Max Lv
11 years ago
18 changed files with 1276 additions and 64 deletions
Split View
Diff Options
-
63Changes
-
20configure
-
2configure.ac
-
6debian/changelog
-
27src/Makefile.am
-
156src/Makefile.in
-
3src/include.h
-
15src/jconf.c
-
10src/jconf.h
-
5src/local.c
-
2src/local.h
-
5src/redir.c
-
2src/redir.h
-
884src/tunnel.c
-
76src/tunnel.h
-
48src/udprelay.c
-
3src/udprelay.h
-
13src/utils.c
@ -1,47 +1,74 @@ |
|||
Changelog |
|||
--------- |
|||
shadowsocks (1.4.3-1) unstable; urgency=low |
|||
|
|||
1.4.2 -- Sun, 05 Jan 2014 10:05:29 +0900 |
|||
* Add tunnel mode with local port forwarding feature. |
|||
|
|||
-- Max Lv <max.c.lv@gmail.com> Fri, 21 Feb 2014 11:52:13 +0900 |
|||
|
|||
shadowsocks (1.4.2-1) unstable; urgency=high |
|||
|
|||
* Fix the UDP relay issues. |
|||
* Add syslog support. |
|||
|
|||
1.4.1 -- Tue, 12 Nov 2013 03:57:21 +0000 |
|||
-- Max Lv <max.c.lv@gmail.com> Sun, 05 Jan 2014 10:05:29 +0900 |
|||
|
|||
shadowsocks (1.4.1-1) unstable; urgency=low |
|||
|
|||
* Add multi-port support. |
|||
* Add PolarSSL support by @linusyang. |
|||
|
|||
1.4.0 -- Sun, 08 Sep 2013 02:20:40 +0000 |
|||
-- Max Lv <max.c.lv@gmail.com> Tue, 12 Nov 2013 03:57:21 +0000 |
|||
|
|||
shadowsocks (1.4.0-1) unstable; urgency=low |
|||
|
|||
* Add standard socks5 udp support. |
|||
|
|||
1.3.3 -- Fri, 21 Jun 2013 09:59:20 +0800 |
|||
-- Max Lv <max.c.lv@gmail.com> Sun, 08 Sep 2013 02:20:40 +0000 |
|||
|
|||
shadowsocks (1.3.3-1) unstable; urgency=high |
|||
|
|||
* Provide more info in verbose mode. |
|||
|
|||
1.3.2 -- Sun, 09 Jun 2013 09:52:31 +0000 |
|||
-- Max Lv <max.c.lv@gmail.com> Fri, 21 Jun 2013 09:59:20 +0800 |
|||
|
|||
shadowsocks (1.3.2-1) unstable; urgency=high |
|||
|
|||
* Fix some ciphers by @linusyang. |
|||
|
|||
1.3.1 -- Tue, 04 Jun 2013 00:56:17 +0000 |
|||
-- Max Lv <max.c.lv@gmail.com> Sun, 09 Jun 2013 09:52:31 +0000 |
|||
|
|||
shadowsocks (1.3.1-1) unstable; urgency=low |
|||
|
|||
* Support more cihpers: camellia, idea, rc2 and seed. |
|||
|
|||
1.3 -- Thu, 16 May 2013 10:51:15 +0800 |
|||
-- Max Lv <max.c.lv@gmail.com> Tue, 04 Jun 2013 00:56:17 +0000 |
|||
|
|||
shadowsocks (1.3-1) unstable; urgency=low |
|||
|
|||
* Able to bind connections to specific interface. |
|||
* Support more ciphers: aes-128-cfb, aes-192-cfb, aes-256-cfb, bf-cfb, cast5-cfb, des-cfb. |
|||
|
|||
-- Max Lv <max.c.lv@gmail.com> Thu, 16 May 2013 10:51:15 +0800 |
|||
|
|||
shadowsocks (1.2-2) unstable; urgency=low |
|||
|
|||
* Close timeouted TCP connections. |
|||
|
|||
-- Max Lv <max.c.lv@gmail.com> Tue, 07 May 2013 14:10:33 +0800 |
|||
|
|||
shadowsocks (1.2-1) unstable; urgency=low |
|||
|
|||
* Able to bind connections to specific interface |
|||
* Support more ciphers: aes-128-cfb, aes-192-cfb, aes-256-cfb, bf-cfb, cast5-cfb, des-cfb |
|||
* Fix a high load issue. |
|||
|
|||
1.2 -- Tue, 07 May 2013 14:10:33 +0800 |
|||
-- Max Lv <max.c.lv@gmail.com> Thu, 18 Apr 2013 10:52:34 +0800 |
|||
|
|||
* Close timeouted TCP connections |
|||
* Fix a high load issue |
|||
shadowsocks (1.1-1) unstable; urgency=low |
|||
|
|||
1.1 -- Wed, 10 Apr 2013 12:11:36 +0800 |
|||
* Fix a IPV6 resolve issue. |
|||
|
|||
* Fix a IPV6 resolve issue |
|||
-- Max Lv <max.c.lv@gmail.com> Wed, 10 Apr 2013 12:11:36 +0800 |
|||
|
|||
1.0 -- Sat, 06 Apr 2013 16:59:15 +0800 |
|||
shadowsocks (1.0-2) unstable; urgency=low |
|||
|
|||
* Initial release |
|||
* Initial release. |
|||
|
|||
