go-gost/x
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add client ID for plugin service

Browse Source
This commit is contained in:
ginuerzh 2023-09-19 22:31:37 +08:00
parent 95da26cf49
commit 674a70cd23
26 changed files with 306 additions and 320 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
admission/admission.go
View File

@ -13,7 +13,6 @@ import (
"github.com/go-gost/core/logger" "github.com/go-gost/core/logger"
"github.com/go-gost/x/internal/loader" "github.com/go-gost/x/internal/loader"
"github.com/go-gost/x/internal/matcher" "github.com/go-gost/x/internal/matcher"
"google.golang.org/grpc"
) )
type options struct { type options struct {
@ -22,7 +21,6 @@ type options struct {
fileLoader loader.Loader fileLoader loader.Loader
redisLoader loader.Loader redisLoader loader.Loader
httpLoader loader.Loader httpLoader loader.Loader
client *grpc.ClientConn
period time.Duration period time.Duration
logger logger.Logger logger logger.Logger
} }
@ -65,12 +63,6 @@ func HTTPLoaderOption(httpLoader loader.Loader) Option {
} }
} }
func PluginConnOption(c *grpc.ClientConn) Option {
return func(opts *options) {
opts.client = c
}
}
func LoggerOption(logger logger.Logger) Option { func LoggerOption(logger logger.Logger) Option {
return func(opts *options) { return func(opts *options) {
opts.logger = logger opts.logger = logger

43
admission/plugin.go
View File

@ -2,37 +2,36 @@ package admission
import ( import (
"context" "context"
"io"
admission_pkg "github.com/go-gost/core/admission" admission_pkg "github.com/go-gost/core/admission"
"github.com/go-gost/core/logger"
"github.com/go-gost/plugin/admission/proto" "github.com/go-gost/plugin/admission/proto"
xlogger "github.com/go-gost/x/logger" "google.golang.org/grpc"
) )
type pluginAdmission struct { type grpcPluginAdmission struct {
conn grpc.ClientConnInterface
client proto.AdmissionClient client proto.AdmissionClient
options options log logger.Logger
} }
// NewPluginAdmission creates a plugin admission. // NewGRPCPluginAdmission creates an Admission plugin based on gRPC.
func NewPluginAdmission(opts ...Option) admission_pkg.Admission { func NewGRPCPluginAdmission(name string, conn grpc.ClientConnInterface) admission_pkg.Admission {
var options options p := &grpcPluginAdmission{
for _, opt := range opts { conn: conn,
opt(&options) log: logger.Default().WithFields(map[string]any{
"kind": "admission",
"admission": name,
}),
} }
if options.logger == nil { if conn != nil {
options.logger = xlogger.Nop() p.client = proto.NewAdmissionClient(conn)
}
p := &pluginAdmission{
options: options,
}
if options.client != nil {
p.client = proto.NewAdmissionClient(options.client)
} }
return p return p
} }
func (p *pluginAdmission) Admit(ctx context.Context, addr string) bool { func (p *grpcPluginAdmission) Admit(ctx context.Context, addr string) bool {
if p.client == nil { if p.client == nil {
return false return false
} }
@ -42,15 +41,15 @@ func (p *pluginAdmission) Admit(ctx context.Context, addr string) bool {
Addr: addr, Addr: addr,
}) })
if err != nil { if err != nil {
p.options.logger.Error(err) p.log.Error(err)
return false return false
} }
return r.Ok return r.Ok
} }
func (p *pluginAdmission) Close() error { func (p *grpcPluginAdmission) Close() error {
if p.options.client != nil { if closer, ok := p.conn.(io.Closer); ok {
return p.options.client.Close() return closer.Close()
} }
return nil return nil
} }

2
api/middleware.go
View File

@ -35,7 +35,7 @@ func mwBasicAuth(auther auth.Authenticator) gin.HandlerFunc {
return return
} }
u, p, _ := c.Request.BasicAuth() u, p, _ := c.Request.BasicAuth()
if !auther.Authenticate(c, u, p) { if ok, _ := auther.Authenticate(c, u, p); !ok {
c.AbortWithStatus(http.StatusUnauthorized) c.AbortWithStatus(http.StatusUnauthorized)
} }
} }

