|
|
|
package inbound
|
|
|
|
|
|
|
|
import (
|
|
|
|
"sync"
|
|
|
|
|
|
|
|
"github.com/v2ray/v2ray-core/app"
|
|
|
|
"github.com/v2ray/v2ray-core/app/dispatcher"
|
|
|
|
"github.com/v2ray/v2ray-core/app/proxyman"
|
|
|
|
"github.com/v2ray/v2ray-core/common/alloc"
|
|
|
|
v2io "github.com/v2ray/v2ray-core/common/io"
|
|
|
|
"github.com/v2ray/v2ray-core/common/log"
|
|
|
|
v2net "github.com/v2ray/v2ray-core/common/net"
|
|
|
|
"github.com/v2ray/v2ray-core/common/protocol"
|
|
|
|
"github.com/v2ray/v2ray-core/common/protocol/raw"
|
|
|
|
"github.com/v2ray/v2ray-core/common/serial"
|
|
|
|
"github.com/v2ray/v2ray-core/common/uuid"
|
|
|
|
"github.com/v2ray/v2ray-core/proxy"
|
|
|
|
"github.com/v2ray/v2ray-core/proxy/internal"
|
|
|
|
vmessio "github.com/v2ray/v2ray-core/proxy/vmess/io"
|
|
|
|
"github.com/v2ray/v2ray-core/transport/hub"
|
|
|
|
)
|
|
|
|
|
|
|
|
type userByEmail struct {
|
|
|
|
sync.RWMutex
|
|
|
|
cache map[string]*protocol.User
|
|
|
|
defaultLevel protocol.UserLevel
|
|
|
|
defaultAlterIDs uint16
|
|
|
|
}
|
|
|
|
|
|
|
|
func NewUserByEmail(users []*protocol.User, config *DefaultConfig) *userByEmail {
|
|
|
|
cache := make(map[string]*protocol.User)
|
|
|
|
for _, user := range users {
|
|
|
|
cache[user.Email] = user
|
|
|
|
}
|
|
|
|
return &userByEmail{
|
|
|
|
cache: cache,
|
|
|
|
defaultLevel: config.Level,
|
|
|
|
defaultAlterIDs: config.AlterIDs,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func (this *userByEmail) Get(email string) (*protocol.User, bool) {
|
|
|
|
var user *protocol.User
|
|
|
|
var found bool
|
|
|
|
this.RLock()
|
|
|
|
user, found = this.cache[email]
|
|
|
|
this.RUnlock()
|
|
|
|
if !found {
|
|
|
|
this.Lock()
|
|
|
|
user, found = this.cache[email]
|
|
|
|
if !found {
|
|
|
|
id := protocol.NewID(uuid.New())
|
|
|
|
user = protocol.NewUser(id, this.defaultLevel, this.defaultAlterIDs, email)
|
|
|
|
this.cache[email] = user
|
|
|
|
}
|
|
|
|
this.Unlock()
|
|
|
|
}
|
|
|
|
return user, found
|
|
|
|
}
|
|
|
|
|
|
|
|
// Inbound connection handler that handles messages in VMess format.
|
|
|
|
type VMessInboundHandler struct {
|
|
|
|
sync.Mutex
|
|
|
|
packetDispatcher dispatcher.PacketDispatcher
|
|
|
|
inboundHandlerManager proxyman.InboundHandlerManager
|
|
|
|
clients protocol.UserValidator
|
|
|
|
usersByEmail *userByEmail
|
|
|
|
accepting bool
|
|
|
|
listener *hub.TCPHub
|
|
|
|
features *FeaturesConfig
|
|
|
|
listeningPort v2net.Port
|
|
|
|
}
|
|
|
|
|
|
|
|
func (this *VMessInboundHandler) Port() v2net.Port {
|
|
|
|
return this.listeningPort
|
|
|
|
}
|
|
|
|
|
|
|
|
func (this *VMessInboundHandler) Close() {
|
|
|
|
this.accepting = false
|
|
|
|
if this.listener != nil {
|
|
|
|
this.Lock()
|
|
|
|
this.listener.Close()
|
|
|
|
this.listener = nil
|
|
|
|
this.Unlock()
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func (this *VMessInboundHandler) GetUser(email string) *protocol.User {
|
|
|
|
user, existing := this.usersByEmail.Get(email)
|
|
|
|
if !existing {
|
|
|
|
this.clients.Add(user)
|
|
|
|
}
|
|
|
|
return user
|
|
|
|
}
|
|
|
|
|
|
|
|
func (this *VMessInboundHandler) Listen(port v2net.Port) error {
|
|
|
|
if this.accepting {
|
|
|
|
if this.listeningPort == port {
|
|
|
|
return nil
|
|
|
|
} else {
|
|
|
|
return proxy.ErrorAlreadyListening
|
|
|
|
}
|
|
|
|
}
|
|
|
|
this.listeningPort = port
|
|
|
|
|
|
|
|
tcpListener, err := hub.ListenTCP(port, this.HandleConnection, nil)
|
|
|
|
if err != nil {
|
|
|
|
log.Error("Unable to listen tcp port ", port, ": ", err)
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
this.accepting = true
|
|
|
|
this.Lock()
|
|
|
|
this.listener = tcpListener
|
|
|
|
this.Unlock()
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (this *VMessInboundHandler) HandleConnection(connection *hub.Connection) {
|
|
|
|
defer connection.Close()
|
|
|
|
|
|
|
|
connReader := v2net.NewTimeOutReader(16, connection)
