improve ss

pkg/listener/tls/listener.go

@@ -0,0 +1,70 @@
+package tls
+
+import (
+	"crypto/tls"
+	"net"
+
+	"github.com/go-gost/gost/pkg/internal/utils"
+	"github.com/go-gost/gost/pkg/listener"
+	"github.com/go-gost/gost/pkg/logger"
+	md "github.com/go-gost/gost/pkg/metadata"
+	"github.com/go-gost/gost/pkg/registry"
+)
+
+func init() {
+	registry.RegisterListener("tls", NewListener)
+}
+
+type tlsListener struct {
+	addr string
+	md   metadata
+	net.Listener
+	logger logger.Logger
+}
+
+func NewListener(opts ...listener.Option) listener.Listener {
+	options := &listener.Options{}
+	for _, opt := range opts {
+		opt(options)
+	}
+	return &tlsListener{
+		addr:   options.Addr,
+		logger: options.Logger,
+	}
+}
+
+func (l *tlsListener) Init(md md.Metadata) (err error) {
+	if err = l.parseMetadata(md); err != nil {
+		return
+	}
+
+	ln, err := net.Listen("tcp", l.addr)
+	if err != nil {
+		return
+	}
+
+	ln = tls.NewListener(
+		&utils.TCPKeepAliveListener{
+			TCPListener:     ln.(*net.TCPListener),
+			KeepAlivePeriod: l.md.keepAlivePeriod,
+		},
+		l.md.tlsConfig,
+	)
+
+	l.Listener = ln
+	return
+}
+
+func (l *tlsListener) parseMetadata(md md.Metadata) (err error) {
+	l.md.tlsConfig, err = utils.LoadTLSConfig(
+		md.GetString(certFile),
+		md.GetString(keyFile),
+		md.GetString(caFile),
+	)
+	if err != nil {
+		return
+	}
+
+	l.md.keepAlivePeriod = md.GetDuration(keepAlivePeriod)
+	return
+}

pkg/listener/tls/metadata.go

@@ -0,0 +1,18 @@
+package tls
+
+import (
+	"crypto/tls"
+	"time"
+)
+
+const (
+	certFile        = "certFile"
+	keyFile         = "keyFile"
+	caFile          = "caFile"
+	keepAlivePeriod = "keepAlivePeriod"
+)
+
+type metadata struct {
+	tlsConfig       *tls.Config
+	keepAlivePeriod time.Duration
+}

