|
|
@ -6,23 +6,25 @@ import (
|
|
|
|
"bytes"
|
|
|
|
"bytes"
|
|
|
|
"context"
|
|
|
|
"context"
|
|
|
|
"fmt"
|
|
|
|
"fmt"
|
|
|
|
|
|
|
|
"io"
|
|
|
|
"io/ioutil"
|
|
|
|
"io/ioutil"
|
|
|
|
"net/http"
|
|
|
|
"net/http"
|
|
|
|
"net/url"
|
|
|
|
"net/url"
|
|
|
|
"sync"
|
|
|
|
"sync"
|
|
|
|
"sync/atomic"
|
|
|
|
"sync/atomic"
|
|
|
|
"time"
|
|
|
|
"time"
|
|
|
|
|
|
|
|
|
|
|
|
dns_feature "v2ray.com/core/features/dns"
|
|
|
|
dns_feature "v2ray.com/core/features/dns"
|
|
|
|
|
|
|
|
|
|
|
|
"golang.org/x/net/dns/dnsmessage"
|
|
|
|
"golang.org/x/net/dns/dnsmessage"
|
|
|
|
"v2ray.com/core/common"
|
|
|
|
"v2ray.com/core/common"
|
|
|
|
"v2ray.com/core/common/dice"
|
|
|
|
|
|
|
|
"v2ray.com/core/common/net"
|
|
|
|
"v2ray.com/core/common/net"
|
|
|
|
"v2ray.com/core/common/protocol/dns"
|
|
|
|
"v2ray.com/core/common/protocol/dns"
|
|
|
|
"v2ray.com/core/common/session"
|
|
|
|
"v2ray.com/core/common/session"
|
|
|
|
"v2ray.com/core/common/signal/pubsub"
|
|
|
|
"v2ray.com/core/common/signal/pubsub"
|
|
|
|
"v2ray.com/core/common/task"
|
|
|
|
"v2ray.com/core/common/task"
|
|
|
|
"v2ray.com/core/features/routing"
|
|
|
|
"v2ray.com/core/features/routing"
|
|
|
|
|
|
|
|
"v2ray.com/core/transport/internet"
|
|
|
|
)
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
|
|
// DoHNameServer implimented DNS over HTTPS (RFC8484) Wire Format,
|
|
|
|
// DoHNameServer implimented DNS over HTTPS (RFC8484) Wire Format,
|
|
|
@ -30,8 +32,6 @@ import (
|
|
|
|
// thus most of the DOH implimentation is copied from udpns.go
|
|
|
|
// thus most of the DOH implimentation is copied from udpns.go
|
|
|
|
type DoHNameServer struct {
|
|
|
|
type DoHNameServer struct {
|
|
|
|
sync.RWMutex
|
|
|
|
sync.RWMutex
|
|
|
|
dispatcher routing.Dispatcher
|
|
|
|
|
|
|
|
dohDests []net.Destination
|
|
|
|
|
|
|
|
ips map[string]record
|
|
|
|
ips map[string]record
|
|
|
|
pub *pubsub.Service
|
|
|
|
pub *pubsub.Service
|
|
|
|
cleanup *task.Periodic
|
|
|
|
cleanup *task.Periodic
|
|
|
@ -45,41 +45,8 @@ type DoHNameServer struct {
|
|
|
|
// NewDoHNameServer creates DOH client object for remote resolving
|
|
|
|
// NewDoHNameServer creates DOH client object for remote resolving
|
|
|
|
func NewDoHNameServer(url *url.URL, dispatcher routing.Dispatcher, clientIP net.IP) (*DoHNameServer, error) {
|
|
|
|
func NewDoHNameServer(url *url.URL, dispatcher routing.Dispatcher, clientIP net.IP) (*DoHNameServer, error) {
|
|
|
|
|
|
|
|
|
|
|
|
dohAddr := net.ParseAddress(url.Hostname())
|
|
|
|
newError("DNS: created Remote DOH client for ", url.String()).AtInfo().WriteToLog()
|
|
|
|
dohPort := "443"
|
|
|
|
|
|
|
|
if url.Port() != "" {
|
|
|
|
|
|
|
|
dohPort = url.Port()
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
parseIPDest := func(ip net.IP, port string) net.Destination {
|
|
|
|
|
|
|
|
strIP := ip.String()
|
|
|
|
|
|
|
|
if len(ip) == net.IPv6len {
|
|
|
|
|
|
|
|
strIP = fmt.Sprintf("[%s]", strIP)
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
dest, err := net.ParseDestination(fmt.Sprintf("tcp:%s:%s", strIP, port))
|
|
|
|
|
|
|
|
common.Must(err)
|
|
|
|
|
|
|
|
return dest