-- Max Lv <max.c.lv@gmail.com> Sat, 06 Apr 2013 16:59:15 +0800 |
|||
@ -0,0 +1,884 @@ |
|||
#include <sys/stat.h> |
|||
#include <sys/types.h> |
|||
#include <fcntl.h> |
|||
#include <locale.h> |
|||
#include <signal.h> |
|||
#include <string.h> |
|||
#include <strings.h> |
|||
#include <unistd.h> |
|||
|
|||
#ifndef __MINGW32__ |
|||
#include <errno.h> |
|||
#include <arpa/inet.h> |
|||
#include <netdb.h> |
|||
#include <netinet/in.h> |
|||
#include <netinet/tcp.h> |
|||
#include <pthread.h> |
|||
#endif |
|||
|
|||
#ifdef HAVE_CONFIG_H |
|||
#include "config.h" |
|||
#endif |
|||
|
|||
#if defined(HAVE_SYS_IOCTL_H) && defined(HAVE_NET_IF_H) && defined(__linux__) |
|||
#include <net/if.h> |
|||
#include <sys/ioctl.h> |
|||
#define SET_INTERFACE |
|||
#endif |
|||
|
|||
#ifdef __MINGW32__ |
|||
#include "win32.h" |
|||
#endif |
|||
|
|||
#include "utils.h" |
|||
#include "tunnel.h" |
|||
|
|||
#ifndef EAGAIN |
|||
#define EAGAIN EWOULDBLOCK |
|||
#endif |
|||
|
|||
#ifndef EWOULDBLOCK |
|||
#define EWOULDBLOCK EAGAIN |
|||
#endif |
|||
|
|||
#ifndef BUF_SIZE |
|||
#define BUF_SIZE 512 |
|||
#endif |
|||
|
|||
int verbose = 0; |
|||
int udprelay = 0; |
|||
|
|||
#ifndef __MINGW32__ |
|||
static int setnonblocking(int fd) |
|||
{ |
|||
int flags; |
|||
if (-1 ==(flags = fcntl(fd, F_GETFL, 0))) |
|||
flags = 0; |
|||
return fcntl(fd, F_SETFL, flags | O_NONBLOCK); |
|||
} |
|||
#endif |
|||
|
|||
#ifdef SET_INTERFACE |
|||
int setinterface(int socket_fd, const char* interface_name) |
|||
{ |
|||
struct ifreq interface; |
|||
memset(&interface, 0, sizeof(interface)); |
|||
strncpy(interface.ifr_name, interface_name, IFNAMSIZ); |
|||
int res = setsockopt(socket_fd, SOL_SOCKET, SO_BINDTODEVICE, &interface, sizeof(struct ifreq)); |
|||
return res; |
|||
} |
|||
#endif |
|||
|
|||
int create_and_bind(const char *addr, const char *port) |
|||
{ |
|||
struct addrinfo hints; |
|||
struct addrinfo *result, *rp; |
|||
int s, listen_sock; |
|||
|
|||
memset(&hints, 0, sizeof(struct addrinfo)); |
|||
hints.ai_family = AF_UNSPEC; /* Return IPv4 and IPv6 choices */ |
|||
hints.ai_socktype = SOCK_STREAM; /* We want a TCP socket */ |
|||
|
|||
s = getaddrinfo(addr, port, &hints, &result); |
|||
if (s != 0) |
|||
{ |
|||
LOGD("getaddrinfo: %s", gai_strerror(s)); |
|||
return -1; |
|||
} |
|||
|
|||
for (rp = result; rp != NULL; rp = rp->ai_next) |
|||
{ |
|||
listen_sock = socket(rp->ai_family, rp->ai_socktype, rp->ai_protocol); |
|||
if (listen_sock == -1) |
|||
continue; |
|||
|
|||
int opt = 1; |
|||
setsockopt(listen_sock, SOL_SOCKET, SO_REUSEADDR, &opt, sizeof(opt)); |
|||
setsockopt(listen_sock, IPPROTO_TCP, TCP_NODELAY, &opt, sizeof(opt)); |
|||
#ifdef SO_NOSIGPIPE |
|||
setsockopt(listen_sock, SOL_SOCKET, SO_NOSIGPIPE, &opt, sizeof(opt)); |
|||
#endif |
|||
|
|||
s = bind(listen_sock, rp->ai_addr, rp->ai_addrlen); |
|||
if (s == 0) |
|||
{ |
|||
/* We managed to bind successfully! */ |
|||
break; |
|||
} |
|||
else |
|||
{ |
|||
ERROR("bind"); |
|||
} |
|||
|
|||
close(listen_sock); |
|||
} |
|||
|
|||
if (rp == NULL) |
|||
{ |
|||
LOGE("Could not bind"); |
|||
return -1; |
|||
} |
|||
|
|||
freeaddrinfo(result); |
|||
|
|||
return listen_sock; |
|||
} |
|||
|
|||
static void server_recv_cb (EV_P_ ev_io *w, int revents) |
|||
{ |
|||
struct server_ctx *server_recv_ctx = (struct server_ctx *)w; |
|||
struct server *server = server_recv_ctx->server; |
|||
struct remote *remote = server->remote; |
|||
|
|||
if (remote == NULL) |
