1
0
mirror of https://github.com/v2fly/v2ray-core.git synced 2024-06-10 09:50:43 +00:00
v2fly/proxy/socks/server.go

295 lines
7.7 KiB
Go
Raw Normal View History

package socks
2015-09-07 12:49:40 +00:00
import (
2015-10-13 11:55:06 +00:00
"errors"
2015-09-15 22:06:22 +00:00
"io"
2015-09-23 12:14:53 +00:00
"sync"
2015-10-06 15:24:57 +00:00
"time"
2015-09-09 10:13:52 +00:00
2016-01-31 16:01:28 +00:00
"github.com/v2ray/v2ray-core/app/dispatcher"
2016-01-29 13:39:55 +00:00
v2io "github.com/v2ray/v2ray-core/common/io"
2015-09-19 22:50:21 +00:00
"github.com/v2ray/v2ray-core/common/log"
v2net "github.com/v2ray/v2ray-core/common/net"
"github.com/v2ray/v2ray-core/proxy"
"github.com/v2ray/v2ray-core/proxy/socks/protocol"
2016-01-28 16:08:32 +00:00
"github.com/v2ray/v2ray-core/transport/hub"
2015-09-09 10:13:52 +00:00
)
2015-10-13 11:55:06 +00:00
var (
2016-01-30 11:23:56 +00:00
ErrorUnsupportedSocksCommand = errors.New("Unsupported socks command.")
2016-01-30 11:32:38 +00:00
ErrorUnsupportedAuthMethod = errors.New("Unsupported auth method.")
2015-10-13 11:55:06 +00:00
)
2016-04-25 22:33:16 +00:00
// Server is a SOCKS 5 proxy server
type Server struct {
2016-01-31 16:01:28 +00:00
tcpMutex sync.RWMutex
udpMutex sync.RWMutex
accepting bool
packetDispatcher dispatcher.PacketDispatcher
config *Config
tcpListener *hub.TCPHub
2016-02-03 21:43:09 +00:00
udpHub *hub.UDPHub
2016-01-31 16:01:28 +00:00
udpAddress v2net.Destination
2016-02-01 15:36:33 +00:00
udpServer *hub.UDPServer
2016-01-31 16:01:28 +00:00
listeningPort v2net.Port
2015-09-10 22:24:18 +00:00
}
2016-04-25 22:33:16 +00:00
// NewServer creates a new Server object.
func NewServer(config *Config, packetDispatcher dispatcher.PacketDispatcher) *Server {
return &Server{
2016-01-31 16:01:28 +00:00
config: config,
packetDispatcher: packetDispatcher,
2015-09-16 14:27:36 +00:00
}
2015-09-07 12:49:40 +00:00
}
2016-02-06 17:01:27 +00:00
// Port implements InboundHandler.Port().
2016-04-25 22:33:16 +00:00
func (this *Server) Port() v2net.Port {
2016-01-19 22:41:40 +00:00
return this.listeningPort
}
2016-02-06 17:01:27 +00:00
// Close implements InboundHandler.Close().
2016-04-25 22:33:16 +00:00
func (this *Server) Close() {
this.accepting = false
if this.tcpListener != nil {
2016-01-03 23:33:25 +00:00
this.tcpMutex.Lock()
this.tcpListener.Close()
2016-01-03 23:33:25 +00:00
this.tcpListener = nil
this.tcpMutex.Unlock()
}
2016-02-03 21:43:09 +00:00
if this.udpHub != nil {
2016-01-03 23:33:25 +00:00
this.udpMutex.Lock()
2016-02-03 21:43:09 +00:00
this.udpHub.Close()
this.udpHub = nil
2016-01-03 23:33:25 +00:00
this.udpMutex.Unlock()
}
}
2016-02-06 17:01:27 +00:00
// Listen implements InboundHandler.Listen().