|
|
|
|
defer connReader.Release()
|
|
|
|
|
|
|
|
reader := v2io.NewBufferedReader(connReader)
|
|
|
|
defer reader.Release()
|
|
|
|
|
|
|
|
session := raw.NewServerSession(this.clients)
|
|
|
|
defer session.Release()
|
|
|
|
|
|
|
|
request, err := session.DecodeRequestHeader(reader)
|
|
|
|
if err != nil {
|
|
|
|
log.Access(connection.RemoteAddr(), serial.StringLiteral(""), log.AccessRejected, serial.StringLiteral(err.Error()))
|
|
|
|
log.Warning("VMessIn: Invalid request from ", connection.RemoteAddr(), ": ", err)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
log.Access(connection.RemoteAddr(), request.Destination(), log.AccessAccepted, serial.StringLiteral(""))
|
|
|
|
log.Debug("VMessIn: Received request for ", request.Destination())
|
|
|
|
|
|
|
|
ray := this.packetDispatcher.DispatchToOutbound(request.Destination())
|
|
|
|
input := ray.InboundInput()
|
|
|
|
output := ray.InboundOutput()
|
|
|
|
defer input.Close()
|
|
|
|
defer output.Release()
|
|
|
|
|
|
|
|
var readFinish, writeFinish sync.Mutex
|
|
|
|
readFinish.Lock()
|
|
|
|
writeFinish.Lock()
|
|
|
|
|
|
|
|
userSettings := protocol.GetUserSettings(request.User.Level)
|
|
|
|
connReader.SetTimeOut(userSettings.PayloadReadTimeout)
|
|
|
|
reader.SetCached(false)
|
|
|
|
go func() {
|
|
|
|
defer input.Close()
|
|
|
|
defer readFinish.Unlock()
|
|
|
|
bodyReader := session.DecodeRequestBody(reader)
|
|
|
|
var requestReader v2io.Reader
|
|
|
|
if request.Option.IsChunkStream() {
|
|
|
|
requestReader = vmessio.NewAuthChunkReader(bodyReader)
|
|
|
|
} else {
|
|
|
|
requestReader = v2io.NewAdaptiveReader(bodyReader)
|
|
|
|
}
|
|
|
|
v2io.Pipe(requestReader, input)
|
|
|
|
requestReader.Release()
|
|
|
|
}()
|
|
|
|
|
|
|
|
writer := v2io.NewBufferedWriter(connection)
|
|
|
|
defer writer.Release()
|
|
|
|
|
|
|
|
response := &protocol.ResponseHeader{
|
|
|
|
Command: this.generateCommand(request),
|
|
|
|
}
|
|
|
|
|
|
|
|
session.EncodeResponseHeader(response, writer)
|
|
|
|
|
|
|
|
bodyWriter := session.EncodeResponseBody(writer)
|
|
|
|
|
|
|
|
// Optimize for small response packet
|
|
|
|
if data, err := output.Read(); err == nil {
|
|
|
|
if request.Option.IsChunkStream() {
|
|
|
|
vmessio.Authenticate(data)
|
|
|
|
}
|
|
|
|
bodyWriter.Write(data.Value)
|
|
|
|
data.Release()
|
|
|
|
|
|
|
|
writer.SetCached(false)
|
|
|
|
go func(finish *sync.Mutex) {
|
|
|
|
var writer v2io.Writer = v2io.NewAdaptiveWriter(bodyWriter)
|
|
|
|
if request.Option.IsChunkStream() {
|
|
|
|
writer = vmessio.NewAuthChunkWriter(writer)
|
|
|
|
}
|
|
|
|
v2io.Pipe(output, writer)
|
|
|
|
if request.Option.IsChunkStream() {
|
|
|
|
writer.Write(alloc.NewSmallBuffer().Clear())
|
|
|
|
}
|
|
|
|
writer.Release()
|
|
|
|
finish.Unlock()
|
|
|
|
}(&writeFinish)
|
|
|
|
writeFinish.Lock()
|
|
|
|
}
|
|
|
|
|
|
|
|
readFinish.Lock()
|
|
|
|
}
|
|
|
|
|
|
|
|
func init() {
|
|
|
|
internal.MustRegisterInboundHandlerCreator("vmess",
|
|
|
|
func(space app.Space, rawConfig interface{}) (proxy.InboundHandler, error) {
|
|
|
|
if !space.HasApp(dispatcher.APP_ID) {
|
|
|
|
return nil, internal.ErrorBadConfiguration
|
|
|
|
}
|
|
|
|
config := rawConfig.(*Config)
|
|
|
|
|
|
|
|
allowedClients := protocol.NewTimedUserValidator(protocol.DefaultIDHash)
|
|
|
|
for _, user := range config.AllowedUsers {
|
|
|
|
allowedClients.Add(user)
|
|
|
|
}
|
|
|
|
|
|
|
|
handler := &VMessInboundHandler{
|
|
|
|
packetDispatcher: space.GetApp(dispatcher.APP_ID).(dispatcher.PacketDispatcher),
|
|
|
|
clients: allowedClients,
|
|
|
|
features: config.Features,
|
|
|
|
usersByEmail: NewUserByEmail(config.AllowedUsers, config.Defaults),
|
|
|
|
}
|
|
|
|
|
|
|
|
if space.HasApp(proxyman.APP_ID_INBOUND_MANAGER) {
|
|
|
|
handler.inboundHandlerManager = space.GetApp(proxyman.APP_ID_INBOUND_MANAGER).(proxyman.InboundHandlerManager)
|
|
|
|
}
|
|
|
|
|
|
|
|
return handler, nil
|
|
|
|
})
|
|
|
|
}
|