|||
{ |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
|
|||
ssize_t r = recv(server->fd, remote->buf, BUF_SIZE, 0); |
|||
|
|||
if (r == 0) |
|||
{ |
|||
// connection closed |
|||
remote->buf_len = 0; |
|||
remote->buf_idx = 0; |
|||
close_and_free_server(EV_A_ server); |
|||
if (remote != NULL) |
|||
{ |
|||
ev_io_start(EV_A_ &remote->send_ctx->io); |
|||
} |
|||
return; |
|||
} |
|||
else if(r < 0) |
|||
{ |
|||
if (errno == EAGAIN || errno == EWOULDBLOCK) |
|||
{ |
|||
// no data |
|||
// continue to wait for recv |
|||
return; |
|||
} |
|||
else |
|||
{ |
|||
ERROR("server recv"); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
} |
|||
|
|||
remote->buf = ss_encrypt(BUF_SIZE, remote->buf, &r, server->e_ctx); |
|||
|
|||
if (remote->buf == NULL) |
|||
{ |
|||
LOGE("invalid password or cipher"); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
|
|||
int s = send(remote->fd, remote->buf, r, 0); |
|||
|
|||
if(s == -1) |
|||
{ |
|||
if (errno == EAGAIN || errno == EWOULDBLOCK) |
|||
{ |
|||
// no data, wait for send |
|||
remote->buf_len = r; |
|||
remote->buf_idx = 0; |
|||
ev_io_stop(EV_A_ &server_recv_ctx->io); |
|||
ev_io_start(EV_A_ &remote->send_ctx->io); |
|||
return; |
|||
} |
|||
else |
|||
{ |
|||
ERROR("send"); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
} |
|||
else if(s < r) |
|||
{ |
|||
remote->buf_len = r - s; |
|||
remote->buf_idx = s; |
|||
ev_io_stop(EV_A_ &server_recv_ctx->io); |
|||
ev_io_start(EV_A_ &remote->send_ctx->io); |
|||
return; |
|||
} |
|||
} |
|||
|
|||
static void server_send_cb (EV_P_ ev_io *w, int revents) |
|||
{ |
|||
struct server_ctx *server_send_ctx = (struct server_ctx *)w; |
|||
struct server *server = server_send_ctx->server; |
|||
struct remote *remote = server->remote; |
|||
if (server->buf_len == 0) |
|||
{ |
|||
// close and free |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
else |
|||
{ |
|||
// has data to send |
|||
ssize_t s = send(server->fd, server->buf + server->buf_idx, |
|||
server->buf_len, 0); |
|||
if (s < 0) |
|||
{ |
|||
if (errno != EAGAIN && errno != EWOULDBLOCK) |
|||
{ |
|||
ERROR("send"); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
} |
|||
return; |
|||
} |
|||
else if (s < server->buf_len) |
|||
{ |
|||
// partly sent, move memory, wait for the next time to send |
|||
server->buf_len -= s; |
|||
server->buf_idx += s; |
|||
return; |
|||
} |
|||
else |
|||
{ |
|||
// all sent out, wait for reading |
|||
server->buf_len = 0; |
|||
server->buf_idx = 0; |
|||
ev_io_stop(EV_A_ &server_send_ctx->io); |
|||
if (remote != NULL) |
|||
{ |
|||
ev_io_start(EV_A_ &remote->recv_ctx->io); |
|||
} |
|||
else |
|||
{ |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
} |
|||
} |
|||
|
|||
} |
|||
|
|||
static void remote_timeout_cb(EV_P_ ev_timer *watcher, int revents) |
|||
{ |
|||
struct remote_ctx *remote_ctx = (struct remote_ctx *) (((void*)watcher) |
|||
- sizeof(ev_io)); |
|||
struct remote *remote = remote_ctx->remote; |
|||
struct server *server = remote->server; |
|||
|
|||
LOGD("remote timeout"); |
|||
|
|||
ev_timer_stop(EV_A_ watcher); |
|||
|
|||
if (server == NULL) |
|||
{ |
|||
close_and_free_remote(EV_A_ remote); |
|||
return; |
|||
} |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
} |
|||
|
|||
static void remote_recv_cb (EV_P_ ev_io *w, int revents) |
|||
{ |
|||
struct remote_ctx *remote_recv_ctx = (struct remote_ctx *)w; |
|||
