chore: Update dependencies

constant/tun.go

@@ -10,12 +10,14 @@ var StackTypeMapping = map[string]TUNStack{
 	strings.ToLower(TunGvisor.String()): TunGvisor,
 	strings.ToLower(TunSystem.String()): TunSystem,
 	strings.ToLower(TunLWIP.String()):   TunLWIP,
+	strings.ToLower(TunMixed.String()):  TunMixed,
 }
 
 const (
 	TunGvisor TUNStack = iota
 	TunSystem
 	TunLWIP
+	TunMixed
 )
 
 type TUNStack int
@@ -64,6 +66,8 @@ func (e TUNStack) String() string {
 		return "System"
 	case TunLWIP:
 		return "LWIP"
+	case TunMixed:
+		return "Mixed"
 	default:
 		return "unknown"
 	}

go.mod

@@ -8,45 +8,43 @@ require (
 	github.com/cilium/ebpf v0.11.0
 	github.com/coreos/go-iptables v0.6.0
 	github.com/dlclark/regexp2 v1.10.0
-	github.com/go-chi/chi/v5 v5.0.8
+	github.com/go-chi/chi/v5 v5.0.10
 	github.com/go-chi/cors v1.2.1
-	github.com/go-chi/render v1.0.2
+	github.com/go-chi/render v1.0.3
 	github.com/gofrs/uuid/v5 v5.0.0
 	github.com/gorilla/websocket v1.5.0
-	github.com/hashicorp/golang-lru v0.5.4
+	github.com/insomniacslk/dhcp v0.0.0-20230731140434-0f9eb93a696c
-	github.com/insomniacslk/dhcp v0.0.0-20230612134759-b20c9ba983df
 	github.com/jpillora/backoff v1.0.0
 	github.com/klauspost/cpuid/v2 v2.2.5
 	github.com/lunixbochs/struc v0.0.0-20200707160740-784aaebc1d40
 	github.com/mdlayher/netlink v1.7.2
 	github.com/metacubex/gopacket v1.1.20-0.20230608035415-7e2f98a3e759
 	github.com/metacubex/quic-go v0.37.2-0.20230801015013-c321217d291b
-	github.com/metacubex/sing-shadowsocks v0.2.3-0.20230714014829-3669e0591014
+	github.com/metacubex/sing-shadowsocks v0.2.4
-	github.com/metacubex/sing-shadowsocks2 v0.1.1-0.20230714014119-27b8d12c6d0b
+	github.com/metacubex/sing-shadowsocks2 v0.1.3
-	github.com/metacubex/sing-tun v0.1.9-0.20230714030349-b6aed664150f
+	github.com/metacubex/sing-tun v0.1.11
-	github.com/metacubex/sing-vmess v0.1.5-0.20230713151521-79843393b710
+	github.com/metacubex/sing-vmess v0.1.8-0.20230801054944-603005461ff8
 	github.com/metacubex/sing-wireguard v0.0.0-20230611155257-1498ae315a28
 	github.com/miekg/dns v1.1.55
 	github.com/mroth/weightedrand/v2 v2.0.1
 	github.com/openacid/low v0.1.21
-	github.com/oschwald/geoip2-golang v1.9.0
+	github.com/oschwald/maxminddb-golang v1.12.0
-	github.com/oschwald/maxminddb-golang v1.11.0
 	github.com/sagernet/netlink v0.0.0-20220905062125-8043b4a9aa97
-	github.com/sagernet/sing v0.2.8-0.20230703002104-c68251b6d059
+	github.com/sagernet/sing v0.2.9
-	github.com/sagernet/sing-mux v0.1.1-0.20230703132253-2cedde0fbc90
+	github.com/sagernet/sing-mux v0.1.2
-	github.com/sagernet/sing-shadowtls v0.1.3-0.20230703132509-93bbad3057e4
+	github.com/sagernet/sing-shadowtls v0.1.4
 	github.com/sagernet/tfo-go v0.0.0-20230303015439-ffcfd8c41cf9
 	github.com/sagernet/utls v0.0.0-20230309024959-6732c2ab36f2
 	github.com/sagernet/wireguard-go v0.0.0-20230420044414-a7bac1754e77
 	github.com/samber/lo v1.38.1
-	github.com/shirou/gopsutil/v3 v3.23.6
+	github.com/shirou/gopsutil/v3 v3.23.7
 	github.com/sirupsen/logrus v1.9.3
 	github.com/stretchr/testify v1.8.4
 	github.com/zhangyunhao116/fastrand v0.3.0
 	go.etcd.io/bbolt v1.3.7
-	go.uber.org/automaxprocs v1.5.2
+	go.uber.org/automaxprocs v1.5.3
 	golang.org/x/crypto v0.11.0
-	golang.org/x/exp v0.0.0-20230711153332-06a737ee72cb
+	golang.org/x/exp v0.0.0-20230728194245-b0cb94b80691
 	golang.org/x/net v0.12.0
 	golang.org/x/sync v0.3.0
 	golang.org/x/sys v0.10.0

