145 lines
3.5 KiB
Go
145 lines
3.5 KiB
Go
package tuic
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"encoding/json"
|
|
"net"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/metacubex/quic-go"
|
|
|
|
"github.com/Dreamacro/clash/common/sockopt"
|
|
C "github.com/Dreamacro/clash/constant"
|
|
"github.com/Dreamacro/clash/adapter/inbound"
|
|
"github.com/Dreamacro/clash/log"
|
|
"github.com/Dreamacro/clash/transport/socks5"
|
|
"github.com/Dreamacro/clash/transport/tuic"
|
|
)
|
|
|
|
type TuicServer struct {
|
|
Enable bool
|
|
Listen string
|
|
Token []string
|
|
Certificate string
|
|
PrivateKey string
|
|
CongestionController string
|
|
MaxIdleTime int
|
|
AuthenticationTimeout int
|
|
ALPN []string
|
|
MaxUdpRelayPacketSize int
|
|
}
|
|
|
|
func (t TuicServer) String() string {
|
|
b, _ := json.Marshal(t)
|
|
return string(b)
|
|
}
|
|
|
|
type Listener struct {
|
|
closed bool
|
|
config TuicServer
|
|
udpListeners []net.PacketConn
|
|
servers []*tuic.Server
|
|
}
|
|
|
|
func New(config TuicServer, tcpIn chan<- C.ConnContext, udpIn chan<- *C.PacketAdapter) (*Listener, error) {
|
|
cert, err := tls.LoadX509KeyPair(config.Certificate, config.PrivateKey)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
tlsConfig := &tls.Config{
|
|
MinVersion: tls.VersionTLS13,
|
|
Certificates: []tls.Certificate{cert},
|
|
}
|
|
if len(config.ALPN) > 0 {
|
|
tlsConfig.NextProtos = config.ALPN
|
|
} else {
|
|
tlsConfig.NextProtos = []string{"h3"}
|
|
}
|
|
quicConfig := &quic.Config{
|
|
MaxIdleTimeout: time.Duration(config.MaxIdleTime) * time.Millisecond,
|
|
MaxIncomingStreams: 1 >> 32,
|
|
MaxIncomingUniStreams: 1 >> 32,
|
|
EnableDatagrams: true,
|
|
}
|
|
quicConfig.InitialStreamReceiveWindow = tuic.DefaultStreamReceiveWindow / 10
|
|
quicConfig.MaxStreamReceiveWindow = tuic.DefaultStreamReceiveWindow
|
|
quicConfig.InitialConnectionReceiveWindow = tuic.DefaultConnectionReceiveWindow / 10
|
|
quicConfig.MaxConnectionReceiveWindow = tuic.DefaultConnectionReceiveWindow
|
|
|
|
tokens := make([][32]byte, len(config.Token))
|
|
for i, token := range config.Token {
|
|
tokens[i] = tuic.GenTKN(token)
|
|
}
|
|
|
|
option := &tuic.ServerOption{
|
|
HandleTcpFn: func(conn net.Conn, addr socks5.Addr) error {
|
|
tcpIn <- inbound.NewSocket(addr, conn, C.TUIC)
|
|
return nil
|
|
},
|
|
HandleUdpFn: func(addr socks5.Addr, packet C.UDPPacket) error {
|
|
select {
|
|
case udpIn <- inbound.NewPacket(addr, packet, C.TUIC):
|
|
default:
|
|
}
|
|
return nil
|
|
},
|
|
TlsConfig: tlsConfig,
|
|
QuicConfig: quicConfig,
|
|
Tokens: tokens,
|
|
CongestionController: config.CongestionController,
|
|
AuthenticationTimeout: time.Duration(config.AuthenticationTimeout) * time.Millisecond,
|
|
MaxUdpRelayPacketSize: config.MaxUdpRelayPacketSize,
|
|
}
|
|
|
|
sl := &Listener{false, config, nil, nil}
|
|
|
|
for _, addr := range strings.Split(config.Listen, ",") {
|
|
addr := addr
|
|
|
|
ul, err := net.ListenPacket("udp", addr)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
err = sockopt.UDPReuseaddr(ul.(*net.UDPConn))
|
|
if err != nil {
|
|
log.Warnln("Failed to Reuse UDP Address: %s", err)
|
|
}
|
|
|
|
sl.udpListeners = append(sl.udpListeners, ul)
|
|
|
|
server, err := tuic.NewServer(option, ul)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
sl.servers = append(sl.servers, server)
|
|
|
|
go func() {
|
|
log.Infoln("Tuic proxy listening at: %s", ul.LocalAddr().String())
|
|
err := server.Serve()
|
|
if err != nil {
|
|
if sl.closed {
|
|
return
|
|
}
|
|
}
|
|
}()
|
|
}
|
|
|
|
return sl, nil
|
|
}
|
|
|
|
func (l *Listener) Close() {
|
|
l.closed = true
|
|
for _, lis := range l.servers {
|
|
_ = lis.Close()
|
|
}
|
|
for _, lis := range l.udpListeners {
|
|
_ = lis.Close()
|
|
}
|
|
}
|
|
|
|
func (l *Listener) Config() TuicServer {
|
|
return l.config
|
|
}
|