Any Proxy Service - 高级 HTTP/HTTPS/gRPC 代理转发工具

{
  "servers": {
    "http-proxy": {
      "port": 8080
    }
  },
  "mappings": [
    {
      "from": "http://example.com/*",
      "to": "http://httpbin.org/*",
      "servers": ["http-proxy"]
    }
  ]
}

"servers": {
  "http-proxy": {
    "port": 8080,
    "public": false
  },
  "https-proxy-with-auth": {
    "port": 8443,
    "cert": "auto",
    "panel": true,
    "auth": {
      "users": ["user1"],
      "groups": ["admin_group"]
    },
    "rateLimit": "1mbps"
  }
}

{
  "servers": {
    "edge": { "port": 3000, "panel": true }
  },
  "tunnels": {
    "my-secure-tunnel": {
      "servers": ["edge"],
      "password": "shared-secret"
    }
  },
  "mappings": [
    {
      "from": "https://remote-app.com/*",
      "to": "https://remote-app.com/*",
      "servers": ["edge"],
      "via": {
        "tunnels": "my-secure-tunnel"
      }
    },
    {
      "from": "https://remote-app.com/*",
      "to": "https://remote-app.com/*",
      "servers": ["edge"],
      "via": {
        "endpoints": "app-instance-1"
      }
    }
  ]
}

"mappings": [
  {
    "from": "http://api.service.com/users/*",
    "to": "http://internal.service.com/users/*",
    "servers": ["http-proxy"],
    "cc": ["http://log-service/ingress", "http://audit-service/new-request"]
  },
  {
    "from": "http://remote-app.com/*",
    "to": "http://remote-app.com/*",
    "via": {
      "tunnels": "my-secure-tunnel",
      "endpoints": "app-instance-1"
    }
  }
]

{
  "from": "https://api.example.com/v1/events",
  "to": "https://collector.internal/v1/events",
  "cc": [
    "https://audit.service.local/ingest",
    "https://ml.service.local/learn"
  ]
}

{
  "from": "https://remote-app.com/*",
  "to": "https://remote-app.com/*",
  "via": {
    "tunnels": ["my-secure-tunnel", "backup-tunnel"]
  }
}

{
  "from": "https://remote-app.com/*",
  "to": "https://remote-app.com/*",
  "via": {
    "endpoints": ["app-instance-1", "app-instance-2"]
  }
}

"proxies": {
  "datacenter-a": {
    "urls": ["http://user:pass@proxy-a1.com:8080", "http://user:pass@proxy-a2.com:8080"]
  },
  "datacenter-b": {
    "urls": ["socks5://proxy-b.com:1080"]
  }
}

"tunnels": {
  "my-secure-tunnel": {
    "servers": ["main-gateway"],
    "password": "shared-secret",
    "rateLimit": "5mbps",
    "trafficQuota": "10gb"
  },
  "edge-pop": {
    "servers": ["http-proxy", "https-proxy-with-auth"]
  }
}

"auth": {
  "users": {
    "john": {
      "password": "password123",
      "groups": ["developers"],
      "trafficQuota": "10gb"
    },
    "guest": {
      "password": "guest",
      "rateLimit": "100kbps"
    }
  },
  "groups": {
    "developers": {
      "rateLimit": "10mbps"
    }
  }
}

"p12s": {
  "my-client-cert": {
    "path": "./certs/client.p12",
    "password": "cert-password"
  }
}

{
  "quotaUsage": {
    "user:john": {
      "trafficUsed": 1073741824,
      "requestsUsed": 1500
    },
    "group:developers": {
      "trafficUsed": 5368709120,
      "requestsUsed": 8500
    }
  }
}

"mappings": [
  {
    "from": "http://*.mobile-api.com/*",
    "to": "http://backend.mobile-api.com/*",
    "quality": 0.8, // 80% 带宽（限速），不做丢包
    "rateLimit": "256kbps" // 模拟 2G/3G 网络速度
  }
]