go.sum

@@ -35,12 +35,12 @@ github.com/ericlagergren/subtle v0.0.0-20220507045147-890d697da010/go.mod h1:JtB
 github.com/frankban/quicktest v1.14.5 h1:dfYrrRyLtiqT9GyKXgdh+k4inNeTvmGbuSgZ3lx3GhA=
 github.com/fsnotify/fsnotify v1.6.0 h1:n+5WquG0fcWoWp6xPWfHdbskMCQaFnG6PfBrh1Ky4HY=
 github.com/fsnotify/fsnotify v1.6.0/go.mod h1:sl3t1tCWJFWoRz9R8WJCbQihKKwmorjAbSClcnxKAGw=
-github.com/go-chi/chi/v5 v5.0.8 h1:lD+NLqFcAi1ovnVZpsnObHGW4xb4J8lNmoYVfECH1Y0=
+github.com/go-chi/chi/v5 v5.0.10 h1:rLz5avzKpjqxrYwXNfmjkrYYXOyLJd37pz53UFHC6vk=
-github.com/go-chi/chi/v5 v5.0.8/go.mod h1:DslCQbL2OYiznFReuXYUmQ2hGd1aDpCnlMNITLSKoi8=
+github.com/go-chi/chi/v5 v5.0.10/go.mod h1:DslCQbL2OYiznFReuXYUmQ2hGd1aDpCnlMNITLSKoi8=
 github.com/go-chi/cors v1.2.1 h1:xEC8UT3Rlp2QuWNEr4Fs/c2EAGVKBwy/1vHx3bppil4=
 github.com/go-chi/cors v1.2.1/go.mod h1:sSbTewc+6wYHBBCW7ytsFSn836hqM7JxpglAy2Vzc58=
-github.com/go-chi/render v1.0.2 h1:4ER/udB0+fMWB2Jlf15RV3F4A2FDuYi/9f+lFttR/Lg=
+github.com/go-chi/render v1.0.3 h1:AsXqd2a1/INaIfUSKq3G5uA8weYx20FOsM7uSoCyyt4=
-github.com/go-chi/render v1.0.2/go.mod h1:/gr3hVkmYR0YlEy3LxCuVRFzEu9Ruok+gFqbIofjao0=
+github.com/go-chi/render v1.0.3/go.mod h1:/gr3hVkmYR0YlEy3LxCuVRFzEu9Ruok+gFqbIofjao0=
 github.com/go-logr/logr v1.2.4 h1:g01GSCwiDw2xSZfjJ2/T9M+S6pFdcNtFYsp+Y43HYDQ=
 github.com/go-ole/go-ole v1.2.6 h1:/Fpf6oFPoeFik9ty7siob0G6Ke8QvQEuVcuChpwXzpY=
 github.com/go-ole/go-ole v1.2.6/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0=
@@ -64,13 +64,11 @@ github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38/go.mod h1:kpwsk12EmLe
 github.com/google/tink/go v1.6.1 h1:t7JHqO8Ath2w2ig5vjwQYJzhGEZymedQc90lQXUBa4I=
 github.com/gorilla/websocket v1.5.0 h1:PPwGk2jz7EePpoHN/+ClbZu8SPxiqlu12wZP/3sWmnc=
 github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
-github.com/hashicorp/golang-lru v0.5.4 h1:YDjusn29QI/Das2iO9M0BHnIbxPeyuCHsjMW+lJfyTc=
-github.com/hashicorp/golang-lru v0.5.4/go.mod h1:iADmTwqILo4mZ8BN3D2Q6+9jd8WM5uGBxy+E8yxSoD4=
 github.com/hashicorp/yamux v0.1.1 h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=
 github.com/hashicorp/yamux v0.1.1/go.mod h1:CtWFDAQgb7dxtzFs4tWbplKIe2jSi3+5vKbgIO0SLnQ=
 github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
-github.com/insomniacslk/dhcp v0.0.0-20230612134759-b20c9ba983df h1:pF1MMIzEJzJ/MyI4bXYXVYyN8CJgoQ2PPKT2z3O/Cl4=
+github.com/insomniacslk/dhcp v0.0.0-20230731140434-0f9eb93a696c h1:P/3mFnHCv1A/ej4m8pF5EB6FUt9qEL2Q9lfrcUNwCYs=
-github.com/insomniacslk/dhcp v0.0.0-20230612134759-b20c9ba983df/go.mod h1:7474bZ1YNCvarT6WFKie4kEET6J0KYRDC4XJqqXzQW4=
+github.com/insomniacslk/dhcp v0.0.0-20230731140434-0f9eb93a696c/go.mod h1:7474bZ1YNCvarT6WFKie4kEET6J0KYRDC4XJqqXzQW4=
 github.com/josharian/native v1.0.1-0.20221213033349-c1e37c09b531/go.mod h1:7X/raswPFr05uY3HiLlYeyQntB6OO7E/d2Cu7qoaN2w=
 github.com/josharian/native v1.1.0 h1:uuaP0hAbW7Y4l0ZRQ6C9zfb7Mg1mbFKry/xzDAfmtLA=
 github.com/josharian/native v1.1.0/go.mod h1:7X/raswPFr05uY3HiLlYeyQntB6OO7E/d2Cu7qoaN2w=
@@ -98,14 +96,14 @@ github.com/metacubex/quic-go v0.37.2-0.20230801015013-c321217d291b h1:oVYQtX4v8y
 github.com/metacubex/quic-go v0.37.2-0.20230801015013-c321217d291b/go.mod h1:runF6UZHW4A/P/VU+PtfQKKD85YgaZgrgbvCTs5Nwbk=
 github.com/metacubex/sing v0.0.0-20230714010500-e24664dc75a7 h1:XY3Y6nPL45XuN/k3rDXJ1TJknLo8rTo1SVuDOmOEf4E=
 github.com/metacubex/sing v0.0.0-20230714010500-e24664dc75a7/go.mod h1:Ta8nHnDLAwqySzKhGoKk4ZIB+vJ3GTKj7UPrWYvM+4w=
-github.com/metacubex/sing-shadowsocks v0.2.3-0.20230714014829-3669e0591014 h1:KRMv2Q0Fa69chRsNr0RVTqh99POzYQi/OJ9p6FRcXfQ=
+github.com/metacubex/sing-shadowsocks v0.2.4 h1:Gc99Z17JVif1PKKq1pjqhSmc2kvHUgk+AqxOstCzhQ0=
-github.com/metacubex/sing-shadowsocks v0.2.3-0.20230714014829-3669e0591014/go.mod h1:UeQCECVevysZhVYeSs1w8dN2MLJrt9RVAC4qhdLorm0=