struct remote *remote = remote_recv_ctx->remote; |
|||
struct server *server = remote->server; |
|||
if (server == NULL) |
|||
{ |
|||
close_and_free_remote(EV_A_ remote); |
|||
return; |
|||
} |
|||
|
|||
ssize_t r = recv(remote->fd, server->buf, BUF_SIZE, 0); |
|||
|
|||
if (r == 0) |
|||
{ |
|||
// connection closed |
|||
server->buf_len = 0; |
|||
server->buf_idx = 0; |
|||
close_and_free_remote(EV_A_ remote); |
|||
if (server != NULL) |
|||
{ |
|||
ev_io_start(EV_A_ &server->send_ctx->io); |
|||
} |
|||
return; |
|||
} |
|||
else if(r < 0) |
|||
{ |
|||
if (errno == EAGAIN || errno == EWOULDBLOCK) |
|||
{ |
|||
// no data |
|||
// continue to wait for recv |
|||
return; |
|||
} |
|||
else |
|||
{ |
|||
ERROR("remote recv"); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
} |
|||
|
|||
server->buf = ss_decrypt(BUF_SIZE, server->buf, &r, server->d_ctx); |
|||
|
|||
if (server->buf == NULL) |
|||
{ |
|||
LOGE("invalid password or cipher"); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
|
|||
int s = send(server->fd, server->buf, r, 0); |
|||
|
|||
if (s == -1) |
|||
{ |
|||
if (errno == EAGAIN || errno == EWOULDBLOCK) |
|||
{ |
|||
// no data, wait for send |
|||
server->buf_len = r; |
|||
server->buf_idx = 0; |
|||
ev_io_stop(EV_A_ &remote_recv_ctx->io); |
|||
ev_io_start(EV_A_ &server->send_ctx->io); |
|||
return; |
|||
} |
|||
else |
|||
{ |
|||
ERROR("send"); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
} |
|||
else if (s < r) |
|||
{ |
|||
server->buf_len = r - s; |
|||
server->buf_idx = s; |
|||
ev_io_stop(EV_A_ &remote_recv_ctx->io); |
|||
ev_io_start(EV_A_ &server->send_ctx->io); |
|||
return; |
|||
} |
|||
} |
|||
|
|||
static void remote_send_cb (EV_P_ ev_io *w, int revents) |
|||
{ |
|||
struct remote_ctx *remote_send_ctx = (struct remote_ctx *)w; |
|||
struct remote *remote = remote_send_ctx->remote; |
|||
struct server *server = remote->server; |
|||
|
|||
if (!remote_send_ctx->connected) |
|||
{ |
|||
|
|||
struct sockaddr_storage addr; |
|||
socklen_t len = sizeof addr; |
|||
int r = getpeername(remote->fd, (struct sockaddr*)&addr, &len); |
|||
if (r == 0) |
|||
{ |
|||
remote_send_ctx->connected = 1; |
|||
ev_io_stop(EV_A_ &remote_send_ctx->io); |
|||
ev_timer_stop(EV_A_ &remote_send_ctx->watcher); |
|||
|
|||
// send destaddr |
|||
char *addr_to_send = malloc(BUF_SIZE); |
|||
ssize_t addr_len = 0; |
|||
struct sockaddr *sa = &server->destaddr; |
|||
addr_to_send[addr_len++] = 1; |
|||
|
|||
if (sa->sa_family == AF_INET) |
|||
{ |
|||
// handle IPv4 |
|||
struct sockaddr_in *sin = (struct sockaddr_in *)sa; |
|||
size_t in_addr_len = sizeof(struct in_addr); |
|||
memcpy(addr_to_send + addr_len, &sin->sin_addr, in_addr_len); |
|||
addr_len += in_addr_len; |
|||
memcpy(addr_to_send + addr_len, &sin->sin_port, 2); |
|||
addr_len += 2; |
|||
} |
|||
else if (sa->sa_family == AF_INET6) |
|||
{ |
|||
// handle IPv6 |
|||
struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa; |
|||
size_t in6_addr_len = sizeof(struct in6_addr); |
|||
memcpy(addr_to_send + addr_len, &sin6->sin6_addr, in6_addr_len); |
|||
addr_len += in6_addr_len; |
|||
memcpy(addr_to_send + addr_len, &sin6->sin6_port, 2); |
|||
addr_len += 2; |
|||
} |
|||
else |
|||
{ |
|||
LOGE("unsupported addr type"); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
|
|||
addr_to_send = ss_encrypt(BUF_SIZE, addr_to_send, &addr_len, server->e_ctx); |
|||
if (addr_to_send == NULL) |
|||
{ |
|||