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
var dests []net.Destination
|
|
|
|
|
|
|
|
if dohAddr.Family().IsDomain() {
|
|
|
|
|
|
|
|
// resolve DOH server in advance
|
|
|
|
|
|
|
|
ips, err := net.LookupIP(dohAddr.Domain())
|
|
|
|
|
|
|
|
if err != nil || len(ips) == 0 {
|
|
|
|
|
|
|
|
return nil, err
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
for _, ip := range ips {
|
|
|
|
|
|
|
|
dests = append(dests, parseIPDest(ip, dohPort))
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
} else {
|
|
|
|
|
|
|
|
ip := dohAddr.IP()
|
|
|
|
|
|
|
|
dests = append(dests, parseIPDest(ip, dohPort))
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
newError("DNS: created Remote DOH client for ", url.String(), ", preresolved Dests: ", dests).AtInfo().WriteToLog()
|
|
|
|
|
|
|
|
s := baseDOHNameServer(url, "DOH", clientIP)
|
|
|
|
s := baseDOHNameServer(url, "DOH", clientIP)
|
|
|
|
s.dispatcher = dispatcher
|
|
|
|
|
|
|
|
s.dohDests = dests
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
// Dispatched connection will be closed (interupted) after each request
|
|
|
|
// Dispatched connection will be closed (interupted) after each request
|
|
|
|
// This makes DOH inefficient without a keeped-alive connection
|
|
|
|
// This makes DOH inefficient without a keeped-alive connection
|
|
|
@ -88,15 +55,29 @@ func NewDoHNameServer(url *url.URL, dispatcher routing.Dispatcher, clientIP net.
|
|
|
|
// Recommand to use NewDoHLocalNameServer (DOHL:) if v2ray instance is running on
|
|
|
|
// Recommand to use NewDoHLocalNameServer (DOHL:) if v2ray instance is running on
|
|
|
|
// a normal network eg. the server side of v2ray
|
|
|
|
// a normal network eg. the server side of v2ray
|
|
|
|
tr := &http.Transport{
|
|
|
|
tr := &http.Transport{
|
|
|
|
MaxIdleConns: 10,
|
|
|
|
MaxIdleConns: 30,
|
|
|
|
IdleConnTimeout: 90 * time.Second,
|
|
|
|
IdleConnTimeout: 90 * time.Second,
|
|
|
|
TLSHandshakeTimeout: 10 * time.Second,
|
|
|
|
TLSHandshakeTimeout: 30 * time.Second,
|
|
|
|
DialContext: s.DialContext,
|
|
|
|
DialContext: func(ctx context.Context, network, addr string) (net.Conn, error) {
|
|
|
|
|
|
|
|
dest, err := net.ParseDestination(network + ":" + addr)
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
|
|
|
|
return nil, err
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
link, err := dispatcher.Dispatch(ctx, dest)
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
|
|
|
|
return nil, err
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
return net.NewConnection(
|
|
|
|
|
|
|
|
net.ConnectionInputMulti(link.Writer),
|
|
|
|
|
|
|
|
net.ConnectionOutputMulti(link.Reader),
|
|
|
|
|
|
|
|
), nil
|
|
|
|
|
|
|
|
},
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
dispatchedClient := &http.Client{
|
|
|
|
dispatchedClient := &http.Client{
|
|
|
|
Transport: tr,
|
|
|
|
Transport: tr,
|
|
|
|
Timeout: 16 * time.Second,
|
|
|
|
Timeout: 60 * time.Second,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
s.httpClient = dispatchedClient
|
|
|
|
s.httpClient = dispatchedClient
|
|
|
@ -107,8 +88,23 @@ func NewDoHNameServer(url *url.URL, dispatcher routing.Dispatcher, clientIP net.