+github.com/metacubex/sing-shadowsocks v0.2.4/go.mod h1:w9qoEZSh9aKeXSLXHe0DGbG2UE9/2VlLGwukzQZ7byI=
-github.com/metacubex/sing-shadowsocks2 v0.1.1-0.20230714014119-27b8d12c6d0b h1:cTDNDaqSoSOfhepLfc05Tl6gMMnLDxUApc/RcCzfHwE=
+github.com/metacubex/sing-shadowsocks2 v0.1.3 h1:nZvH+4jQXZ92NeNdR9fXaUGTPNJPt6u0nkcuh/NEt5Y=
-github.com/metacubex/sing-shadowsocks2 v0.1.1-0.20230714014119-27b8d12c6d0b/go.mod h1:YC5UDPqtDifY0jed5iYYcp3RsSDtzv5fJ9wQYtRrCaU=
+github.com/metacubex/sing-shadowsocks2 v0.1.3/go.mod h1:5Mt93RlmRlIcDmvtapkhQJ8YTRGLFhHciLYopJjs7j8=
-github.com/metacubex/sing-tun v0.1.9-0.20230714030349-b6aed664150f h1:IA7kBQN/ShhszhCMBDke1Y0fWnxnRBdHJR+gOTeOjZM=
+github.com/metacubex/sing-tun v0.1.11 h1:B8meDewklvKkeUfjqR2ViuYLam0/m4IgkTi3qcJIOuc=
-github.com/metacubex/sing-tun v0.1.9-0.20230714030349-b6aed664150f/go.mod h1:yhMxm3aiwfc8HRv429QqO+8gWXMeCDQw/bh5CGKbCYM=
+github.com/metacubex/sing-tun v0.1.11/go.mod h1:vbki176Y5sxXC1DWXucrPh3q5j8cKai1D87y8m8rjQc=
-github.com/metacubex/sing-vmess v0.1.5-0.20230713151521-79843393b710 h1:8zXxMXgG5HaLG43RT1j1fsmDZTwhElaFk+Dj7wmdb9k=
+github.com/metacubex/sing-vmess v0.1.8-0.20230801054944-603005461ff8 h1:AqqZCr9gOeKdO6oIzFh4b2puOUFcw8MdpmGHWRehyX8=
-github.com/metacubex/sing-vmess v0.1.5-0.20230713151521-79843393b710/go.mod h1:i20X8MiR+bordyMPhp16Swl7Rycr9qf+gkYQiUTMzsY=
+github.com/metacubex/sing-vmess v0.1.8-0.20230801054944-603005461ff8/go.mod h1:tyJg7b4s8NrSztl/Y1ajA7X0sJLlIsEJWkgRVocjmgY=
 github.com/metacubex/sing-wireguard v0.0.0-20230611155257-1498ae315a28 h1:mXFpxfR/1nADh+GoT8maWEvc6LO6uatPsARD8WzUDMA=
 github.com/metacubex/sing-wireguard v0.0.0-20230611155257-1498ae315a28/go.mod h1:KrDPq/dE793jGIJw9kcIvjA/proAfU0IeU7WlMXW7rs=
 github.com/miekg/dns v1.1.55 h1:GoQ4hpsj0nFLYe+bWiCToyrBEJXkQfOOIvFGFy0lEgo=
@@ -122,10 +120,8 @@ github.com/openacid/low v0.1.21 h1:Tr2GNu4N/+rGRYdOsEHOE89cxUIaDViZbVmKz29uKGo=
 github.com/openacid/low v0.1.21/go.mod h1:q+MsKI6Pz2xsCkzV4BLj7NR5M4EX0sGz5AqotpZDVh0=
 github.com/openacid/must v0.1.3/go.mod h1:luPiXCuJlEo3UUFQngVQokV0MPGryeYvtCbQPs3U1+I=
 github.com/openacid/testkeys v0.1.6/go.mod h1:MfA7cACzBpbiwekivj8StqX0WIRmqlMsci1c37CA3Do=
-github.com/oschwald/geoip2-golang v1.9.0 h1:uvD3O6fXAXs+usU+UGExshpdP13GAqp4GBrzN7IgKZc=
+github.com/oschwald/maxminddb-golang v1.12.0 h1:9FnTOD0YOhP7DGxGsq4glzpGy5+w7pq50AS6wALUMYs=
-github.com/oschwald/geoip2-golang v1.9.0/go.mod h1:BHK6TvDyATVQhKNbQBdrj9eAvuwOMi2zSFXizL3K81Y=
+github.com/oschwald/maxminddb-golang v1.12.0/go.mod h1:q0Nob5lTCqyQ8WT6FYgS1L7PXKVVbgiymefNwIjPzgY=
-github.com/oschwald/maxminddb-golang v1.11.0 h1:aSXMqYR/EPNjGE8epgqwDay+P30hCBZIveY0WZbAWh0=
-github.com/oschwald/maxminddb-golang v1.11.0/go.mod h1:YmVI+H0zh3ySFR3w+oz8PCfglAFj3PuCmui13+P9zDg=
 github.com/pierrec/lz4/v4 v4.1.14 h1:+fL8AQEZtz/ijeNnpduH0bROTu0O3NZAlPjQxGn8LwE=
 github.com/pierrec/lz4/v4 v4.1.14/go.mod h1:gZWDp/Ze/IJXGXf23ltt2EXimqmTUXEy0GFuRQyBid4=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
@@ -143,10 +139,10 @@ github.com/sagernet/go-tun2socks v1.16.12-0.20220818015926-16cb67876a61 h1:5+m7c
 github.com/sagernet/go-tun2socks v1.16.12-0.20220818015926-16cb67876a61/go.mod h1:QUQ4RRHD6hGGHdFMEtR8T2P6GS6R3D/CXKdaYHKKXms=
 github.com/sagernet/netlink v0.0.0-20220905062125-8043b4a9aa97 h1:iL5gZI3uFp0X6EslacyapiRz7LLSJyr4RajF/BhMVyE=
 github.com/sagernet/netlink v0.0.0-20220905062125-8043b4a9aa97/go.mod h1:xLnfdiJbSp8rNqYEdIW/6eDO4mVoogml14Bh2hSiFpM=
-github.com/sagernet/sing-mux v0.1.1-0.20230703132253-2cedde0fbc90 h1:aEe2HrRc9OTS7IZ8RHyh224OhltnwRQs4/y89UsHPo8=
+github.com/sagernet/sing-mux v0.1.2 h1:av2/m6e+Gh+ECTuJZqYCjJz55BNkot0VyRMkREqyF/g=
-github.com/sagernet/sing-mux v0.1.1-0.20230703132253-2cedde0fbc90/go.mod h1:sm126rB5EUi9HLf4jCSHTqo+XRPbh4BoEVeLbr2WRbE=
