制定hessian服务端的访问列表

陈于喆 — Tue, 21 Dec 2010 08:05:00 GMT

由于历史原因,几个项目都选用hessian作为web service的实现方式,hessian的确是非常轻量级,基于http协议进行传输,通过自定义的串行化机制将请求信息进行序列化,以二进制传输节省了不少的开销,速度跟socket差不多.客户端和服务器发起和接收请求都是通过spring提供的hessian api进行请求和接收,但是在服务端中并没有记录和控制远端ip地址和主机的信息,所以需要对源码进行一些重写

对org.springframework.remoting.caucho.HessianServiceExporter进行重写

/**
* 重写HessianServiceExporter.handleRequest(),拦截获取远端调用信息
* @author chenyz
*
*/
public class HouseHessianServiceExporter extends HessianServiceExporter {

    private static String[] entryIP = {"192.168.0.1","192.168.0.3","192.168.0.3"};

    private static Log log = LogFactory.getLog("Myremote");

    @Override
    public void handleRequest(HttpServletRequest request,
            HttpServletResponse response) throws ServletException, IOException {
        log.info("try ==>remote 's IP:"+IpUtil.getIpAddr(request)+"remote 's host: "+request.getRemoteHost());
        int call = 0;
        for(String ip:entryIP){
            if(ip.equals(IpUtil.getIpAddr(request)))
                call++;
        }
        if(call>0){
            log.info("call ==>remote 's IP:"+IpUtil.getIpAddr(request)+"remote 's host: "+request.getRemoteHost());
            super.handleRequest(request, response);
        }
    }
}

   <bean id="shineLibWSImpl" class="com.***.shine.remote.ShineLibWSImpl"/>
    <bean name="/remote/shineinfo" class="com.***.shine.hessian.service.HouseHessianServiceExporter">
        <property name="service">
            <ref bean="shineLibWSImpl"/>
        property>
        <property name="serviceInterface">
            <value>com.***.shine.remote.ShineLibWebServicevalue>
        property>
    bean>

重写HessianServiceExporter.handleRequest(),拦截获取远端调用信息,提取出调用端的ip信息与服务端制定的ip列表进行对比,并将所有调用信息记录日志

如果直接使用hessian的api的HessianServlet,直接对HessianServlet的service()重写,拦截并提取远端调用信息

/**
* 重写HouseHessianServlet.service(),拦截获取远端调用信息
* @author chenyz
*
*/
public class HouseHessianServlet extends HessianServlet{

    private static String[] entryIP = {"192.168.0.1","192.168.0.3","192.168.0.3"};

    private static Log log = LogFactory.getLog("Myremote");

    @Override
    public void service(ServletRequest request, ServletResponse response)
            throws IOException, ServletException {
        HttpServletRequest req = (HttpServletRequest) request;
        log.info("try ==>remote 's IP:"+IpUtil.getIpAddr(req)+"remote 's host: "+request.getRemoteHost());
        int call = 0;
        for(String ip:entryIP){
            if(ip.equals(IpUtil.getIpAddr(request)))
                call++;
        }
        if(call>0){
            log.info("call ==>remote 's IP:"+IpUtil.getIpAddr(req)+"remote 's host: "+request.getRemoteHost());
            super.service(request, response);
        }
    }
}

web.xml

   <servlet>
    <servlet-name>HessianServletservlet-name>
    <servlet-class>
        com.***.product.remote.Htest
    servlet-class>
  servlet>

  <servlet-mapping>
    <servlet-name>HessianServletservlet-name>
    <url-pattern>/service/hessionurl-pattern>
  servlet-mapping>

com.***.product.remote.Htest

public class Htest extends HouseHessianServlet implements IHtest{

    public hello(){
        System.out.println("hello");
    }
}

陈于喆 2010-12-21 16:05 发表评论

解决hessian远程调用连接超时的问题

陈于喆 — Thu, 16 Dec 2010 06:46:00 GMT

目前几套系统中主要使用的hessian进行远程调用webservice服务的有hessian的HessianProxyFactory(com.caucho.hessian.client.HessianProxyFactory)和spring的HessianProxyFactoryBean(org.springframework.remoting.caucho.HessianProxyFactoryBean).

