108 lines
2.1 KiB
Go
108 lines
2.1 KiB
Go
package socks
|
|
|
|
import (
|
|
"context"
|
|
"github.com/database64128/tfo-go/v2"
|
|
"io"
|
|
"net"
|
|
|
|
"github.com/Dreamacro/clash/adapter/inbound"
|
|
N "github.com/Dreamacro/clash/common/net"
|
|
C "github.com/Dreamacro/clash/constant"
|
|
authStore "github.com/Dreamacro/clash/listener/auth"
|
|
"github.com/Dreamacro/clash/transport/socks4"
|
|
"github.com/Dreamacro/clash/transport/socks5"
|
|
)
|
|
|
|
type Listener struct {
|
|
listener net.Listener
|
|
addr string
|
|
closed bool
|
|
}
|
|
|
|
// RawAddress implements C.Listener
|
|
func (l *Listener) RawAddress() string {
|
|
return l.addr
|
|
}
|
|
|
|
// Address implements C.Listener
|
|
func (l *Listener) Address() string {
|
|
return l.listener.Addr().String()
|
|
}
|
|
|
|
// Close implements C.Listener
|
|
func (l *Listener) Close() error {
|
|
l.closed = true
|
|
return l.listener.Close()
|
|
}
|
|
|
|
func New(addr string, inboundTfo bool, in chan<- C.ConnContext) (*Listener, error) {
|
|
lc := tfo.ListenConfig{
|
|
DisableTFO: !inboundTfo,
|
|
}
|
|
l, err := lc.Listen(context.Background(), "tcp", addr)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
sl := &Listener{
|
|
listener: l,
|
|
addr: addr,
|
|
}
|
|
go func() {
|
|
for {
|
|
c, err := l.Accept()
|
|
if err != nil {
|
|
if sl.closed {
|
|
break
|
|
}
|
|
continue
|
|
}
|
|
go handleSocks(c, in)
|
|
}
|
|
}()
|
|
|
|
return sl, nil
|
|
}
|
|
|
|
func handleSocks(conn net.Conn, in chan<- C.ConnContext) {
|
|
conn.(*net.TCPConn).SetKeepAlive(true)
|
|
bufConn := N.NewBufferedConn(conn)
|
|
head, err := bufConn.Peek(1)
|
|
if err != nil {
|
|
conn.Close()
|
|
return
|
|
}
|
|
|
|
switch head[0] {
|
|
case socks4.Version:
|
|
HandleSocks4(bufConn, in)
|
|
case socks5.Version:
|
|
HandleSocks5(bufConn, in)
|
|
default:
|
|
conn.Close()
|
|
}
|
|
}
|
|
|
|
func HandleSocks4(conn net.Conn, in chan<- C.ConnContext) {
|
|
addr, _, err := socks4.ServerHandshake(conn, authStore.Authenticator())
|
|
if err != nil {
|
|
conn.Close()
|
|
return
|
|
}
|
|
in <- inbound.NewSocket(socks5.ParseAddr(addr), conn, C.SOCKS4)
|
|
}
|
|
|
|
func HandleSocks5(conn net.Conn, in chan<- C.ConnContext) {
|
|
target, command, err := socks5.ServerHandshake(conn, authStore.Authenticator())
|
|
if err != nil {
|
|
conn.Close()
|
|
return
|
|
}
|
|
if command == socks5.CmdUDPAssociate {
|
|
defer conn.Close()
|
|
io.Copy(io.Discard, conn)
|
|
return
|
|
}
|
|
in <- inbound.NewSocket(target, conn, C.SOCKS5)
|
|
}
|