+github.com/sagernet/sing-mux v0.1.2/go.mod h1:r2V8AlOzXaRCHXK7fILCUGzuI2iILweTaG8C5xlpHxo=
-github.com/sagernet/sing-shadowtls v0.1.3-0.20230703132509-93bbad3057e4 h1:ZjLyCkEENqXzGp4PRZbQGk5wPzEq0Rg+/2jK82lmy3Q=
+github.com/sagernet/sing-shadowtls v0.1.4 h1:aTgBSJEgnumzFenPvc+kbD9/W0PywzWevnVpEx6Tw3k=
-github.com/sagernet/sing-shadowtls v0.1.3-0.20230703132509-93bbad3057e4/go.mod h1:8ZSSHJSNOG7cUCUYJemZNH873EsKdFqABykTypoS/2M=
+github.com/sagernet/sing-shadowtls v0.1.4/go.mod h1:F8NBgsY5YN2beQavdgdm1DPlhaKQlaL6lpDdcBglGK4=
 github.com/sagernet/smux v0.0.0-20230312102458-337ec2a5af37 h1:HuE6xSwco/Xed8ajZ+coeYLmioq0Qp1/Z2zczFaV8as=
 github.com/sagernet/smux v0.0.0-20230312102458-337ec2a5af37/go.mod h1:3skNSftZDJWTGVtVaM2jfbce8qHnmH/AGDRe62iNOg0=
 github.com/sagernet/tfo-go v0.0.0-20230303015439-ffcfd8c41cf9 h1:2ItpW1nMNkPzmBTxV0/eClCklHrFSQMnUGcpUmJxVeE=
@@ -159,8 +155,8 @@ github.com/samber/lo v1.38.1 h1:j2XEAqXKb09Am4ebOg31SpvzUTTs6EN3VfgeLUhPdXM=
 github.com/samber/lo v1.38.1/go.mod h1:+m/ZKRl6ClXCE2Lgf3MsQlWfh4bn1bz6CXEOxnEXnEA=
 github.com/scjalliance/comshim v0.0.0-20230315213746-5e51f40bd3b9 h1:rc/CcqLH3lh8n+csdOuDfP+NuykE0U6AeYSJJHKDgSg=
 github.com/scjalliance/comshim v0.0.0-20230315213746-5e51f40bd3b9/go.mod h1:a/83NAfUXvEuLpmxDssAXxgUgrEy12MId3Wd7OTs76s=
-github.com/shirou/gopsutil/v3 v3.23.6 h1:5y46WPI9QBKBbK7EEccUPNXpJpNrvPuTD0O2zHEHT08=
+github.com/shirou/gopsutil/v3 v3.23.7 h1:C+fHO8hfIppoJ1WdsVm1RoI0RwXoNdfTK7yWXV0wVj4=
-github.com/shirou/gopsutil/v3 v3.23.6/go.mod h1:j7QX50DrXYggrpN30W0Mo+I4/8U2UUIQrnrhqUeWrAU=
+github.com/shirou/gopsutil/v3 v3.23.7/go.mod h1:c4gnmoRC0hQuaLqvxnx1//VXQ0Ms/X9UnJF8pddY5z4=
 github.com/shoenig/go-m1cpu v0.1.6 h1:nxdKQNcEB6vzgA2E2bvzKIYRuNj7XNJ4S/aRSwKzFtM=
 github.com/shoenig/go-m1cpu v0.1.6/go.mod h1:1JJMcUBvfNwpq05QDQVAnx3gUHr9IYF7GNg9SUEw2VQ=
 github.com/shoenig/test v0.6.4 h1:kVTaSd7WLz5WZ2IaoM0RSzRsUD+m8wRR+5qvntpn4LU=
@@ -203,14 +199,14 @@ gitlab.com/yawning/bsaes.git v0.0.0-20190805113838-0a714cd429ec h1:FpfFs4EhNehiV
 gitlab.com/yawning/bsaes.git v0.0.0-20190805113838-0a714cd429ec/go.mod h1:BZ1RAoRPbCxum9Grlv5aeksu2H8BiKehBYooU2LFiOQ=
 go.etcd.io/bbolt v1.3.7 h1:j+zJOnnEjF/kyHlDDgGnVL/AIqIJPq8UoB2GSNfkUfQ=
 go.etcd.io/bbolt v1.3.7/go.mod h1:N9Mkw9X8x5fupy0IKsmuqVtoGDyxsaDlbk4Rd05IAQw=
-go.uber.org/automaxprocs v1.5.2 h1:2LxUOGiR3O6tw8ui5sZa2LAaHnsviZdVOUZw4fvbnME=
+go.uber.org/automaxprocs v1.5.3 h1:kWazyxZUrS3Gs4qUpbwo5kEIMGe/DAvi5Z4tl2NW4j8=
-go.uber.org/automaxprocs v1.5.2/go.mod h1:eRbA25aqJrxAbsLO0xy5jVwPt7FQnRgjW+efnwa1WM0=
+go.uber.org/automaxprocs v1.5.3/go.mod h1:eRbA25aqJrxAbsLO0xy5jVwPt7FQnRgjW+efnwa1WM0=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.11.0 h1:6Ewdq3tDic1mg5xRO4milcWCfMVQhI4NkqWWvqejpuA=
 golang.org/x/crypto v0.11.0/go.mod h1:xgJhtzW8F9jGdVFWZESrid1U1bjeNy4zgy5cRr/CIio=
-golang.org/x/exp v0.0.0-20230711153332-06a737ee72cb h1:xIApU0ow1zwMa2uL1VDNeQlNVFTWMQxZUZCMDy0Q4Us=
+golang.org/x/exp v0.0.0-20230728194245-b0cb94b80691 h1:/yRP+0AN7mf5DkD3BAI6TOFnd51gEoDEb8o35jIFtgw=
-golang.org/x/exp v0.0.0-20230711153332-06a737ee72cb/go.mod h1:FXUEEKJgO7OQYeo8N01OfiKP8RXMtf6e8aTskBGqWdc=
+golang.org/x/exp v0.0.0-20230728194245-b0cb94b80691/go.mod h1:FXUEEKJgO7OQYeo8N01OfiKP8RXMtf6e8aTskBGqWdc=
 golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
 golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
 golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
@@ -242,7 +238,6 @@ golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.7.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.9.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.10.0 h1:SqMFp9UcQJZa+pmYuAKjd9xq1f0j5rLcDIk0mj4qAsA=
 golang.org/x/sys v0.10.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=