pkg/listener/tls/mux/listener.go

@@ -0,0 +1,140 @@
+package mux
+
+import (
+	"crypto/tls"
+	"net"
+
+	"github.com/go-gost/gost/pkg/internal/utils"
+	"github.com/go-gost/gost/pkg/listener"
+	"github.com/go-gost/gost/pkg/logger"
+	md "github.com/go-gost/gost/pkg/metadata"
+	"github.com/go-gost/gost/pkg/registry"
+	"github.com/xtaci/smux"
+)
+
+func init() {
+	registry.RegisterListener("mtls", NewListener)
+}
+
+type mtlsListener struct {
+	addr string
+	md   metadata
+	net.Listener
+	connChan chan net.Conn
+	errChan  chan error
+	logger   logger.Logger
+}
+
+func NewListener(opts ...listener.Option) listener.Listener {
+	options := &listener.Options{}
+	for _, opt := range opts {
+		opt(options)
+	}
+	return &mtlsListener{
+		addr:   options.Addr,
+		logger: options.Logger,
+	}
+}
+
+func (l *mtlsListener) Init(md md.Metadata) (err error) {
+	if err = l.parseMetadata(md); err != nil {
+		return
+	}
+
+	ln, err := net.Listen("tcp", l.addr)
+	if err != nil {
+		return
+	}
+	l.Listener = tls.NewListener(ln, l.md.tlsConfig)
+
+	queueSize := l.md.connQueueSize
+	if queueSize <= 0 {
+		queueSize = defaultQueueSize
+	}
+	l.connChan = make(chan net.Conn, queueSize)
+	l.errChan = make(chan error, 1)
+
+	go l.listenLoop()
+
+	return
+}
+
+func (l *mtlsListener) listenLoop() {
+	for {
+		conn, err := l.Listener.Accept()
+		if err != nil {
+			l.errChan <- err
+			close(l.errChan)
+			return
+		}
+		go l.mux(conn)
+	}
+}
+
+func (l *mtlsListener) mux(conn net.Conn) {
+	smuxConfig := smux.DefaultConfig()
+	smuxConfig.KeepAliveDisabled = l.md.muxKeepAliveDisabled
+	if l.md.muxKeepAlivePeriod > 0 {
+		smuxConfig.KeepAliveInterval = l.md.muxKeepAlivePeriod
+	}
+	if l.md.muxKeepAliveTimeout > 0 {
+		smuxConfig.KeepAliveTimeout = l.md.muxKeepAliveTimeout
+	}
+	if l.md.muxMaxFrameSize > 0 {
+		smuxConfig.MaxFrameSize = l.md.muxMaxFrameSize
+	}
+	if l.md.muxMaxReceiveBuffer > 0 {
+		smuxConfig.MaxReceiveBuffer = l.md.muxMaxReceiveBuffer
+	}
+	if l.md.muxMaxStreamBuffer > 0 {
+		smuxConfig.MaxStreamBuffer = l.md.muxMaxStreamBuffer
+	}
+	session, err := smux.Server(conn, smuxConfig)
+	if err != nil {
+		l.logger.Error(err)
+		return
+	}
+	defer session.Close()
+
+	for {
+		stream, err := session.AcceptStream()
+		if err != nil {
+			l.logger.Error("accept stream:", err)
+			return
+		}
+
+		select {
+		case l.connChan <- stream:
+		case <-stream.GetDieCh():
+			stream.Close()
+		default:
+			stream.Close()
+			l.logger.Error("connection queue is full")
+		}
+	}
+}
+
+func (l *mtlsListener) Accept() (conn net.Conn, err error) {
+	var ok bool
+	select {
+	case conn = <-l.connChan:
+	case err, ok = <-l.errChan:
+		if !ok {
+			err = listener.ErrClosed
+		}
+	}
+	return
+}
+
+func (l *mtlsListener) parseMetadata(md md.Metadata) (err error) {
+	l.md.tlsConfig, err = utils.LoadTLSConfig(
+		md.GetString(certFile),
+		md.GetString(keyFile),
+		md.GetString(caFile),
+	)
+	if err != nil {
+		return
+	}
+
+	return
+}

pkg/listener/tls/mux/metadata.go

@@ -0,0 +1,36 @@
+package mux
+
+import (
+	"crypto/tls"
+	"time"
+)
+
+const (
+	certFile = "certFile"
+	keyFile  = "keyFile"
+	caFile   = "caFile"
+
+	muxKeepAliveDisabled = "muxKeepAliveDisabled"
+	muxKeepAlivePeriod   = "muxKeepAlivePeriod"
+	muxKeepAliveTimeout  = "muxKeepAliveTimeout"
+	muxMaxFrameSize      = "muxMaxFrameSize"
+	muxMaxReceiveBuffer  = "muxMaxReceiveBuffer"
+	muxMaxStreamBuffer   = "muxMaxStreamBuffer"
+)
+
+const (
+	defaultQueueSize = 128
+)
+
+type metadata struct {
+	tlsConfig *tls.Config
+
+	muxKeepAliveDisabled bool
+	muxKeepAlivePeriod   time.Duration
+	muxKeepAliveTimeout  time.Duration
+	muxMaxFrameSize      int
+	muxMaxReceiveBuffer  int
+	muxMaxStreamBuffer   int
+
+	connQueueSize int
+}