2016-04-25 22:33:16 +00:00
func (this *Server) Listen(port v2net.Port) error {
2016-01-19 22:41:40 +00:00
if this.accepting {
if this.listeningPort == port {
return nil
} else {
return proxy.ErrorAlreadyListening
}
}
this.listeningPort = port
2016-02-06 17:01:27 +00:00
listener, err := hub.ListenTCP(port, this.handleConnection)
2015-09-07 12:49:40 +00:00
if err != nil {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to listen on port ", port, ": ", err)
2015-09-12 18:36:21 +00:00
return err
2015-09-07 12:49:40 +00:00
}
2015-11-27 20:50:28 +00:00
this.accepting = true
2016-01-04 07:40:24 +00:00
this.tcpMutex.Lock()
this.tcpListener = listener
2016-01-04 07:40:24 +00:00
this.tcpMutex.Unlock()
if this.config.UDPEnabled {
2016-02-06 17:01:27 +00:00
this.listenUDP(port)
2015-10-03 19:42:03 +00:00
}
2015-09-07 12:49:40 +00:00
return nil
}
2016-04-25 22:33:16 +00:00
func (this *Server) handleConnection(connection *hub.TCPConn) {
2015-09-09 10:13:52 +00:00
defer connection.Close()
2015-09-15 22:06:22 +00:00
timedReader := v2net.NewTimeOutReader(120, connection)
reader := v2io.NewBufferedReader(timedReader)
2016-04-12 19:56:36 +00:00
defer reader.Release()
writer := v2io.NewBufferedWriter(connection)
2016-04-12 19:56:36 +00:00
defer writer.Release()
2015-09-09 10:13:52 +00:00
auth, auth4, err := protocol.ReadAuthentication(reader)
2015-10-13 11:55:06 +00:00
if err != nil && err != protocol.Socks4Downgrade {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to read authentication: ", err)
return
2015-09-09 10:13:52 +00:00
}
2015-10-13 11:55:06 +00:00
if err != nil && err == protocol.Socks4Downgrade {
this.handleSocks4(reader, writer, auth4)
2015-09-17 15:37:04 +00:00
} else {
this.handleSocks5(reader, writer, auth)
2015-10-03 19:42:03 +00:00
}
}
2015-09-17 15:37:04 +00:00
2016-04-25 22:33:16 +00:00
func (this *Server) handleSocks5(reader *v2io.BufferedReader, writer *v2io.BufferedWriter, auth protocol.Socks5AuthenticationRequest) error {
2015-10-03 19:42:03 +00:00
expectedAuthMethod := protocol.AuthNotRequired
if this.config.AuthType == AuthTypePassword {
2015-10-03 19:42:03 +00:00
expectedAuthMethod = protocol.AuthUserPass
}
2015-09-17 15:37:04 +00:00
2015-10-03 19:42:03 +00:00
if !auth.HasAuthMethod(expectedAuthMethod) {
authResponse := protocol.NewAuthenticationResponse(protocol.AuthNoMatchingMethod)
err := protocol.WriteAuthentication(writer, authResponse)
writer.Flush()
2015-09-15 22:06:22 +00:00
if err != nil {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to write authentication: ", err)
2015-09-15 22:06:22 +00:00
return err
}
2016-02-05 11:45:31 +00:00
log.Warning("Socks: client doesn't support any allowed auth methods.")