|
|
|
|
func NewDoHLocalNameServer(url *url.URL, clientIP net.IP) *DoHNameServer {
|
|
|
|
func NewDoHLocalNameServer(url *url.URL, clientIP net.IP) *DoHNameServer {
|
|
|
|
url.Scheme = "https"
|
|
|
|
url.Scheme = "https"
|
|
|
|
s := baseDOHNameServer(url, "DOHL", clientIP)
|
|
|
|
s := baseDOHNameServer(url, "DOHL", clientIP)
|
|
|
|
|
|
|
|
tr := &http.Transport{
|
|
|
|
|
|
|
|
IdleConnTimeout: 90 * time.Second,
|
|
|
|
|
|
|
|
DialContext: func(ctx context.Context, network, addr string) (net.Conn, error) {
|
|
|
|
|
|
|
|
dest, err := net.ParseDestination(network + ":" + addr)
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
|
|
|
|
return nil, err
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
conn, err := internet.DialSystem(ctx, dest, nil)
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
|
|
|
|
return nil, err
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
return conn, nil
|
|
|
|
|
|
|
|
},
|
|
|
|
|
|
|
|
}
|
|
|
|
s.httpClient = &http.Client{
|
|
|
|
s.httpClient = &http.Client{
|
|
|
|
Timeout: time.Second * 180,
|
|
|
|
Timeout: time.Second * 180,
|
|
|
|
|
|
|
|
Transport: tr,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
newError("DNS: created Local DOH client for ", url.String()).AtInfo().WriteToLog()
|
|
|
|
newError("DNS: created Local DOH client for ", url.String()).AtInfo().WriteToLog()
|
|
|
|
return s
|
|
|
|
return s
|
|
|
@ -120,7 +116,7 @@ func baseDOHNameServer(url *url.URL, prefix string, clientIP net.IP) *DoHNameSer
|
|
|
|
ips: make(map[string]record),
|
|
|
|
ips: make(map[string]record),
|
|
|
|
clientIP: clientIP,
|
|
|
|
clientIP: clientIP,
|
|
|
|
pub: pubsub.NewService(),
|
|
|
|
pub: pubsub.NewService(),
|
|
|
|
name: fmt.Sprintf("%s//%s", prefix, url.Host),
|
|
|
|
name: prefix + "//" + url.Host,
|
|
|
|
dohURL: url.String(),
|
|
|
|
dohURL: url.String(),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
s.cleanup = &task.Periodic{
|
|
|
|
s.cleanup = &task.Periodic{
|
|
|
@ -136,21 +132,6 @@ func (s *DoHNameServer) Name() string {
|
|
|
|
return s.name
|
|
|
|
return s.name
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
// DialContext offer dispatched connection through core routing
|
|
|
|
|
|
|
|
func (s *DoHNameServer) DialContext(ctx context.Context, network, addr string) (net.Conn, error) {
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
dest := s.dohDests[dice.Roll(len(s.dohDests))]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
link, err := s.dispatcher.Dispatch(ctx, dest)
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
|
|
|
|
return nil, err
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
return net.NewConnection(
|
|
|
|
|
|
|
|
net.ConnectionInputMulti(link.Writer),
|
|
|
|
|
|
|
|
net.ConnectionOutputMulti(link.Reader),
|
|
|
|
|
|
|
|
), nil
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
// Cleanup clears expired items from cache
|
|
|
|
// Cleanup clears expired items from cache
|
|
|
|
func (s *DoHNameServer) Cleanup() error {
|
|
|
|
func (s *DoHNameServer) Cleanup() error {
|
|
|
|
now := time.Now()
|
|
|
|
now := time.Now()
|
|
|
@ -255,7 +236,8 @@ func (s *DoHNameServer) sendQuery(ctx context.Context, domain string, option IPO
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
dnsCtx = session.ContextWithContent(dnsCtx, &session.Content{
|
|
|
|
dnsCtx = session.ContextWithContent(dnsCtx, &session.Content{
|
|
|
|
Protocol: "https",
|
|
|
|
Protocol: "https",
|
|
|
|
|
|
|
|
SkipRoutePick: true,
|
|
|
|
})
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
|
|
// forced to use mux for DOH
|
|
|
|
// forced to use mux for DOH
|
|
|
@ -297,10 +279,9 @@ func (s *DoHNameServer) dohHTTPSContext(ctx context.Context, b []byte) ([]byte,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
defer resp.Body.Close()
|
|
|
|
defer resp.Body.Close()
|
|
|
|
|
|
|
|
|
|
|
|
if resp.StatusCode != http.StatusOK {
|
|
|
|
if resp.StatusCode != http.StatusOK {
|
|
|
|
err = fmt.Errorf("DOH HTTPS server returned with non-OK code %d", resp.StatusCode)
|
|
|
|
io.Copy(ioutil.Discard, resp.Body) // flush resp.Body so that the conn is reusable
|
|
|
|
return nil, err
|
|
|
|
return nil, fmt.Errorf("DOH server returned code %d", resp.StatusCode)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
return ioutil.ReadAll(resp.Body)
|
|
|
|
return ioutil.ReadAll(resp.Body)
|
|
|
|