transport/hysteria/acl/engine.go

@@ -1,100 +0,0 @@
-package acl
-
-import (
-	"github.com/Dreamacro/clash/transport/hysteria/utils"
-	lru "github.com/hashicorp/golang-lru"
-	"github.com/oschwald/geoip2-golang"
-	"net"
-)
-
-const entryCacheSize = 1024
-
-type Engine struct {
-	DefaultAction Action
-	Entries       []Entry
-	Cache         *lru.ARCCache
-	ResolveIPAddr func(string) (*net.IPAddr, error)
-	GeoIPReader   *geoip2.Reader
-}
-
-type cacheKey struct {
-	Host  string
-	Port  uint16
-	IsUDP bool
-}
-
-type cacheValue struct {
-	Action Action
-	Arg    string
-}
-
-// action, arg, isDomain, resolvedIP, error
-func (e *Engine) ResolveAndMatch(host string, port uint16, isUDP bool) (Action, string, bool, *net.IPAddr, error) {
-	ip, zone := utils.ParseIPZone(host)
-	if ip == nil {
-		// Domain
-		ipAddr, err := e.ResolveIPAddr(host)
-		if v, ok := e.Cache.Get(cacheKey{host, port, isUDP}); ok {
-			// Cache hit
-			ce := v.(cacheValue)
-			return ce.Action, ce.Arg, true, ipAddr, err
-		}
-		for _, entry := range e.Entries {
-			mReq := MatchRequest{
-				Domain: host,
-				Port:   port,
-				DB:     e.GeoIPReader,
-			}
-			if ipAddr != nil {
-				mReq.IP = ipAddr.IP
-			}
-			if isUDP {
-				mReq.Protocol = ProtocolUDP
-			} else {
-				mReq.Protocol = ProtocolTCP
-			}
-			if entry.Match(mReq) {
-				e.Cache.Add(cacheKey{host, port, isUDP},
-					cacheValue{entry.Action, entry.ActionArg})
-				return entry.Action, entry.ActionArg, true, ipAddr, err
-			}
-		}
-		e.Cache.Add(cacheKey{host, port, isUDP}, cacheValue{e.DefaultAction, ""})
-		return e.DefaultAction, "", true, ipAddr, err
-	} else {
-		// IP
-		if v, ok := e.Cache.Get(cacheKey{ip.String(), port, isUDP}); ok {
-			// Cache hit
-			ce := v.(cacheValue)
-			return ce.Action, ce.Arg, false, &net.IPAddr{
-				IP:   ip,
-				Zone: zone,
-			}, nil
-		}
-		for _, entry := range e.Entries {
-			mReq := MatchRequest{
-				IP:   ip,
-				Port: port,
-				DB:   e.GeoIPReader,
-			}
-			if isUDP {
-				mReq.Protocol = ProtocolUDP
-			} else {
-				mReq.Protocol = ProtocolTCP
-			}
-			if entry.Match(mReq) {
-				e.Cache.Add(cacheKey{ip.String(), port, isUDP},
-					cacheValue{entry.Action, entry.ActionArg})
-				return entry.Action, entry.ActionArg, false, &net.IPAddr{
-					IP:   ip,
-					Zone: zone,
-				}, nil
-			}
-		}
-		e.Cache.Add(cacheKey{ip.String(), port, isUDP}, cacheValue{e.DefaultAction, ""})
-		return e.DefaultAction, "", false, &net.IPAddr{
-			IP:   ip,
-			Zone: zone,
-		}, nil
-	}
-}