LOGE("invalid password or cipher"); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
|
|||
int s = send(remote->fd, addr_to_send, addr_len, 0); |
|||
free(addr_to_send); |
|||
|
|||
if (s < addr_len) |
|||
{ |
|||
LOGE("failed to send remote addr."); |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
} |
|||
|
|||
ev_io_start(EV_A_ &remote->recv_ctx->io); |
|||
ev_io_start(EV_A_ &server->recv_ctx->io); |
|||
|
|||
return; |
|||
} |
|||
else |
|||
{ |
|||
ERROR("getpeername"); |
|||
// not connected |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
} |
|||
else |
|||
{ |
|||
if (remote->buf_len == 0) |
|||
{ |
|||
// close and free |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
else |
|||
{ |
|||
// has data to send |
|||
ssize_t s = send(remote->fd, remote->buf + remote->buf_idx, |
|||
remote->buf_len, 0); |
|||
if (s < 0) |
|||
{ |
|||
if (errno != EAGAIN && errno != EWOULDBLOCK) |
|||
{ |
|||
ERROR("send"); |
|||
// close and free |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
} |
|||
return; |
|||
} |
|||
else if (s < remote->buf_len) |
|||
{ |
|||
// partly sent, move memory, wait for the next time to send |
|||
remote->buf_len -= s; |
|||
remote->buf_idx += s; |
|||
return; |
|||
} |
|||
else |
|||
{ |
|||
// all sent out, wait for reading |
|||
remote->buf_len = 0; |
|||
remote->buf_idx = 0; |
|||
ev_io_stop(EV_A_ &remote_send_ctx->io); |
|||
if (server != NULL) |
|||
{ |
|||
ev_io_start(EV_A_ &server->recv_ctx->io); |
|||
} |
|||
else |
|||
{ |
|||
close_and_free_remote(EV_A_ remote); |
|||
close_and_free_server(EV_A_ server); |
|||
return; |
|||
} |
|||
} |
|||
} |
|||
|
|||
} |
|||
} |
|||
|
|||
struct remote* new_remote(int fd, int timeout) |
|||
{ |
|||
struct remote *remote; |
|||
remote = malloc(sizeof(struct remote)); |
|||
remote->buf = malloc(BUF_SIZE); |
|||
remote->recv_ctx = malloc(sizeof(struct remote_ctx)); |
|||
remote->send_ctx = malloc(sizeof(struct remote_ctx)); |
|||
remote->fd = fd; |
|||
ev_io_init(&remote->recv_ctx->io, remote_recv_cb, fd, EV_READ); |
|||
ev_io_init(&remote->send_ctx->io, remote_send_cb, fd, EV_WRITE); |
|||
ev_timer_init(&remote->send_ctx->watcher, remote_timeout_cb, timeout, 0); |
|||
remote->recv_ctx->remote = remote; |
|||
remote->recv_ctx->connected = 0; |
|||
remote->send_ctx->remote = remote; |
|||
remote->send_ctx->connected = 0; |
|||
remote->buf_len = 0; |
|||
remote->buf_idx = 0; |
|||
return remote; |
|||
} |
|||
|
|||
static void free_remote(struct remote *remote) |
|||
{ |
|||
if (remote != NULL) |
|||
{ |
|||
if (remote->server != NULL) |
|||
{ |
|||
remote->server->remote = NULL; |
|||
} |
|||
if (remote->buf) |
|||
{ |
|||
free(remote->buf); |
|||
} |
|||
free(remote->recv_ctx); |
|||
free(remote->send_ctx); |
|||
free(remote); |
|||
} |
|||
} |
|||
|
|||
static void close_and_free_remote(EV_P_ struct remote *remote) |
|||
{ |
|||
if (remote != NULL) |
|||
{ |
|||
ev_timer_stop(EV_A_ &remote->send_ctx->watcher); |
|||
ev_io_stop(EV_A_ &remote->send_ctx->io); |
|||
ev_io_stop(EV_A_ &remote->recv_ctx->io); |
|||
close(remote->fd); |
|||
free_remote(remote); |
|||
} |
|||
} |
|||
|
|||
struct server* new_server(int fd, int method) |
|||
{ |
|||
struct server *server; |
|||
server = malloc(sizeof(struct server)); |
|||
server->buf = malloc(BUF_SIZE); |
|||
server->recv_ctx = malloc(sizeof(struct server_ctx)); |
|||
server->send_ctx = malloc(sizeof(struct server_ctx)); |
|||
server->fd = fd; |
|||