2016-01-30 11:32:38 +00:00
return ErrorUnsupportedAuthMethod
2015-10-03 19:42:03 +00:00
}
2015-09-17 15:37:04 +00:00
2015-10-03 19:42:03 +00:00
authResponse := protocol.NewAuthenticationResponse(expectedAuthMethod)
err := protocol.WriteAuthentication(writer, authResponse)
writer.Flush()
2015-10-03 19:42:03 +00:00
if err != nil {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to write authentication: ", err)
2015-10-03 19:42:03 +00:00
return err
}
if this.config.AuthType == AuthTypePassword {
2015-10-03 19:42:03 +00:00
upRequest, err := protocol.ReadUserPassRequest(reader)
if err != nil {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to read username and password: ", err)
return err
}
2015-10-03 19:42:03 +00:00
status := byte(0)
2015-11-27 20:50:28 +00:00
if !this.config.HasAccount(upRequest.Username(), upRequest.Password()) {
2015-10-03 19:42:03 +00:00
status = byte(0xFF)
}
upResponse := protocol.NewSocks5UserPassResponse(status)
err = protocol.WriteUserPassResponse(writer, upResponse)
writer.Flush()
2015-10-03 19:42:03 +00:00
if err != nil {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to write user pass response: ", err)
2015-10-03 19:42:03 +00:00
return err
}
if status != byte(0) {
2016-01-18 11:24:33 +00:00
log.Warning("Socks: Invalid user account: ", upRequest.AuthDetail())
2016-01-30 11:23:56 +00:00
return proxy.ErrorInvalidAuthentication
2015-10-03 19:42:03 +00:00
}
}
2015-09-09 10:13:52 +00:00
2015-10-03 19:42:03 +00:00
request, err := protocol.ReadRequest(reader)
if err != nil {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to read request: ", err)
2015-10-03 19:42:03 +00:00
return err
}
2015-09-11 12:12:26 +00:00
if request.Command == protocol.CmdUdpAssociate && this.config.UDPEnabled {
2015-11-27 20:50:28 +00:00
return this.handleUDP(reader, writer)
2015-10-03 22:21:06 +00:00
}
if request.Command == protocol.CmdBind || request.Command == protocol.CmdUdpAssociate {
2015-10-03 19:42:03 +00:00
response := protocol.NewSocks5Response()
response.Error = protocol.ErrorCommandNotSupported
2015-12-02 20:44:01 +00:00
response.Port = v2net.Port(0)
2015-11-06 12:08:20 +00:00
response.SetIPv4([]byte{0, 0, 0, 0})
2015-10-08 21:06:12 +00:00
response.Write(writer)
writer.Flush()
if err != nil {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to write response: ", err)
return err
}
2016-01-18 11:24:33 +00:00
log.Warning("Socks: Unsupported socks command ", request.Command)
2016-01-30 11:23:56 +00:00
return ErrorUnsupportedSocksCommand
2015-10-03 19:42:03 +00:00
}
2015-10-13 20:00:12 +00:00
response := protocol.NewSocks5Response()
2015-10-03 19:42:03 +00:00
response.Error = protocol.ErrorSuccess
2015-10-03 22:21:06 +00:00
2015-10-05 15:09:57 +00:00
// Some SOCKS software requires a value other than dest. Let's fake one:
2015-12-02 20:44:01 +00:00
response.Port = v2net.Port(1717)
2015-11-02 23:07:19 +00:00
response.SetIPv4([]byte{0, 0, 0, 0})
2015-10-05 15:09:44 +00:00
response.Write(writer)
2015-10-03 19:42:03 +00:00
if err != nil {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to write response: ", err)
2015-10-03 19:42:03 +00:00
return err
}
reader.SetCached(false)
writer.SetCached(false)
2015-10-03 19:42:03 +00:00
dest := request.Destination()
2016-01-18 11:24:33 +00:00
log.Info("Socks: TCP Connect request to ", dest)
2015-12-12 19:57:47 +00:00
2016-04-25 22:13:26 +00:00
this.transport(reader, writer, dest)
2015-10-03 19:42:03 +00:00
return nil
}
2016-04-25 22:33:16 +00:00
func (this *Server) handleUDP(reader io.Reader, writer *v2io.BufferedWriter) error {
2015-10-03 22:21:06 +00:00
response := protocol.NewSocks5Response()
response.Error = protocol.ErrorSuccess
udpAddr := this.udpAddress
2015-10-03 22:21:06 +00:00
2015-12-02 20:44:01 +00:00
response.Port = udpAddr.Port()
2015-10-03 22:21:06 +00:00
switch {
2015-12-16 22:53:38 +00:00
case udpAddr.Address().IsIPv4():
response.SetIPv4(udpAddr.Address().IP())
case udpAddr.Address().IsIPv6():
response.SetIPv6(udpAddr.Address().IP())
case udpAddr.Address().IsDomain():
response.SetDomain(udpAddr.Address().Domain())
2015-10-03 22:21:06 +00:00
}
2015-10-08 21:06:12 +00:00
response.Write(writer)
err := writer.Flush()
2015-10-08 21:06:12 +00:00
2015-10-03 22:21:06 +00:00
if err != nil {
2016-01-18 11:24:33 +00:00
log.Error("Socks: failed to write response: ", err)
2015-10-03 22:21:06 +00:00
return err
}
2015-10-06 15:24:57 +00:00
// The TCP connection closes after this method returns. We need to wait until
// the client closes it.
