# SPDX-License-Identifier: Apache-2.0
# Test nginx configuration for the ipng_stats module.
#
# Data plane (port 8080) uses four wildcard listens — two address
# families × two devices — to exercise per-(device, family)
# attribution. eth1 uses the same tag (`tag1`) for IPv4 and IPv6,
# while eth2 splits them (`tag2-v4` / `tag2-v6`) so the e2e suite
# can verify that the module can either combine or distinguish
# families per device.
#
# Mgmt/direct traffic hits a separate server block on port 9180.
# Mixing a naked `listen 8080;` or a specific-address `listen
# 172.20.40.2:8080;` with device-tagged wildcards on the same port
# is not supported — see docs/user-guide.md.

load_module /usr/lib/nginx/modules/ngx_http_ipng_stats_module.so;

error_log stderr notice;

events {
    worker_connections 128;
}

http {
    ipng_stats_zone ipng:1m;
    ipng_stats_flush_interval 500ms;
    ipng_stats_default_source direct;

    log_format tagged '$remote_addr src=$ipng_source_tag vip=$server_addr '
                      '"$request" $status $body_bytes_sent';
    access_log /var/log/nginx/access.log tagged;

    # Global logtail — fires for ALL requests regardless of server block.
    # The if= condition suppresses /notfound from the logtail stream.
    map $request_uri $logtail_enabled {
        ~^/notfound  0;
        default      1;
    }
    log_format ipng_stats_logtail '$host\t$remote_addr\t$request_method\t$request_uri\t'
                                  '$status\t$body_bytes_sent\t'
                                  '$ipng_source_tag\t$server_addr\t$scheme';
    ipng_stats_logtail ipng_stats_logtail udp://127.0.0.1:9514 buffer=4k flush=500ms if=$logtail_enabled;

    server {
        # Per-device wildcard listens. All four share port 8080; the
        # kernel's SO_BINDTODEVICE filtering routes each incoming packet
        # to the socket pinned to the interface it arrived on.
        listen      8080 device=eth1 ipng_source_tag=tag1;
        listen [::]:8080 device=eth1 ipng_source_tag=tag1;
        listen      8080 device=eth2 ipng_source_tag=tag2-v4;
        listen [::]:8080 device=eth2 ipng_source_tag=tag2-v6;

        server_name _;

        location / {
            return 200 "ok $server_addr\n";
        }

        location /notfound {
            return 404 "nope\n";
        }

        location /slow {
            proxy_pass http://127.0.0.1:29080/;
        }
    }

    server {
        # Direct (mgmt) traffic: no device binding on the listen,
        # `ipng_stats_default_source direct;` therefore tags it "direct".
        # Separate port so it doesn't collide with the device-tagged
        # wildcards above.
        listen 172.20.40.2:9180;
        server_name _;

        location / {
            return 200 "ok direct\n";
        }
    }

    server {
        listen 172.20.40.2:9113;

        location = /.well-known/ipng/statsz {
            ipng_stats;
            allow all;
        }
    }
}