{
  "method": "GET",
  "url": "http://example.com/path?a=1",
  "headers": { ... },
  "body": "base64-encoded-body", // body 是 base64 编码的
  // 仅 onResponse
  "status_code": 200,
  "status_text": "OK"
}

// config.json
"from": {
  "url": "http://api.mycorp.com/v1/*",
  "script": "./scripts/add_hmac.py"
},
"to": "http://internal.api/*"

"mappings": [
  {
    "from": {
      "url": "*://grpc.example.com:443/*",
      "grpc": {
        "service": "myapp.UserService",
        "method": "GetUser",
        "metadata": { "source": "any-proxy" } // 添加/覆盖请求元数据
      }
    },
    "to": {
      "url": "http://localhost:50051"
    }
  }
]

"mappings": [
  {
    "from": "ws://chat.example.com/ws",
    "to": "ws://backend-chat:8000/ws",
    "websocket": {
      "intercept_client_messages": [
        {
          "match": "\"type\":\"private_message\"",
          "log": true, // 记录所有私信
          "drop": true // 并丢弃它们
        }
      ],
      "intercept_server_messages": [
        {
          "match": "token=([a-zA-Z0-9]+)",
          "replace": { "token=([a-zA-Z0-9]+)": "token=REDACTED" } // 隐藏 token
        }
      ]
    }
  }
]

// POST http://api.example.com/v1/users/admin
// Body: { "user_name": "John Doe", "user_email": "john.doe@example.com" }
{
  "from": {
    "url": "http://api.example.com/v1/users/{role_id}",
    "method": "POST",
    "grpc": {
      "service": "myapp.UserService",
      "method": "CreateUser",
      "rest_to_grpc": {
        "request_body_mapping": {
          "name": "json:user_name",
          "email": "json:user_email",
          "role_id": "path:role_id"
        }
      }
    }
  },
  "to": "http://localhost:50051" // gRPC 后端地址
}

{
  "servers": {
    "main-gateway": {
      "port": 443,
      "cert": {
        "cert": "./certs/server.crt",
        "key": "./certs/server.key"
      },
      "auth": {
        "groups": ["internal_users"]
      },
      "dump": "./logs/all_traffic.har"
    }
  },
  "auth": {
    "users": {
      "api_user": {
        "password": "secure_password",
        "groups": ["internal_users"],
        "trafficQuota": "100gb"
      }
    },
    "groups": {
      "internal_users": {}
    }
  },
  "proxies": {
    "external_proxy": {
      "urls": ["http://proxy.external.com:8080"]
    }
  },
  "scripting": {
    "pythonPath": "/usr/bin/python3"
  },
  "mappings": [
    // 规则 1: REST to gRPC
    {
      "from": {
        "url": "https://api.example.com/v1/users/{role}",
        "method": "POST",
        "grpc": {
          "service": "UserService",
          "method": "CreateUser",
          "rest_to_grpc": {
            "request_body_mapping": {
              "user_name": "json:name",
              "email_address": "json:email",
              "role": "path:role"
            }
          }
        }
      },
      "to": "http://grpc-user-service:50051",
      "servers": ["main-gateway"]
    },
    // 规则 2: 脚本化修改 + 上游代理
    {
      "from": {
        "url": "https://api.thirdparty.com/*",
        "script": "./scripts/add_api_key.py"
      },
      "to": "https://api.thirdparty.com/*",
      "via": {
        "proxies": "external_proxy",
        "endpoints": ["app-instance-1", "app-instance-2"]
      }
      "servers": ["main-gateway"]
    },
    // 规则 3: API 模拟
    {
      "from": "https://api.example.com/v1/status",
      "to": "file://./mocks/status.json",
      "servers": ["main-gateway"]
    },
    // 规则 4: 流量整形
    {
      "from": "https://*.slow-service.com/*",
      "to": "https://backend.slow-service.com/*",
      "rateLimit": "512kbps",
      "quality": 0.9,
      "servers": ["main-gateway"]
    }
  ]
}
## 管理面板使用指南

