Configurable target URI rewrites

Add a `TARGET_REWRITES` environment variable that allows rewriting the
URI in an encapsulated request. See changes to `README.md` for
discussion of motivation and utilization.

Closes #56

README.md

@@ -29,6 +29,42 @@ The behavior of the gateway is configurable via a number of environment variable
 - ALLOWED_TARGET_ORIGINS: This environment variable contains a comma-separated list of target origin names that the gateway is allowed to access. When configured, the gateway will only attempt to resolve requests to target origins in this list. Any other request will yield a HTTP 403 Forbidden return code.
 - CERT: This environment variable is the name of a file containing the certificate (chain) used to serve TLS connections.
 - KEY: This environment variable is the name of a file containing the private key used to serve TLS connections.
+- TARGET_REWRITES: This environment variable contains a JSON document instructing the gateway to rewrite the target URL found in an encapsulated request to some specified scheme and host.
+
+### Target URL rewrites
+
+The `TARGET_REWRITES` configuration option is useful to set up forwarding between the gateway and target when both are on a private network or if they share a loopback interface. For example, suppose that the target is exposed to the internet at `https://example.org`, but also reachable by the gateway at `http://localhost:8080` (note `http` and not `https`). It's more efficient to redirect traffic over `localhost` than back out over the internet, so you could set `TARGET_REWRITES` to:
+
+```json
+{
+	"example.org": { "Scheme": "http", "Host": "localhost:8080" }
+}
+```
+
+Then the encapsulated HTTP requests
+
+```http
+POST /some-cool-api HTTP/1.1
+Host: example.org
+
+some content
+```
+
+or
+
+```http
+POST https://example.org/some-cool-api HTTP/1.1
+
+some content
+```
+
+...would both be rewritten to:
+
+```http
+POST http://localhost:8080/some-cool-api HTTP/1.1
+
+some content
+```
 
 ## Custom Application Payloads {#custom-config}
 

gateway_test.go

@@ -78,7 +78,7 @@ type ForbiddenCheckHttpRequestHandler struct {
 func mustGetMetricsFactory(t *testing.T, gateway gatewayResource) *MockMetricsFactory {
 	factory, ok := gateway.metricsFactory.(*MockMetricsFactory)
 	if !ok {
-		panic("Failed to get metrics factory")
+		t.Fatal("Failed to get metrics factory")
 	}
 	return factory
 }

handler.go

@@ -291,6 +291,12 @@ func (h BinaryHTTPAppHandler) Handle(binaryRequest []byte, metrics Metrics) ([]b
 	return binaryRespEnc, r
 }
 
+// TargetRewrite represents a rewritten target request.
+type TargetRewrite struct {
+	Scheme string
+	Host   string
+}
+
 // HttpRequestHandler handles HTTP requests to produce responses.
 type HttpRequestHandler interface {
 	// Handle takes a http.Request and resolves it to produce a http.Response.
@@ -302,6 +308,7 @@ type HttpRequestHandler interface {
 type FilteredHttpRequestHandler struct {
 	client             *http.Client
 	allowedOrigins     map[string]bool
+	targetRewrites     map[string]TargetRewrite
 	logForbiddenErrors bool
 }
 
@@ -320,6 +327,13 @@ func (h FilteredHttpRequestHandler) Handle(req *http.Request, metrics Metrics) (
 		}
 	}
 
+	if h.targetRewrites != nil {
+		if newTarget, ok := h.targetRewrites[req.URL.Host]; ok {
+			req.URL.Scheme = newTarget.Scheme
+			req.URL.Host = newTarget.Host
+		}
+	}
+
 	resp, err := h.client.Do(req)
 	if err != nil {
 		metrics.Fire(metricsResultTargetRequestFailed)

main.go

@@ -7,6 +7,7 @@ import (
 	"bytes"
 	"crypto/rand"
 	"encoding/hex"
+	"encoding/json"
 	"fmt"
 	"io"
 	"log"
@@ -56,6 +57,7 @@ const (
 	monitoringServiceNameEnvironmentVariable = "MONITORING_SERVICE_NAME"
 	gatewayDebugEnvironmentVariable          = "GATEWAY_DEBUG"
 	gatewayVerboseEnvironmentVariable        = "VERBOSE"
+	targetSchemeAndAuthorityRewriteMap       = "TARGET_REWRITES"
 )
 
 type gatewayServer struct {
@@ -151,6 +153,13 @@ func main() {
 		}
 	}
 
+	var targetRewrites map[string]TargetRewrite
+	if targetRewritesJson := os.Getenv(targetSchemeAndAuthorityRewriteMap); targetRewritesJson != "" {
+		if err := json.Unmarshal([]byte(targetRewritesJson), &targetRewrites); err != nil {
+			log.Fatalf("Failed to parse target rewrites: %s", err)
+		}
+	}
+
 	var certFile string
 	if certFile = os.Getenv(certificateEnvironmentVariable); certFile == "" {
 		certFile = "cert.pem"
@@ -189,6 +198,7 @@ func main() {
 		client:             &http.Client{},
 		allowedOrigins:     allowedOrigins,
 		logForbiddenErrors: verbose,
+		targetRewrites:     targetRewrites,
 	}
 
 	// Create the default gateway and its request handler chain