transport/hysteria/acl/engine_test.go

@@ -1,154 +0,0 @@
-package acl
-
-import (
-	"errors"
-	lru "github.com/hashicorp/golang-lru"
-	"net"
-	"strings"
-	"testing"
-)
-
-func TestEngine_ResolveAndMatch(t *testing.T) {
-	cache, _ := lru.NewARC(16)
-	e := &Engine{
-		DefaultAction: ActionDirect,
-		Entries: []Entry{
-			{
-				Action:    ActionProxy,
-				ActionArg: "",
-				Matcher: &domainMatcher{
-					matcherBase: matcherBase{
-						Protocol: ProtocolTCP,
-						Port:     443,
-					},
-					Domain: "google.com",
-					Suffix: false,
-				},
-			},
-			{
-				Action:    ActionHijack,
-				ActionArg: "good.org",
-				Matcher: &domainMatcher{
-					matcherBase: matcherBase{},
-					Domain:      "evil.corp",
-					Suffix:      true,
-				},
-			},
-			{
-				Action:    ActionProxy,
-				ActionArg: "",
-				Matcher: &netMatcher{
-					matcherBase: matcherBase{},
-					Net: &net.IPNet{
-						IP:   net.ParseIP("10.0.0.0"),
-						Mask: net.CIDRMask(8, 32),
-					},
-				},
-			},
-			{
-				Action:    ActionBlock,
-				ActionArg: "",
-				Matcher:   &allMatcher{},
-			},
-		},
-		Cache: cache,
-		ResolveIPAddr: func(s string) (*net.IPAddr, error) {
-			if strings.Contains(s, "evil.corp") {
-				return nil, errors.New("resolve error")
-			}
-			return net.ResolveIPAddr("ip", s)
-		},
-	}
-	tests := []struct {
-		name       string
-		host       string
-		port       uint16
-		isUDP      bool
-		wantAction Action
-		wantArg    string
-		wantErr    bool
-	}{
-		{
-			name:       "domain proxy",
-			host:       "google.com",
-			port:       443,
-			isUDP:      false,
-			wantAction: ActionProxy,
-			wantArg:    "",
-		},
-		{
-			name:       "domain block",
-			host:       "google.com",
-			port:       80,
-			isUDP:      false,
-			wantAction: ActionBlock,
-			wantArg:    "",
-		},
-		{
-			name:       "domain suffix 1",
-			host:       "evil.corp",
-			port:       8899,
-			isUDP:      true,
-			wantAction: ActionHijack,
-			wantArg:    "good.org",
-			wantErr:    true,
-		},
-		{
-			name:       "domain suffix 2",
-			host:       "notevil.corp",
-			port:       22,
-			isUDP:      false,
-			wantAction: ActionBlock,
-			wantArg:    "",
-			wantErr:    true,
-		},
-		{
-			name:       "domain suffix 3",
-			host:       "im.real.evil.corp",
-			port:       443,
-			isUDP:      true,
-			wantAction: ActionHijack,
-			wantArg:    "good.org",
-			wantErr:    true,
-		},
-		{
-			name:       "ip match",
-			host:       "10.2.3.4",
-			port:       80,
-			isUDP:      false,
-			wantAction: ActionProxy,
-			wantArg:    "",
-		},
-		{
-			name:       "ip mismatch",
-			host:       "100.5.6.0",
-			port:       1234,
-			isUDP:      false,
-			wantAction: ActionBlock,
-			wantArg:    "",
-		},
-		{
-			name:       "domain proxy cache",
-			host:       "google.com",
-			port:       443,
-			isUDP:      false,
-			wantAction: ActionProxy,
-			wantArg:    "",
-		},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			gotAction, gotArg, _, _, err := e.ResolveAndMatch(tt.host, tt.port, tt.isUDP)
-			if (err != nil) != tt.wantErr {
-				t.Errorf("ResolveAndMatch() error = %v, wantErr %v", err, tt.wantErr)
-				return
-			}
-			if gotAction != tt.wantAction {
-				t.Errorf("ResolveAndMatch() gotAction = %v, wantAction %v", gotAction, tt.wantAction)
-			}
-			if gotArg != tt.wantArg {
-				t.Errorf("ResolveAndMatch() gotArg = %v, wantAction %v", gotArg, tt.wantArg)
-			}
-		})
-	}
-}

