shiyue/cc-web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Tailscale/本机IP白名单，免受防爆破封禁

Browse Source
This commit is contained in:
cc-dan
2026-03-16 05:20:40 +00:00
parent 6d5b8a98fd
commit 5c89bff357
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
server.js
View File

@@ -439,6 +439,13 @@ const AUTH_FAIL_MAX = 3;
const authFailures = new Map(); // ip -> [timestamp, ...] const authFailures = new Map(); // ip -> [timestamp, ...]
let bannedIPs = new Set(); let bannedIPs = new Set();
// Tailscale / loopback whitelist — never ban these IPs
function isWhitelistedIP(ip) {
if (!ip) return false;
const cleaned = ip.replace(/^::ffff:/, '');
return cleaned === '127.0.0.1' || cleaned === '::1' || cleaned.startsWith('100.');
}
function loadBannedIPs() { function loadBannedIPs() {
try { try {
if (fs.existsSync(BANNED_IPS_PATH)) { if (fs.existsSync(BANNED_IPS_PATH)) {
@@ -461,7 +468,7 @@ function getClientIP(ws) {
} }
function recordAuthFailure(ip) { function recordAuthFailure(ip) {
if (!ip) return false; if (!ip || isWhitelistedIP(ip)) return false;
const now = Date.now(); const now = Date.now();
let list = authFailures.get(ip) || []; let list = authFailures.get(ip) || [];
list.push(now); list.push(now);