ev_io_init(&server->recv_ctx->io, server_recv_cb, fd, EV_READ); |
|||
ev_io_init(&server->send_ctx->io, server_send_cb, fd, EV_WRITE); |
|||
server->recv_ctx->server = server; |
|||
server->recv_ctx->connected = 0; |
|||
server->send_ctx->server = server; |
|||
server->send_ctx->connected = 0; |
|||
if (method) |
|||
{ |
|||
server->e_ctx = malloc(sizeof(struct enc_ctx)); |
|||
server->d_ctx = malloc(sizeof(struct enc_ctx)); |
|||
enc_ctx_init(method, server->e_ctx, 1); |
|||
enc_ctx_init(method, server->d_ctx, 0); |
|||
} |
|||
else |
|||
{ |
|||
server->e_ctx = NULL; |
|||
server->d_ctx = NULL; |
|||
} |
|||
server->buf_len = 0; |
|||
server->buf_idx = 0; |
|||
return server; |
|||
} |
|||
|
|||
static void free_server(struct server *server) |
|||
{ |
|||
if (server != NULL) |
|||
{ |
|||
if (server->remote != NULL) |
|||
{ |
|||
server->remote->server = NULL; |
|||
} |
|||
if (server->e_ctx != NULL) |
|||
{ |
|||
cipher_context_release(&server->e_ctx->evp); |
|||
free(server->e_ctx); |
|||
} |
|||
if (server->d_ctx != NULL) |
|||
{ |
|||
cipher_context_release(&server->d_ctx->evp); |
|||
free(server->d_ctx); |
|||
} |
|||
if (server->buf) |
|||
{ |
|||
free(server->buf); |
|||
} |
|||
free(server->recv_ctx); |
|||
free(server->send_ctx); |
|||
free(server); |
|||
} |
|||
} |
|||
|
|||
static void close_and_free_server(EV_P_ struct server *server) |
|||
{ |
|||
if (server != NULL) |
|||
{ |
|||
ev_io_stop(EV_A_ &server->send_ctx->io); |
|||
ev_io_stop(EV_A_ &server->recv_ctx->io); |
|||
close(server->fd); |
|||
free_server(server); |
|||
} |
|||
} |
|||
|
|||
static void accept_cb (EV_P_ ev_io *w, int revents) |
|||
{ |
|||
struct listen_ctx *listener = (struct listen_ctx *)w; |
|||
int serverfd = accept(listener->fd, NULL, NULL); |
|||
if (serverfd == -1) |
|||
{ |
|||
ERROR("accept"); |
|||
return; |
|||
} |
|||
setnonblocking(serverfd); |
|||
int opt = 1; |
|||
setsockopt(serverfd, IPPROTO_TCP, TCP_NODELAY, &opt, sizeof(opt)); |
|||
#ifdef SO_NOSIGPIPE |
|||
setsockopt(serverfd, SOL_SOCKET, SO_NOSIGPIPE, &opt, sizeof(opt)); |
|||
#endif |
|||
|
|||
struct addrinfo hints, *res, *dest; |
|||
int sockfd; |
|||
memset(&hints, 0, sizeof hints); |
|||
hints.ai_family = AF_UNSPEC; |
|||
hints.ai_socktype = SOCK_STREAM; |
|||
int index = rand() % listener->remote_num; |
|||
if (verbose) |
|||
{ |
|||
LOGD("connect to %s:%s", listener->remote_addr[index].host, listener->remote_addr[index].port); |
|||
} |
|||
int err = getaddrinfo(listener->remote_addr[index].host, listener->remote_addr[index].port, &hints, &res); |
|||
if (err) |
|||
{ |
|||
ERROR("getaddrinfo"); |
|||
return; |
|||
} |
|||
|
|||
err = getaddrinfo(listener->tunnel_addr.host, listener->tunnel_addr.port, &hints, &dest); |
|||
if (err) |
|||
{ |
|||
freeaddrinfo(res); |
|||
ERROR("getaddrinfo"); |
|||
return; |
|||
} |
|||
|
|||
sockfd = socket(res->ai_family, res->ai_socktype, res->ai_protocol); |
|||
if (sockfd < 0) |
|||
{ |
|||
ERROR("socket"); |
|||
freeaddrinfo(res); |
|||
freeaddrinfo(dest); |
|||
return; |
|||
} |
|||
|
|||
setsockopt(sockfd, IPPROTO_TCP, TCP_NODELAY, &opt, sizeof(opt)); |
|||
#ifdef SO_NOSIGPIPE |
|||
setsockopt(sockfd, SOL_SOCKET, SO_NOSIGPIPE, &opt, sizeof(opt)); |
|||
#endif |
|||
|
|||
// Setup |
|||
setnonblocking(sockfd); |
|||
#ifdef SET_INTERFACE |
|||
if (listener->iface) setinterface(sockfd, listener->iface); |
|||
#endif |
|||
|
|||
struct server *server = new_server(serverfd, listener->method); |
|||