transport/hysteria/acl/entry.go

@@ -1,331 +0,0 @@
-package acl
-
-import (
-	"errors"
-	"fmt"
-	"github.com/oschwald/geoip2-golang"
-	"net"
-	"strconv"
-	"strings"
-)
-
-type Action byte
-type Protocol byte
-
-const (
-	ActionDirect = Action(iota)
-	ActionProxy
-	ActionBlock
-	ActionHijack
-)
-
-const (
-	ProtocolAll = Protocol(iota)
-	ProtocolTCP
-	ProtocolUDP
-)
-
-var protocolPortAliases = map[string]string{
-	"echo":     "*/7",
-	"ftp-data": "*/20",
-	"ftp":      "*/21",
-	"ssh":      "*/22",
-	"telnet":   "*/23",
-	"domain":   "*/53",
-	"dns":      "*/53",
-	"http":     "*/80",
-	"sftp":     "*/115",
-	"ntp":      "*/123",
-	"https":    "*/443",
-	"quic":     "udp/443",
-	"socks":    "*/1080",
-}
-
-type Entry struct {
-	Action    Action
-	ActionArg string
-	Matcher   Matcher
-}
-
-type MatchRequest struct {
-	IP     net.IP
-	Domain string
-
-	Protocol Protocol
-	Port     uint16
-
-	DB *geoip2.Reader
-}
-
-type Matcher interface {
-	Match(MatchRequest) bool
-}
-
-type matcherBase struct {
-	Protocol Protocol
-	Port     uint16 // 0 for all ports
-}
-
-func (m *matcherBase) MatchProtocolPort(p Protocol, port uint16) bool {
-	return (m.Protocol == ProtocolAll || m.Protocol == p) && (m.Port == 0 || m.Port == port)
-}
-
-func parseProtocolPort(s string) (Protocol, uint16, error) {
-	if protocolPortAliases[s] != "" {
-		s = protocolPortAliases[s]
-	}
-	if len(s) == 0 || s == "*" {
-		return ProtocolAll, 0, nil
-	}
-	parts := strings.Split(s, "/")
-	if len(parts) != 2 {
-		return ProtocolAll, 0, errors.New("invalid protocol/port syntax")
-	}
-	protocol := ProtocolAll
-	switch parts[0] {
-	case "tcp":
-		protocol = ProtocolTCP
-	case "udp":
-		protocol = ProtocolUDP
-	case "*":
-		protocol = ProtocolAll
-	default:
-		return ProtocolAll, 0, errors.New("invalid protocol")
-	}
-	if parts[1] == "*" {
-		return protocol, 0, nil
-	}
-	port, err := strconv.ParseUint(parts[1], 10, 16)
-	if err != nil {
-		return ProtocolAll, 0, errors.New("invalid port")
-	}
-	return protocol, uint16(port), nil
-}
-
-type netMatcher struct {
-	matcherBase
-	Net *net.IPNet
-}
-
-func (m *netMatcher) Match(r MatchRequest) bool {
-	if r.IP == nil {
-		return false
-	}
-	return m.Net.Contains(r.IP) && m.MatchProtocolPort(r.Protocol, r.Port)
-}
-
-type domainMatcher struct {
-	matcherBase
-	Domain string
-	Suffix bool
-}
-
-func (m *domainMatcher) Match(r MatchRequest) bool {
-	if len(r.Domain) == 0 {
-		return false
-	}
-	domain := strings.ToLower(r.Domain)
-	return (m.Domain == domain || (m.Suffix && strings.HasSuffix(domain, "."+m.Domain))) &&
-		m.MatchProtocolPort(r.Protocol, r.Port)
-}
-
-type countryMatcher struct {
-	matcherBase
-	Country string // ISO 3166-1 alpha-2 country code, upper case
-}
-
-func (m *countryMatcher) Match(r MatchRequest) bool {
-	if r.IP == nil || r.DB == nil {
-		return false
-	}
-	c, err := r.DB.Country(r.IP)
-	if err != nil {
-		return false
-	}
-	return c.Country.IsoCode == m.Country && m.MatchProtocolPort(r.Protocol, r.Port)
-}
-
-type allMatcher struct {
-	matcherBase
-}
-
-func (m *allMatcher) Match(r MatchRequest) bool {
-	return m.MatchProtocolPort(r.Protocol, r.Port)
-}
-
-func (e Entry) Match(r MatchRequest) bool {
-	return e.Matcher.Match(r)
-}
-
-func ParseEntry(s string) (Entry, error) {
-	fields := strings.Fields(s)
-	if len(fields) < 2 {
-		return Entry{}, fmt.Errorf("expected at least 2 fields, got %d", len(fields))
-	}
-	e := Entry{}
-	action := fields[0]
-	conds := fields[1:]
-	switch strings.ToLower(action) {
-	case "direct":
-		e.Action = ActionDirect
-	case "proxy":
-		e.Action = ActionProxy
-	case "block":
-		e.Action = ActionBlock
-	case "hijack":
-		if len(conds) < 2 {
-			return Entry{}, fmt.Errorf("hijack requires at least 3 fields, got %d", len(fields))
-		}
-		e.Action = ActionHijack
-		e.ActionArg = conds[len(conds)-1]
-		conds = conds[:len(conds)-1]
-	default:
-		return Entry{}, fmt.Errorf("invalid action %s", fields[0])
-	}
-	m, err := condsToMatcher(conds)
-	if err != nil {
-		return Entry{}, err
-	}
-	e.Matcher = m
-	return e, nil
-}
-
-func condsToMatcher(conds []string) (Matcher, error) {
-	if len(conds) < 1 {
-		return nil, errors.New("no condition specified")
-	}
-	typ, args := conds[0], conds[1:]
-	switch strings.ToLower(typ) {
-	case "domain":
-		// domain <domain> <optional: protocol/port>
-		if len(args) == 0 || len(args) > 2 {
-			return nil, fmt.Errorf("invalid number of arguments for domain: %d, expected 1 or 2", len(args))
-		}
-		mb := matcherBase{}
-		if len(args) == 2 {
-			protocol, port, err := parseProtocolPort(args[1])
-			if err != nil {
-				return nil, err
-			}
-			mb.Protocol = protocol
-			mb.Port = port
-		}
-		return &domainMatcher{
-			matcherBase: mb,
-			Domain:      args[0],
-			Suffix:      false,
-		}, nil
-	case "domain-suffix":
-		// domain-suffix <domain> <optional: protocol/port>
-		if len(args) == 0 || len(args) > 2 {
-			return nil, fmt.Errorf("invalid number of arguments for domain-suffix: %d, expected 1 or 2", len(args))
-		}
-		mb := matcherBase{}
-		if len(args) == 2 {
-			protocol, port, err := parseProtocolPort(args[1])
-			if err != nil {
-				return nil, err
-			}
-			mb.Protocol = protocol
-			mb.Port = port
-		}
-		return &domainMatcher{
-			matcherBase: mb,
-			Domain:      args[0],
-			Suffix:      true,
-		}, nil
-	case "cidr":
-		// cidr <cidr> <optional: protocol/port>
-		if len(args) == 0 || len(args) > 2 {
-			return nil, fmt.Errorf("invalid number of arguments for cidr: %d, expected 1 or 2", len(args))
-		}
-		mb := matcherBase{}
-		if len(args) == 2 {
-			protocol, port, err := parseProtocolPort(args[1])
-			if err != nil {
-				return nil, err
-			}
-			mb.Protocol = protocol
-			mb.Port = port
-		}
-		_, ipNet, err := net.ParseCIDR(args[0])
-		if err != nil {
-			return nil, err
-		}
-		return &netMatcher{
-			matcherBase: mb,
-			Net:         ipNet,
-		}, nil
-	case "ip":
-		// ip <ip> <optional: protocol/port>
-		if len(args) == 0 || len(args) > 2 {
-			return nil, fmt.Errorf("invalid number of arguments for ip: %d, expected 1 or 2", len(args))
-		}
-		mb := matcherBase{}
-		if len(args) == 2 {
-			protocol, port, err := parseProtocolPort(args[1])
-			if err != nil {
-				return nil, err
-			}
-			mb.Protocol = protocol
-			mb.Port = port
-		}
-		ip := net.ParseIP(args[0])
-		if ip == nil {
-			return nil, fmt.Errorf("invalid ip: %s", args[0])
-		}
-		var ipNet *net.IPNet
-		if ip.To4() != nil {
-			ipNet = &net.IPNet{
-				IP:   ip,
-				Mask: net.CIDRMask(32, 32),
-			}
-		} else {
-			ipNet = &net.IPNet{
-				IP:   ip,
-				Mask: net.CIDRMask(128, 128),
-			}
-		}
-		return &netMatcher{
-			matcherBase: mb,
-			Net:         ipNet,
-		}, nil
-	case "country":
-		// country <country> <optional: protocol/port>
-		if len(args) == 0 || len(args) > 2 {
-			return nil, fmt.Errorf("invalid number of arguments for country: %d, expected 1 or 2", len(args))
-		}
-		mb := matcherBase{}
-		if len(args) == 2 {
-			protocol, port, err := parseProtocolPort(args[1])
-			if err != nil {
-				return nil, err
-			}
-			mb.Protocol = protocol
-			mb.Port = port
-		}
-		return &countryMatcher{
-			matcherBase: mb,
-			Country:     strings.ToUpper(args[0]),
-		}, nil
-	case "all":
-		// all <optional: protocol/port>
-		if len(args) > 1 {
-			return nil, fmt.Errorf("invalid number of arguments for all: %d, expected 0 or 1", len(args))
-		}
-		mb := matcherBase{}
-		if len(args) == 1 {
-			protocol, port, err := parseProtocolPort(args[0])
-			if err != nil {
-				return nil, err
-			}
-			mb.Protocol = protocol
-			mb.Port = port
-		}
-		return &allMatcher{
-			matcherBase: mb,
-		}, nil
-	default:
-		return nil, fmt.Errorf("invalid condition type: %s", typ)
-	}
-}

