go-gost/x
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add auth for tun

Browse Source
This commit is contained in:
ginuerzh
2022-10-20 21:08:26 +08:00
parent 15d0a33716
commit 669e80b780
5 changed files with 80 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
handler/tun/client.go
View File

@ -1,6 +1,7 @@
package tun
import (
"bytes"
"context"
"io"
"net"
@ -15,12 +16,12 @@ import (
)
const (
// 4-byte magic header followed by 16-byte IP address
keepAliveDataLength = 20
// 4-byte magic header followed by 16-byte IP address followed by 16-byte key.
keepAliveDataLength = 36
)
var (
keepAliveHeader = []byte("GOST")
magicHeader = []byte("GOST")
)
func (h *tunHandler) handleClient(ctx context.Context, conn net.Conn, addr net.Addr, config *tun_util.Config, log logger.Logger) error {
@ -38,22 +39,26 @@ func (h *tunHandler) handleClient(ctx context.Context, conn net.Conn, addr net.A
ctx, cancel := context.WithCancel(ctx)
defer cancel()
if h.md.keepAlivePeriod > 0 {
go h.keepAlive(ctx, cc, ip)
}
go h.keepAlive(ctx, cc, ip)
return h.transportClient(conn, cc, config, log)
}
func (h *tunHandler) keepAlive(ctx context.Context, conn net.Conn, ip net.IP) {
// handshake
var keepAliveData [keepAliveDataLength]byte
copy(keepAliveData[:4], keepAliveHeader) // magic header
copy(keepAliveData[4:], ip.To16())
copy(keepAliveData[:4], magicHeader) // magic header
copy(keepAliveData[4:20], ip.To16())
copy(keepAliveData[20:36], []byte(h.md.passphrase))
if _, err := conn.Write(keepAliveData[:]); err != nil {
return
}
if h.md.keepAlivePeriod <= 0 {
return
}
conn.SetReadDeadline(time.Now().Add(h.md.keepAlivePeriod * 3))
ticker := time.NewTicker(h.md.keepAlivePeriod)
defer ticker.Stop()
@ -63,6 +68,7 @@ func (h *tunHandler) keepAlive(ctx context.Context, conn net.Conn, ip net.IP) {
if _, err := conn.Write(keepAliveData[:]); err != nil {
return
}
h.options.Logger.Debugf("keepalive sended")
case <-ctx.Done():
return
}
@ -131,6 +137,16 @@ func (h *tunHandler) transportClient(tun net.Conn, conn net.Conn, config *tun_ut
return err
}
if n == keepAliveDataLength && bytes.Equal((*b)[:4], magicHeader) {
ip := net.IP((*b)[4:20])
log.Debugf("keepalive received at %v", ip)
if h.md.keepAlivePeriod > 0 {
conn.SetReadDeadline(time.Now().Add(h.md.keepAlivePeriod * 3))
}
return nil
}
if waterutil.IsIPv4((*b)[:n]) {
header, err := ipv4.ParseHeader((*b)[:n])
if err != nil {