struct remote *remote = new_remote(sockfd, listener->timeout); |
|||
server->destaddr = *dest->ai_addr; |
|||
server->remote = remote; |
|||
remote->server = server; |
|||
connect(sockfd, res->ai_addr, res->ai_addrlen); |
|||
freeaddrinfo(res); |
|||
freeaddrinfo(dest); |
|||
// listen to remote connected event |
|||
ev_io_start(EV_A_ &remote->send_ctx->io); |
|||
ev_timer_start(EV_A_ &remote->send_ctx->watcher); |
|||
} |
|||
|
|||
int main (int argc, char **argv) |
|||
{ |
|||
|
|||
int i, c; |
|||
int pid_flags = 0; |
|||
char *local_port = NULL; |
|||
char *local_addr = NULL; |
|||
char *password = NULL; |
|||
char *timeout = NULL; |
|||
char *method = NULL; |
|||
char *pid_path = NULL; |
|||
char *conf_path = NULL; |
|||
char *iface = NULL; |
|||
|
|||
int remote_num = 0; |
|||
addr_t remote_addr[MAX_REMOTE_NUM]; |
|||
char *remote_port = NULL; |
|||
|
|||
addr_t tunnel_addr = {.host = NULL, .port = NULL}; |
|||
char *tunnel_addr_str = NULL; |
|||
|
|||
opterr = 0; |
|||
|
|||
while ((c = getopt (argc, argv, "f:s:p:l:k:t:m:i:c:b:L:uv")) != -1) |
|||
{ |
|||
switch (c) |
|||
{ |
|||
case 's': |
|||
remote_addr[remote_num].host = optarg; |
|||
remote_addr[remote_num++].port = NULL; |
|||
break; |
|||
case 'p': |
|||
remote_port = optarg; |
|||
break; |
|||
case 'l': |
|||
local_port = optarg; |
|||
break; |
|||
case 'k': |
|||
password = optarg; |
|||
break; |
|||
case 'f': |
|||
pid_flags = 1; |
|||
pid_path = optarg; |
|||
break; |
|||
case 't': |
|||
timeout = optarg; |
|||
break; |
|||
case 'm': |
|||
method = optarg; |
|||
break; |
|||
case 'c': |
|||
conf_path = optarg; |
|||
break; |
|||
case 'i': |
|||
iface = optarg; |
|||
break; |
|||
case 'b': |
|||
local_addr = optarg; |
|||
break; |
|||
case 'u': |
|||
udprelay = 1; |
|||
break; |
|||
case 'L': |
|||
tunnel_addr_str = optarg; |
|||
break; |
|||
case 'v': |
|||
verbose = 1; |
|||
break; |
|||
} |
|||
} |
|||
|
|||
if (opterr) |
|||
{ |
|||
usage(); |
|||
exit(EXIT_FAILURE); |
|||
} |
|||
|
|||
if (conf_path != NULL) |
|||
{ |
|||
jconf_t *conf = read_jconf(conf_path); |
|||
if (remote_num == 0) |
|||
{ |
|||
remote_num = conf->remote_num; |
|||
for (i = 0; i < remote_num; i++) |
|||
{ |
|||
remote_addr[i] = conf->remote_addr[i]; |
|||
} |
|||
} |
|||
if (remote_port == NULL) remote_port = conf->remote_port; |
|||
if (local_addr == NULL) local_addr = conf->local_addr; |
|||
if (local_port == NULL) local_port = conf->local_port; |
|||
if (password == NULL) password = conf->password; |
|||
if (method == NULL) method = conf->method; |
|||
if (timeout == NULL) timeout = conf->timeout; |
|||
} |
|||
|
|||
if (remote_num == 0 || remote_port == NULL || tunnel_addr_str == NULL || |
|||
local_port == NULL || password == NULL) |
|||
{ |
|||
usage(); |
|||
exit(EXIT_FAILURE); |
|||
} |
|||
|
|||
if (timeout == NULL) timeout = "10"; |
|||
|
|||
if (local_addr == NULL) local_addr = "0.0.0.0"; |
|||
|
|||
if (pid_flags) |
|||
{ |
|||
USE_SYSLOG(argv[0]); |
|||
demonize(pid_path); |
|||
} |
|||
|
|||
// parse tunnel addr |
|||
parse_addr(tunnel_addr_str, &tunnel_addr); |
|||
|
|||
#ifdef __MINGW32__ |
|||
winsock_init(); |
|||
#else |
|||
// ignore SIGPIPE |
|||
signal(SIGPIPE, SIG_IGN); |
|||
signal(SIGABRT, SIG_IGN); |
|||
#endif |
|||
|
|||
// Setup keys |
|||
LOGD("initialize ciphers... %s", method); |
|||
int m = enc_init(password, method); |
|||
|
|||
// Setup socket |
|||
int listenfd; |
|||
listenfd = create_and_bind(local_addr, local_port); |
