using System.Collections.Concurrent; namespace LarpixVoice; public class Program { public static ConcurrentDictionary> Rooms = new (); // Per-IP rate limit for the unauthenticated /room/users endpoint: legit // clients poll roughly once per second while in a call, so the default of // 120/min per IP (ROOM_USERS_RATE_LIMIT) leaves ample headroom (incl. // several users behind one NAT) while making bulk room-enumeration scans // impractical. Fixed 60s window: (request count, window reset unix time). // Entries are pruned in the 1s loop below. public static ConcurrentDictionary UsersListLimits = new (); public static ulong TotalBytesSent = 0; public static ulong TotalBytesReceived = 0; private static ulong CurrentBandwidthKps = 0; public static void Main(string[] args) { Utils.LoadEnv(); Task.Run(async () => { while (true) { await Task.Delay(1000); ulong sentDelta = Interlocked.Read(ref TotalBytesSent); ulong receivedDelta = Interlocked.Read(ref TotalBytesReceived); Interlocked.Exchange(ref TotalBytesReceived, 0); Interlocked.Exchange(ref TotalBytesSent, 0); CurrentBandwidthKps = (sentDelta + receivedDelta); long nowSec = DateTimeOffset.UtcNow.ToUnixTimeSeconds(); foreach (var entry in UsersListLimits) { if (entry.Value.resetAt <= nowSec) UsersListLimits.TryRemove(entry.Key, out _); } } }); var builder = WebApplication.CreateBuilder(args); builder.Logging.ClearProviders(); builder.WebHost.ConfigureKestrel(serverOptions => { serverOptions.AddServerHeader = false; serverOptions.ListenAnyIP(Utils.PORT); }); var app = builder.Build(); app.UseWebSockets(); app.Use(async (HttpContext context, Func next) => { try { context.Response.StatusCode = 200; var path = context.Request.Path.Value; var url = $"{context.Request.Scheme}://{context.Request.Host}"; if (path == "" || path?.Length > 512) { context.Response.Redirect(url + "/"); return; } context.Response.Headers["Access-Control-Allow-Origin"] = "*";//(context.Request.Headers["Origin"]).ToString().Replace("http://", "https://"); context.Response.Headers["Access-Control-Allow-Methods"]= "GET, POST, PUT, DELETE, OPTIONS"; context.Response.Headers["Access-Control-Allow-Headers"]= "Content-Type, Authorization"; context.Response.Headers["Access-Control-Allow-Credentials"]= "true"; switch (path) { case "/ws": await Requests.Websocket(context); return; case "/load": await context.Response.WriteAsync(Interlocked.Read(ref CurrentBandwidthKps).ToString()); return; case "/room/users": string callerIp = context.Connection.RemoteIpAddress?.ToString() ?? ""; long nowSec = DateTimeOffset.UtcNow.ToUnixTimeSeconds(); var window = UsersListLimits.AddOrUpdate(callerIp, (1, nowSec + 60), (_, old) => old.resetAt <= nowSec ? (1, nowSec + 60) : (old.count + 1, old.resetAt)); if (window.count > Utils.ROOM_USERS_RATE_LIMIT) { context.Response.StatusCode = 429; return; } string roomId = context.Request.Query["room"].ToString(); context.Response.ContentType = "application/json"; if (Rooms.TryGetValue(roomId, out var room)) { string[] users = room.Keys.Select(k => k.ToString()).ToArray(); await context.Response.WriteAsJsonAsync(users, JsonAppSerializerContext.Default.StringArray); } else { await context.Response.WriteAsJsonAsync(Array.Empty(), JsonAppSerializerContext.Default.StringArray); } return; default: await next(); return; } } catch (Exception) { } }); Console.WriteLine("Starting server at port: " + Utils.PORT); app.Run(); } }