// TODO: get notified from UDP part
2015-10-06 09:57:26 +00:00
<-time.After(5 * time.Minute)
2015-10-03 22:21:06 +00:00
return nil
}
2016-04-25 22:33:16 +00:00
func (this *Server) handleSocks4(reader *v2io.BufferedReader, writer *v2io.BufferedWriter, auth protocol.Socks4AuthenticationRequest) error {
2015-10-03 19:42:03 +00:00
result := protocol.Socks4RequestGranted
if auth.Command == protocol.CmdBind {
result = protocol.Socks4RequestRejected
2015-09-11 12:12:26 +00:00
}
2015-10-03 19:42:03 +00:00
socks4Response := protocol.NewSocks4AuthenticationResponse(result, auth.Port, auth.IP[:])
2015-10-08 21:06:12 +00:00
socks4Response.Write(writer)
2015-09-17 15:37:04 +00:00
2015-10-03 19:42:03 +00:00
if result == protocol.Socks4RequestRejected {
2016-01-18 11:24:33 +00:00
log.Warning("Socks: Unsupported socks 4 command ", auth.Command)
2016-01-30 11:23:56 +00:00
return ErrorUnsupportedSocksCommand
2015-10-03 19:42:03 +00:00
}
reader.SetCached(false)
writer.SetCached(false)
2015-12-16 22:53:38 +00:00
dest := v2net.TCPDestination(v2net.IPAddress(auth.IP[:]), auth.Port)
2016-04-25 22:13:26 +00:00
this.transport(reader, writer, dest)
2015-10-03 19:42:03 +00:00
return nil
}
2016-04-25 22:33:16 +00:00
func (this *Server) transport(reader io.Reader, writer io.Writer, destination v2net.Destination) {
2016-04-25 22:13:26 +00:00
ray := this.packetDispatcher.DispatchToOutbound(destination)
2015-09-10 22:24:18 +00:00
input := ray.InboundInput()
output := ray.InboundOutput()
2015-10-03 19:42:03 +00:00
var inputFinish, outputFinish sync.Mutex
inputFinish.Lock()
outputFinish.Lock()
2015-09-09 10:13:52 +00:00
2015-11-27 20:50:28 +00:00
go func() {
v2reader := v2io.NewAdaptiveReader(reader)
defer v2reader.Release()
v2io.Pipe(v2reader, input)
2015-11-27 20:50:28 +00:00
inputFinish.Unlock()
2016-04-18 16:44:10 +00:00
input.Close()
2015-11-27 20:50:28 +00:00
}()
2015-09-10 22:24:18 +00:00
2015-11-27 20:50:28 +00:00
go func() {
v2writer := v2io.NewAdaptiveWriter(writer)
defer v2writer.Release()
v2io.Pipe(output, v2writer)
2015-11-27 20:50:28 +00:00
outputFinish.Unlock()
2016-04-18 16:44:10 +00:00
output.Release()
2015-11-27 20:50:28 +00:00
}()
outputFinish.Lock()
2015-09-10 22:24:18 +00:00
}