|||
if (listenfd < 0) |
|||
{ |
|||
FATAL("bind() error.."); |
|||
} |
|||
if (listen(listenfd, SOMAXCONN) == -1) |
|||
{ |
|||
FATAL("listen() error."); |
|||
} |
|||
setnonblocking(listenfd); |
|||
LOGD("server listening at port %s.", local_port); |
|||
|
|||
// Setup proxy context |
|||
struct listen_ctx listen_ctx; |
|||
listen_ctx.tunnel_addr = tunnel_addr; |
|||
listen_ctx.remote_num = remote_num; |
|||
listen_ctx.remote_addr = malloc(sizeof(addr_t) * remote_num); |
|||
while (remote_num > 0) |
|||
{ |
|||
int index = --remote_num; |
|||
if (remote_addr[index].port == NULL) remote_addr[index].port = remote_port; |
|||
listen_ctx.remote_addr[index] = remote_addr[index]; |
|||
} |
|||
listen_ctx.timeout = atoi(timeout); |
|||
listen_ctx.fd = listenfd; |
|||
listen_ctx.iface = iface; |
|||
listen_ctx.method = m; |
|||
|
|||
struct ev_loop *loop = ev_default_loop(0); |
|||
if (!loop) |
|||
{ |
|||
FATAL("ev_loop error."); |
|||
} |
|||
ev_io_init (&listen_ctx.io, accept_cb, listenfd, EV_READ); |
|||
ev_io_start (loop, &listen_ctx.io); |
|||
|
|||
// Setup UDP |
|||
if (udprelay) |
|||
{ |
|||
LOGD("udprelay enabled."); |
|||
udprelay_init(local_addr, local_port, remote_addr[0].host, remote_addr[0].port, |
|||
tunnel_addr, m, listen_ctx.timeout, iface); |
|||
} |
|||
|
|||
ev_run (loop, 0); |
|||
|
|||
#ifdef __MINGW32__ |
|||
winsock_cleanup(); |
|||
#endif |
|||
|
|||
return 0; |
|||
} |
|||
|
|||
@ -0,0 +1,76 @@ |
|||
#ifndef _LOCAL_H |
|||
#define _LOCAL_H |
|||
|
|||
#include <ev.h> |
|||
#include "encrypt.h" |
|||
#include "jconf.h" |
|||
|
|||
#include "include.h" |
|||
|
|||
struct listen_ctx |
|||
{ |
|||
ev_io io; |
|||
addr_t tunnel_addr; |
|||
addr_t *remote_addr; |
|||
char *iface; |
|||
int remote_num; |
|||
int method; |
|||
int timeout; |
|||
int fd; |
|||
struct sockaddr sock; |
|||
}; |
|||
|
|||
struct server_ctx |
|||
{ |
|||
ev_io io; |
|||
int connected; |
|||
struct server *server; |
|||
}; |
|||
|
|||
struct server |
|||
{ |
|||
int fd; |
|||
int buf_len; |
|||
int buf_idx; |
|||
char *buf; // server send from, remote recv into |
|||
struct enc_ctx *e_ctx; |
|||
struct enc_ctx *d_ctx; |
|||
struct server_ctx *recv_ctx; |
|||
struct server_ctx *send_ctx; |
|||
struct remote *remote; |
|||
struct sockaddr destaddr; |
|||
}; |
|||
|
|||
struct remote_ctx |
|||
{ |
|||
ev_io io; |
|||
ev_timer watcher; |
|||
int connected; |
|||
struct remote *remote; |
|||
}; |
|||
|
|||
struct remote |
|||
{ |
|||
int fd; |
|||
int buf_len; |
|||
int buf_idx; |
|||
char *buf; // remote send from, server recv into |
|||
struct remote_ctx *recv_ctx; |
|||
struct remote_ctx *send_ctx; |
|||
struct server *server; |
|||
}; |
|||
|
|||
static void accept_cb (EV_P_ ev_io *w, int revents); |
|||
static void server_recv_cb (EV_P_ ev_io *w, int revents); |
|||
static void server_send_cb (EV_P_ ev_io *w, int revents); |
|||
static void remote_recv_cb (EV_P_ ev_io *w, int revents); |
|||
static void remote_send_cb (EV_P_ ev_io *w, int revents); |
|||
static void free_remote(struct remote *remote); |
|||
static void close_and_free_remote(EV_P_ struct remote *remote); |
|||
static void free_server(struct server *server); |
|||
static void close_and_free_server(EV_P_ struct server *server); |
|||
|
|||
struct remote* new_remote(int fd, int timeout); |
|||
struct server* new_server(int fd, int method); |
|||
|
|||
#endif // _TUNNEL_H |
|||
Write
Preview
Loading…
Cancel
Save