if(msg->type == MSG_REQ_REDIS_AUTH)

    {//验证密码

        struct server_pool *pool = conn->owner;

        struct mbuf* p_buf = STAILQ_FIRST(&msg->mhdr);

        char* p_start =p_buf->pos;

        char* p_end = p_buf->last;

        char passwordinfo[256];

        sprintf(passwordinfo,

                "*2\r\n$4\r\nauth\r\n$%d\r\n%s\r\n",

                strlen(pool->password),

                pool->password);

        if(msg->mlen != strlen(passwordinfo)

                || p_end - p_start != msg->mlen//如果密码被分段了也认定为错误

                || memcmp(p_start+13,passwordinfo+13,msg->mlen-13)!=0)

        {//密码错误

            struct msg* pong = fGetAuthErrMsg();

            conn->setpassword = 0;

            fReturnMsgToClient(ctx,conn,pong,msg);

            return true;

        }else

        {

            conn->setpassword = 1;

            struct msg* ok = fGetOKMsg();

            fReturnMsgToClient(ctx,conn,ok,msg);

            return true;

        }

    }

    if(conn->setpassword == 0)

    {//没有密码检测下是否需要密码

        struct server_pool *pool = conn->owner;

        if(pool->password[0]!=0)

        {//表示需要密码

            struct msg* pong = fGetNeedAuthMsg();

            fReturnMsgToClient(ctx,conn,pong,msg);

            return true;

        }

    }

struct msg* fGetNeedAuthMsg();

struct msg* fGetAuthErrMsg();

struct msg* fGetOKMsg();

3.3 nc_message.c

3.3.1 实现ACTION Auth 使用到的静态响应包

struct msg* fGetAuthErrMsg()

{

    struct msg* pong = _msg_get();

    struct mbuf *mbuf;

    if(pong == NULL)

    {

        return NULL;

    }

    pong->mlen = 0;

    mbuf = mbuf_get();

    if (mbuf == NULL) {

        msg_put(pong);

        return NULL;

    }

    mbuf_insert(&(pong->mhdr), mbuf);

    pong->p_key_info = NULL;

    static int noauthlen = strlen("-ERR invalid password\r\n");

    memcpy(mbuf->last,

           "-ERR invalid password\r\n",

           noauthlen);

    mbuf->last += noauthlen;

    pong->mlen += noauthlen;

    return pong;

}

struct msg* fGetNeedAuthMsg()

{

    struct msg* pong = _msg_get();

    struct mbuf *mbuf;

    if(pong == NULL)

    {

        return NULL;

    }

    pong->mlen = 0;

    mbuf = mbuf_get();

    if (mbuf == NULL) {

        msg_put(pong);

        return NULL;

    }

    mbuf_insert(&(pong->mhdr), mbuf);

    pong->p_key_info = NULL;

    static int noauthlen = strlen("-NOAUTH Authentication required.\r\n");

    memcpy(mbuf->last,

           "-NOAUTH Authentication required.\r\n",

           noauthlen);

    mbuf->last += noauthlen;

    pong->mlen += noauthlen;

    return pong;

}

struct msg* fGetOKMsg()

{

    struct msg* OK = _msg_get();

    struct mbuf *mbuf;

    if(OK == NULL)

    {

        return NULL;

    }

    OK->mlen = 0;

    mbuf = mbuf_get();

    if (mbuf == NULL) {

        msg_put(OK);

        return NULL;

    }

    mbuf_insert(&(OK->mhdr), mbuf);

    OK->p_key_info = NULL;

    memcpy(mbuf->last,

           "+OK\r\n",

           5);

    mbuf->last += 5;

    OK->mlen += 5;

    return OK;

}

Twemproxy To Redis:

1. 初始化conn，

1.1 nc_server.c

1.1.1 每当conn需要重连的时候都需要重置一下

rstatus_t

server_connect(struct context *ctx, struct server *server, struct conn *conn)

{

    rstatus_t status;

    ASSERT(!conn->client && !conn->proxy);

    if (conn->sd > 0) {

        /* already connected on server connection */

        return NC_OK;

    }

    conn->setpassword = 0;//标记为没有设置密码

 ...

}

2. 发送Auth指令

2.1 nc_request.c

2.2.1 每当conn发送一个message但是又没有标记Auth的时候发送Auth指令

void

req_server_enqueue_imsgq(struct context *ctx,

                         struct conn *conn,

                         struct msg *msg)

{

    ASSERT(msg->request);

    ASSERT(!conn->client && !conn->proxy);

    struct server *ser = (struct server *)conn->owner;

    if(ser->owner->password[0]!=0 && conn->setpassword==0)

    {//要设置密码，但是还没有设置成功

        struct msg* p_password = fGetAuthMsg(ser->owner->password);

        conn->setpassword = 1;//只管发送第一个请求前发送一次auth指令，其他的就不管了

        req_server_enqueue_imsgq(ctx,conn,p_password);

    }

    //广播命令只有在最后一次发送时，加入timeout中

    if ((!msg->noreply)

            &&(!msg->broadcast

               ||msg->ui32_broadcast_number==0

                )) {

        msg_tmo_insert(msg, conn);

    }

    TAILQ_INSERT_TAIL(&conn->imsg_q, msg, s_tqe);

    stats_server_incr(ctx, conn->owner, in_queue);

    stats_server_incr_by(ctx, conn->owner, in_queue_bytes, msg->mlen);

}

2.3 nc_message.h

2.3.1 声明AuthMsg

struct msg* fGetAuthMsg(char* password);

2.4 nc_message.c

2.4.1 实现AuthMsg

struct msg* fGetAuthMsg(char* password)

{

    struct msg* AuthPassword = _msg_get();

    struct mbuf *mbuf;

    if(AuthPassword == NULL)

    {

        return NULL;

    }

    AuthPassword->mlen = 0;

    mbuf = mbuf_get();

    if (mbuf == NULL) {

        msg_put(AuthPassword);

        return NULL;

    }

    mbuf_insert(&(AuthPassword->mhdr), mbuf);

    AuthPassword->p_key_info = NULL;

    sprintf(mbuf->last,"*2\r\n$4\r\nauth\r\n$%d\r\n%s\r\n",strlen(password),password);

    mbuf->last += strlen(mbuf->last);

    AuthPassword->mlen += strlen(mbuf->last);

    AuthPassword->swallow = 1;

    return AuthPassword;

}

到此为Twemproxy添加Auth功能就已经实现了

后记：

当然这里面还是有很多地方并不完善，比如Twemproxy to Reid 的Auth 并没有管失败的情况。

没有将各个Redis节点之间的Auth分开，也没有与Client to Twemproxy分离。

至于这些就根据实际需求实现吧。