chore: support IN-PORT rule

adapter/inbound/http.go

@@ -17,5 +17,9 @@ func NewHTTP(target socks5.Addr, source net.Addr, conn net.Conn) *context.ConnCo
 		metadata.SrcIP = ip
 		metadata.SrcPort = port
 	}
+	if ip, port, err := parseAddr(conn.LocalAddr().String()); err == nil {
+		metadata.InIP = ip
+		metadata.InPort = port
+	}
 	return context.NewConnContext(conn, metadata)
 }

adapter/inbound/https.go

@@ -16,5 +16,9 @@ func NewHTTPS(request *http.Request, conn net.Conn) *context.ConnContext {
 		metadata.SrcIP = ip
 		metadata.SrcPort = port
 	}
+	if ip, port, err := parseAddr(conn.LocalAddr().String()); err == nil {
+		metadata.InIP = ip
+		metadata.InPort = port
+	}
 	return context.NewConnContext(conn, metadata)
 }

adapter/inbound/packet.go

@@ -25,6 +25,12 @@ func NewPacket(target socks5.Addr, packet C.UDPPacket, source C.Type) *PacketAda
 		metadata.SrcIP = ip
 		metadata.SrcPort = port
 	}
+	if p, ok := packet.(C.UDPPacketInAddr); ok {
+		if ip, port, err := parseAddr(p.InAddr().String()); err == nil {
+			metadata.InIP = ip
+			metadata.InPort = port
+		}
+	}
 
 	return &PacketAdapter{
 		UDPPacket: packet,

adapter/inbound/socket.go

@@ -22,6 +22,14 @@ func NewSocket(target socks5.Addr, conn net.Conn, source C.Type) *context.ConnCo
 			metadata.SrcPort = port
 		}
 	}
+	localAddr := conn.LocalAddr()
+	// Filter when net.Addr interface is nil
+	if localAddr != nil {
+		if ip, port, err := parseAddr(localAddr.String()); err == nil {
+			metadata.InIP = ip
+			metadata.InPort = port
+		}
+	}
 
 	return context.NewConnContext(conn, metadata)
 }

constant/adapters.go

@@ -202,3 +202,7 @@ type UDPPacket interface {
 	// LocalAddr returns the source IP/Port of packet
 	LocalAddr() net.Addr
 }
+
+type UDPPacketInAddr interface {
+	InAddr() net.Addr
+}

constant/metadata.go

@@ -115,6 +115,8 @@ type Metadata struct {
 	DstIP       netip.Addr `json:"destinationIP"`
 	SrcPort     string     `json:"sourcePort"`
 	DstPort     string     `json:"destinationPort"`
+	InIP        netip.Addr `json:"inboundIP"`
+	InPort      string     `json:"inboundPort"`
 	Host        string     `json:"host"`
 	DNSMode     DNSMode    `json:"dnsMode"`
 	Uid         *int32     `json:"uid"`

constant/rule.go

@@ -13,6 +13,7 @@ const (
 	SrcIPSuffix
 	SrcPort
 	DstPort
+	InPort
 	Process
 	ProcessPath
 	RuleSet
@@ -52,6 +53,8 @@ func (rt RuleType) String() string {
 		return "SrcPort"
 	case DstPort:
 		return "DstPort"
+	case InPort:
+		return "InPort"
 	case Process:
 		return "Process"
 	case ProcessPath:

listener/socks/utils.go

@@ -35,3 +35,7 @@ func (c *packet) LocalAddr() net.Addr {
 func (c *packet) Drop() {
 	pool.Put(c.bufRef)
 }
+
+func (c *packet) InAddr() net.Addr {
+	return c.pc.LocalAddr()
+}

listener/tproxy/packet.go

@@ -7,6 +7,7 @@ import (
 )
 
 type packet struct {
+	pc    net.PacketConn
 	lAddr *net.UDPAddr
 	buf   []byte
 }
@@ -35,3 +36,7 @@ func (c *packet) LocalAddr() net.Addr {
 func (c *packet) Drop() {
 	pool.Put(c.buf)
 }
+
+func (c *packet) InAddr() net.Addr {
+	return c.pc.LocalAddr()
+}