1.HessianProxyFactory
查看HessianProxyFactory源码后发现,hessian在创建http请求连接webservice服务并没有对连接超时进行相关的参数设置,所以当网络出现问题就会造成整个hessian处理的阻塞,进而阻塞整个线程后续的处理
以下是HessianProxyFactory对连接处理的源码

protected URLConnection openConnection(URL url)
    throws IOException
  {
    URLConnection conn = url.openConnection();

    conn.setDoOutput(true);

    if (_readTimeout > 0) {
      try {
    conn.setReadTimeout((int) _readTimeout);
      } catch (Throwable e) {
      }
    }

    conn.setRequestProperty("Content-Type", "x-application/hessian");

    if (_basicAuth != null)
      conn.setRequestProperty("Authorization", _basicAuth);
    else if (_user != null && _password != null) {
      _basicAuth = "Basic " + base64(_user + ":" + _password);
      conn.setRequestProperty("Authorization", _basicAuth);
    }

    return conn;
  }

所以我们针对此逻辑继承并重写该openConnection方法,在创建http连接的时候通过设置连接超时时间来解决因网络问题阻塞程序继续的问题

public class MyHessianProxyFactory extends HessianProxyFactory {

    private int connectTimeOut = 10000;

    private int readTimeOut = 10000;

    public int getConnectTimeOut() {
        return connectTimeOut;
    }

    public void setConnectTimeOut(int connectTimeOut) {
        this.connectTimeOut = connectTimeOut;
    }

    public int getReadTimeOut() {
        return readTimeOut;
    }

    public void setReadTimeOut(int readTimeOut) {
        this.readTimeOut = readTimeOut;
    }

    protected URLConnection openConnection(URL url) throws IOException {
        URLConnection conn = url.openConnection();
        conn.setDoOutput(true);
        if (this.connectTimeOut > 0) {
            conn.setConnectTimeout(this.connectTimeOut);
        }
        if (this.readTimeOut > 0) {
            conn.setReadTimeout(this.readTimeOut);
        }
        conn.setRequestProperty("Content-Type", "x-application/hessian");
            if (_basicAuth != null)
                  conn.setRequestProperty("Authorization", _basicAuth);
            else if (_user != null && _password != null) {
                  _basicAuth = "Basic " + base64(_user + ":" + _password);
                  conn.setRequestProperty("Authorization", _basicAuth);
            }
        return conn;
    }
}

2.HessianProxyFactoryBean
查看spring的HessianProxyFactoryBean源码发现,它在封装hessian是直接创建一个HessianProxyFactory实例,然后利用该实例完成创建远程服务

public class HessianProxyFactoryBean extends HessianClientInterceptor implements FactoryBean {

    private Object serviceProxy;

    public void afterPropertiesSet() {
        super.afterPropertiesSet();
        this.serviceProxy = ProxyFactory.getProxy(getServiceInterface(), this);
    }


    public Object getObject() {
        return this.serviceProxy;
    }

    public Class getObjectType() {
        return getServiceInterface();
    }

    public boolean isSingleton() {
        return true;
    }

}

所以对此的解决方法与上面差不多,继承HessianProxyFactoryBean然后加入相应的连接超时和读取超时的变量,重写afterPropertiesSet方法,并且同时完成上面第一步对HessianProxyFactory的改造,这样就能保证连接远程webserver服务器时不会因为网络原因阻塞程序的执行

public class MyHessianProxyFactoryBean extends HessianProxyFactoryBean {

    private MyHessianProxyFactory proxyFactory = new MyHessianProxyFactory();

    private int readTimeOut = 10000;

    private int connectTimeOut = 10000;

    public int getReadTimeOut() {
        return readTimeOut;
    }

    public void setReadTimeOut(int readTimeOut) {
        this.readTimeOut = readTimeOut;
    }

    public int getConnectTimeOut() {
        return connectTimeOut;
    }

    public void setConnectTimeOut(int connectTimeOut) {
        this.connectTimeOut = connectTimeOut;
    }

    public void afterPropertiesSet() {
        proxyFactory.setReadTimeout(readTimeOut);
        proxyFactory.setConnectTimeOut(connectTimeOut);
        setProxyFactory(proxyFactory);
        super.afterPropertiesSet();
    }
}

陈于喆 2010-12-16 14:46 发表评论

BlogJava-陈于喆的技术博客-随笔分类-web service

制定hessian服务端的访问列表

解决hessian远程调用连接超时的问题