[RFC] remoteip allowlisting

[i-infra]

Hi, I made this very simple implementation of allowlisting by remote-IP.

It relies on a single envar, ie OK_REMOTE_IPS=1.1.1.1,2.2.2.2,3.3.3.3...

I was wondering if you had a better idea for how this design should go, or if there is another implementation of this feature I missed?

Thank you for your work on this software!

[Jonney]

I think you don't have to modify the code.
You just need to write your own code.

from pproxy import server,proto

ARGS='-l socks5://127.0.0.1:8080#user:pass -r socks5://192.168.0.1:8080 -v'
IP_WHITELIST=(
    '127.0.0.2',
)

origin_init=server.AuthTable.__init__
def init(self, remote_ip, authtime):
    if remote_ip not in IP_WHITELIST:
        raise Exception('Unauthorized IP')
    origin_init(self, remote_ip, authtime)

server.AuthTable.__init__=init
server.main(ARGS.split(' '))