16
auth/auth.go
View File

@ -12,7 +12,6 @@ import (
"github.com/go-gost/core/logger" "github.com/go-gost/core/logger"
"github.com/go-gost/x/internal/loader" "github.com/go-gost/x/internal/loader"
xlogger "github.com/go-gost/x/logger" xlogger "github.com/go-gost/x/logger"
"google.golang.org/grpc"
) )
type options struct { type options struct {
@ -21,7 +20,6 @@ type options struct {
redisLoader loader.Loader redisLoader loader.Loader
httpLoader loader.Loader httpLoader loader.Loader
period time.Duration period time.Duration
client *grpc.ClientConn
logger logger.Logger logger logger.Logger
} }
@ -57,12 +55,6 @@ func HTTPLoaderOption(httpLoader loader.Loader) Option {
} }
} }
func PluginConnOption(c *grpc.ClientConn) Option {
return func(opts *options) {
opts.client = c
}
}
func LoggerOption(logger logger.Logger) Option { func LoggerOption(logger logger.Logger) Option {
return func(opts *options) { return func(opts *options) {
opts.logger = logger opts.logger = logger
@ -105,20 +97,20 @@ func NewAuthenticator(opts ...Option) auth.Authenticator {
} }
// Authenticate checks the validity of the provided user-password pair. // Authenticate checks the validity of the provided user-password pair.
func (p *authenticator) Authenticate(ctx context.Context, user, password string) bool { func (p *authenticator) Authenticate(ctx context.Context, user, password string) (bool, string) {
if p == nil { if p == nil {
return true return true, ""
} }
p.mu.RLock() p.mu.RLock()
defer p.mu.RUnlock() defer p.mu.RUnlock()
if len(p.kvs) == 0 { if len(p.kvs) == 0 {
return true return false, ""
} }
v, ok := p.kvs[user] v, ok := p.kvs[user]
return ok && (v == "" || password == v) return ok && (v == "" || password == v), ""
} }
func (p *authenticator) periodReload(ctx context.Context) error { func (p *authenticator) periodReload(ctx context.Context) error {

48
auth/plugin.go
View File

@ -2,40 +2,40 @@ package auth
import ( import (
"context" "context"
"io"
"github.com/go-gost/core/auth" "github.com/go-gost/core/auth"
"github.com/go-gost/core/logger"
"github.com/go-gost/plugin/auth/proto" "github.com/go-gost/plugin/auth/proto"
xlogger "github.com/go-gost/x/logger" "google.golang.org/grpc"
) )
type pluginAuthenticator struct { type grpcPluginAuthenticator struct {
conn grpc.ClientConnInterface
client proto.AuthenticatorClient client proto.AuthenticatorClient
options options log logger.Logger
} }
// NewPluginAuthenticator creates an Authenticator that authenticates client by plugin. // NewGRPCPluginAuthenticator creates an Authenticator plugin based on gRPC.
func NewPluginAuthenticator(opts ...Option) auth.Authenticator { func NewGRPCPluginAuthenticator(name string, conn grpc.ClientConnInterface) auth.Authenticator {
var options options p := &grpcPluginAuthenticator{
for _, opt := range opts { conn: conn,
opt(&options) log: logger.Default().WithFields(map[string]any{
} "kind": "auther",
if options.logger == nil { "auther": name,
options.logger = xlogger.Nop() }),
} }
p := &pluginAuthenticator{ if conn != nil {
options: options, p.client = proto.NewAuthenticatorClient(conn)
}
if options.client != nil {
p.client = proto.NewAuthenticatorClient(options.client)
} }
return p return p
} }
// Authenticate checks the validity of the provided user-password pair. // Authenticate checks the validity of the provided user-password pair.
func (p *pluginAuthenticator) Authenticate(ctx context.Context, user, password string) bool { func (p *grpcPluginAuthenticator) Authenticate(ctx context.Context, user, password string) (bool, string) {
if p.client == nil { if p.client == nil {
return false return false, ""
} }
r, err := p.client.Authenticate(ctx, r, err := p.client.Authenticate(ctx,
@ -44,15 +44,15 @@ func (p *pluginAuthenticator) Authenticate(ctx context.Context, user, password s
Password: password, Password: password,
}) })
if err != nil { if err != nil {
p.options.logger.Error(err) p.log.Error(err)
return false return false, ""
} }
return r.Ok return r.Ok, r.Id
} }
func (p *pluginAuthenticator) Close() error { func (p *grpcPluginAuthenticator) Close() error {
if p.options.client != nil { if closer, ok := p.conn.(io.Closer); ok {
return p.options.client.Close() return closer.Close()
} }
return nil return nil
} }

49
bypass/plugin.go
View File

@ -2,55 +2,56 @@ package bypass
import ( import (
"context" "context"
"io"
bypass_pkg "github.com/go-gost/core/bypass" bypass_pkg "github.com/go-gost/core/bypass"
"github.com/go-gost/core/logger"
"github.com/go-gost/plugin/bypass/proto" "github.com/go-gost/plugin/bypass/proto"
xlogger "github.com/go-gost/x/logger" auth_util "github.com/go-gost/x/internal/util/auth"
"google.golang.org/grpc"
) )
type pluginBypass struct { type grpcPluginBypass struct {
conn grpc.ClientConnInterface
client proto.BypassClient client proto.BypassClient
options options log logger.Logger
} }
// NewPluginBypass creates a plugin bypass. // NewGRPCPluginBypass creates a Bypass plugin based on gRPC.
func NewPluginBypass(opts ...Option) bypass_pkg.Bypass { func NewGRPCPluginBypass(name string, conn grpc.ClientConnInterface) bypass_pkg.Bypass {
var options options p := &grpcPluginBypass{
for _, opt := range opts { conn: conn,
opt(&options) log: logger.Default().WithFields(map[string]any{
"kind": "bypass",
"bypass": name,
}),
} }
if options.logger == nil { if conn != nil {
options.logger = xlogger.Nop() p.client = proto.NewBypassClient(conn)
}
p := &pluginBypass{
options: options,
}
if options.client != nil {
p.client = proto.NewBypassClient(options.client)
} }
return p return p
} }
func (p *pluginBypass) Contains(ctx context.Context, addr string) bool { func (p *grpcPluginBypass) Contains(ctx context.Context, addr string) bool {
if p.client == nil { if p.client == nil {
return false return true
} }
r, err := p.client.Bypass(ctx, r, err := p.client.Bypass(ctx,
&proto.BypassRequest{ &proto.BypassRequest{
Addr: addr, Addr: addr,
Client: string(auth_util.IDFromContext(ctx)),
}) })
if err != nil { if err != nil {
p.options.logger.Error(err) p.log.Error(err)
return false return true
} }
return r.Ok return r.Ok
} }
func (p *pluginBypass) Close() error { func (p *grpcPluginBypass) Close() error {
if p.options.client != nil { if closer, ok := p.conn.(io.Closer); ok {
return p.options.client.Close() return closer.Close()
} }
return nil return nil
} }