transport/hysteria/acl/entry_test.go

@@ -1,75 +0,0 @@
-package acl
-
-import (
-	"net"
-	"reflect"
-	"testing"
-)
-
-func TestParseEntry(t *testing.T) {
-	_, ok3net, _ := net.ParseCIDR("8.8.8.0/24")
-
-	type args struct {
-		s string
-	}
-	tests := []struct {
-		name    string
-		args    args
-		want    Entry
-		wantErr bool
-	}{
-		{name: "empty", args: args{""}, want: Entry{}, wantErr: true},
-		{name: "ok 1", args: args{"direct domain-suffix google.com"},
-			want: Entry{ActionDirect, "", &domainMatcher{
-				matcherBase: matcherBase{},
-				Domain:      "google.com",
-				Suffix:      true,
-			}},
-			wantErr: false},
-		{name: "ok 2", args: args{"proxy domain shithole"},
-			want: Entry{ActionProxy, "", &domainMatcher{
-				matcherBase: matcherBase{},
-				Domain:      "shithole",
-				Suffix:      false,
-			}},
-			wantErr: false},
-		{name: "ok 3", args: args{"block cidr 8.8.8.0/24 */53"},
-			want: Entry{ActionBlock, "", &netMatcher{
-				matcherBase: matcherBase{ProtocolAll, 53},
-				Net:         ok3net,
-			}},
-			wantErr: false},
-		{name: "ok 4", args: args{"hijack all udp/* udpblackhole.net"},
-			want: Entry{ActionHijack, "udpblackhole.net", &allMatcher{
-				matcherBase: matcherBase{ProtocolUDP, 0},
-			}},
-			wantErr: false},
-		{name: "err 1", args: args{"what the heck"},
-			want:    Entry{},
-			wantErr: true},
-		{name: "err 2", args: args{"proxy sucks ass"},
-			want:    Entry{},
-			wantErr: true},
-		{name: "err 3", args: args{"block ip 999.999.999.999"},
-			want:    Entry{},
-			wantErr: true},
-		{name: "err 4", args: args{"hijack domain google.com"},
-			want:    Entry{},
-			wantErr: true},
-		{name: "err 5", args: args{"hijack domain google.com bing.com 123"},
-			want:    Entry{},
-			wantErr: true},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			got, err := ParseEntry(tt.args.s)
-			if (err != nil) != tt.wantErr {
-				t.Errorf("ParseEntry() error = %v, wantErr %v", err, tt.wantErr)
-				return
-			}
-			if !reflect.DeepEqual(got, tt.want) {
-				t.Errorf("ParseEntry() got = %v, wantAction %v", got, tt.want)
-			}
-		})
-	}
-}