listener/tproxy/udp.go

@@ -81,6 +81,7 @@ func NewUDP(addr string, in chan<- *inbound.PacketAdapter) (*UDPListener, error)
 func handlePacketConn(pc net.PacketConn, in chan<- *inbound.PacketAdapter, buf []byte, lAddr *net.UDPAddr, rAddr *net.UDPAddr) {
 	target := socks5.ParseAddrToSocksAddr(rAddr)
 	pkt := &packet{
+		pc:    pc,
 		lAddr: lAddr,
 		buf:   buf,
 	}

rules/common/port.go

@@ -13,22 +13,23 @@ type Port struct {
 	*Base
 	adapter  string
 	port     string
-	isSource bool
+	ruleType C.RuleType
 	portList []utils.Range[uint16]
 }
 
 func (p *Port) RuleType() C.RuleType {
-	if p.isSource {
+	return p.ruleType
-		return C.SrcPort
-	}
-	return C.DstPort
 }
 
 func (p *Port) Match(metadata *C.Metadata) (bool, string) {
-	if p.isSource {
+	targetPort := metadata.DstPort
-		return p.matchPortReal(metadata.SrcPort), p.adapter
+	switch p.ruleType {
+	case C.InPort:
+		targetPort = metadata.InPort
+	case C.SrcPort:
+		targetPort = metadata.SrcPort
 	}
-	return p.matchPortReal(metadata.DstPort), p.adapter
+	return p.matchPortReal(targetPort), p.adapter
 }
 
 func (p *Port) Adapter() string {
@@ -51,7 +52,7 @@ func (p *Port) matchPortReal(portRef string) bool {
 	return false
 }
 
-func NewPort(port string, adapter string, isSource bool) (*Port, error) {
+func NewPort(port string, adapter string, ruleType C.RuleType) (*Port, error) {
 	ports := strings.Split(port, "/")
 	if len(ports) > 28 {
 		return nil, fmt.Errorf("%s, too many ports to use, maximum support 28 ports", errPayload.Error())
@@ -95,7 +96,7 @@ func NewPort(port string, adapter string, isSource bool) (*Port, error) {
 		Base:     &Base{},
 		adapter:  adapter,
 		port:     port,
-		isSource: isSource,
+		ruleType: ruleType,
 		portList: portRange,
 	}, nil
 }

rules/logic/logic_test.go

@@ -33,9 +33,11 @@ func ParseRule(tp, payload, target string, params []string, subRules *map[string
 	case "SRC-IP-SUFFIX":
 		parsed, parseErr = RC.NewIPSuffix(payload, target, true, true)
 	case "SRC-PORT":
-		parsed, parseErr = RC.NewPort(payload, target, true)
+		parsed, parseErr = RC.NewPort(payload, target, C.SrcPort)
 	case "DST-PORT":
-		parsed, parseErr = RC.NewPort(payload, target, false)
+		parsed, parseErr = RC.NewPort(payload, target, C.DstPort)
+	case "IN-PORT":
+		parsed, parseErr = RC.NewPort(payload, target, C.InPort)
 	case "PROCESS-NAME":
 		parsed, parseErr = RC.NewProcess(payload, target, true)
 	case "PROCESS-PATH":

rules/parser.go

@@ -32,9 +32,11 @@ func ParseRule(tp, payload, target string, params []string, subRules *map[string
 	case "SRC-IP-SUFFIX":
 		parsed, parseErr = RC.NewIPSuffix(payload, target, true, true)
 	case "SRC-PORT":
-		parsed, parseErr = RC.NewPort(payload, target, true)
+		parsed, parseErr = RC.NewPort(payload, target, C.SrcPort)
 	case "DST-PORT":
-		parsed, parseErr = RC.NewPort(payload, target, false)
+		parsed, parseErr = RC.NewPort(payload, target, C.DstPort)
+	case "IN-PORT":
+		parsed, parseErr = RC.NewPort(payload, target, C.InPort)
 	case "PROCESS-NAME":
 		parsed, parseErr = RC.NewProcess(payload, target, true)
 	case "PROCESS-PATH":