ICMP echot
/tcp
: use TCP instead of ICMP echoe
/ext
: display information from ICMP extensionsx
/xml
: output xmln
/nodns
: do not resolve host namesb
/cmb
: show IP numbers and host namesz
/asn
: display AS numberc1
/count1
: send 1 pingc5
/count5
: send 5 pingsc10
/count10
: send 10 pings
Example query:
$ curl http://localhost:8000/mtr/localhost/c1,z
Start: 2022-01-02T00:06:56+0100
HOST: xxx Loss% Snt Last Avg Best Wrst StDev
1. AS??? localhost 0.0% 1 0.6 0.6 0.6 0.6 0.0
Traceroute
The default options are:
- none
Available options are:
4
/force4
: force IPv46
/force6
: force IPv6f
/dnf
: do not fragment packetsi
/ìcmp
: use ICMP ECHO for traceroutingt
/tcp
: use TCP SYN for tracerouting (default port is 80)n
/nodns
: do not resolve IP addresses to their domain namesu
/udp
: use UDP to particular port for tracerouting (default port is 53)ul
/udplite
: Use UDPLITE for tracerouting (default port is 53)d
/dccp
: Use DCCP Request for tracerouting (default port is 33434)b
/back
: Guess the number of hops in the backward path and print if it differs
Example query:
$ curl http://localhost:8000/tracert/localhost/i
traceroute to localhost (127.0.0.1), 30 hops max, 60 byte packets
1 localhost (127.0.0.1) 0.063 ms 0.008 ms 0.006 ms
Nping
The default options are:
c3
: send 3 pings
Available options are:
4
/force4
: force IPv46
/force6
: force IPv6u
/udp
: use UDPt
/tcp
: use TCPv
/verbose
: be verbosec1
/count1
: send 1 pingc3
/count3
: send 3 pingsc5
/count5
: send 5 pings
Example query:
$ curl localhost:8000/nping/localhost_22
Starting Nping 0.7.92 ( https://nmap.org/nping ) at 2022-05-29 15:28 CEST
SENT (0.0022s) Starting TCP Handshake > localhost:22 (127.0.0.1:22)
RCVD (0.0133s) Handshake with localhost:22 (127.0.0.1:22) completed
SENT (1.0041s) Starting TCP Handshake > localhost:22 (127.0.0.1:22)
RCVD (1.0089s) Handshake with localhost:22 (127.0.0.1:22) completed
SENT (2.0071s) Starting TCP Handshake > localhost:22 (127.0.0.1:22)
RCVD (2.0090s) Handshake with localhost:22 (127.0.0.1:22) completed
Max rtt: 11.130ms | Min rtt: 1.945ms | Avg rtt: 5.965ms
TCP connection attempts: 3 | Successful connections: 3 | Failed: 0 (0.00%)
Nping done: 1 IP address pinged in 2.01 seconds