- 入口地址
  - 管理面板静态页面：`/.admin/`（Carbon Design 风格，无需构建即可使用）
  - 证书安装页面：`/.ssl`（下载根 CA：`Any_Proxy_Service.crt`）
- 登录与认证
  - 登录接口：`POST /.api/login`（仅 `auth.users` 中设置了 `admin: true` 的用户可登录）
  - 登录成功后：
    - 后端会设置 HttpOnly Cookie：`APS-Admin-Token`（默认 24h 过期）
    - 同时返回一个 `token`（可选用于 `Authorization: Bearer <token>`）
  - 退出登录：`POST /.api/logout`（清理会话与 Cookie）
  - 管理员令牌的两种形式：
    - 会话 Cookie：`APS-Admin-Token`（通过登录获取）
    - Bearer Token：`Authorization: Bearer <token>`（来自 `config.json -> auth.users[].token`，且该用户需 `admin: true`）
- 配置编辑器（需管理员令牌）
  - 读取配置：`GET /.api/config`
  - 写入配置：`POST /.api/config`（保存后触发热重载）
  - 建议：在管理面板中登录后即可使用 Cookie 访问；如需脚本访问可使用 Bearer Token
- 统计仪表盘
  - 数据源：`GET /.api/stats`
  - 刷新频率：默认每 1s 自动刷新，支持“立即刷新”“暂停/恢复”
  - 未认证访问时：`rules`/`users`/`servers`/`tunnels`/`proxies` 的键名会被脱敏（`md5(key + timestamp)`）；认证后显示真实名称
  - 指标包含：请求数、错误数、QPS、请求包/响应包大小的平均/最小/最大、响应时长的平均/最短/最长
- 快速导航
  - 在 `/.ssl` 页面顶部导航可直接进入 `/.admin/` 与查看 `/.api/stats` 原始 JSON

## 统计指标说明（/.api/stats）

- 顶层字段
  - `totalRequests`：自启动以来的总请求数
  - `activeConnections`：当前活跃连接数
  - `totalBytesSent` / `totalBytesRecv`：自启动以来的总发送/接收字节数
  - `uptime`：运行时长
- 维度映射
  - `rules` / `users` / `servers` / `tunnels` / `proxies`：键名为维度的标识（未认证访问时为脱敏后的 MD5 值）
- 每个维度项的结构（PublicMetrics）
  - `requestCount`：请求数
  - `errors`：错误数
  - `qps`：每秒请求数（基于该维度首/末次请求时间窗口计算；窗口 < 1s 时退化为 `requestCount`）
  - `bytesSent`：
    - `total`：累计发送字节
    - `avg`：平均每请求发送字节（`total / requestCount`）
    - `min` / `max`：单请求发送字节的最小/最大值
  - `bytesRecv`：
    - 同 `bytesSent` 字段说明
  - `responseTime`（单位：毫秒）：
    - `totalMs`：累计响应时长（ns 汇总后转 ms）
    - `avgMs`：平均响应时长（`total / requestCount` 后转 ms）
    - `minMs` / `maxMs`：单请求响应时长的最短/最长值（ms）
- 示例（部分字段）：
  ```json
  {
    "totalRequests": 12345,
    "activeConnections": 7,
    "rules": {
      "rule-key-or-masked": {
        "requestCount": 100,
        "errors": 2,
        "qps": 5.5,
        "bytesSent": { "total": 1024000, "avg": 10240.0, "min": 512, "max": 65536 },
        "bytesRecv": { "total": 2048000, "avg": 20480.0, "min": 1024, "max": 131072 },
        "responseTime": { "totalMs": 2500.0, "avgMs": 25.0, "minMs": 3, "maxMs": 120 }
      }
    }
  }