56
config/parsing/parse.go
View File

@ -65,13 +65,7 @@ func ParseAuther(cfg *config.AutherConfig) auth.Authenticator {
if err != nil { if err != nil {
logger.Default().Error(err) logger.Default().Error(err)
} }
return auth_impl.NewPluginAuthenticator( return auth_impl.NewGRPCPluginAuthenticator(cfg.Name, c)
auth_impl.PluginConnOption(c),
auth_impl.LoggerOption(logger.Default().WithFields(map[string]any{
"kind": "auther",
"auther": cfg.Name,
})),
)
} }
m := make(map[string]string) m := make(map[string]string)
@ -199,13 +193,7 @@ func ParseAdmission(cfg *config.AdmissionConfig) admission.Admission {
if err != nil { if err != nil {
logger.Default().Error(err) logger.Default().Error(err)
} }
return admission_impl.NewPluginAdmission( return admission_impl.NewGRPCPluginAdmission(cfg.Name, c)
admission_impl.PluginConnOption(c),
admission_impl.LoggerOption(logger.Default().WithFields(map[string]any{
"kind": "admission",
"admission": cfg.Name,
})),
)
} }
opts := []admission_impl.Option{ opts := []admission_impl.Option{
@ -248,13 +236,7 @@ func ParseBypass(cfg *config.BypassConfig) bypass.Bypass {
if err != nil { if err != nil {
logger.Default().Error(err) logger.Default().Error(err)
} }
return bypass_impl.NewPluginBypass( return bypass_impl.NewGRPCPluginBypass(cfg.Name, c)
bypass_impl.PluginConnOption(c),
bypass_impl.LoggerOption(logger.Default().WithFields(map[string]any{
"kind": "bypass",
"bypass": cfg.Name,
})),
)
} }
opts := []bypass_impl.Option{ opts := []bypass_impl.Option{
@ -298,13 +280,7 @@ func ParseResolver(cfg *config.ResolverConfig) (resolver.Resolver, error) {
logger.Default().Error(err) logger.Default().Error(err)
return nil, err return nil, err
} }
return resolver_impl.NewPluginResolver( return resolver_impl.NewGRPCPluginResolver(cfg.Name, c)
resolver_impl.PluginConnOption(c),
resolver_impl.LoggerOption(logger.Default().WithFields(map[string]any{
"kind": "resolver",
"resolver": cfg.Name,
})),
)
} }
var nameservers []resolver_impl.NameServer var nameservers []resolver_impl.NameServer
@ -341,13 +317,7 @@ func ParseHosts(cfg *config.HostsConfig) hosts.HostMapper {
if err != nil { if err != nil {
logger.Default().Error(err) logger.Default().Error(err)
} }
return xhosts.NewPluginHostMapper( return xhosts.NewGRPCPluginHostMapper(cfg.Name, c)
xhosts.PluginConnOption(c),
xhosts.LoggerOption(logger.Default().WithFields(map[string]any{
"kind": "hosts",
"hosts": cfg.Name,
})),
)
} }
var mappings []xhosts.Mapping var mappings []xhosts.Mapping
@ -413,13 +383,7 @@ func ParseIngress(cfg *config.IngressConfig) ingress.Ingress {
if err != nil { if err != nil {
logger.Default().Error(err) logger.Default().Error(err)
} }
return xingress.NewPluginIngress( return xingress.NewGRPCPluginIngress(cfg.Name, c)
xingress.PluginConnOption(c),
xingress.LoggerOption(logger.Default().WithFields(map[string]any{
"kind": "ingress",
"ingress": cfg.Name,
})),
)
} }
var rules []xingress.Rule var rules []xingress.Rule
@ -481,13 +445,7 @@ func ParseRecorder(cfg *config.RecorderConfig) (r recorder.Recorder) {
if err != nil { if err != nil {
logger.Default().Error(err) logger.Default().Error(err)
} }
return xrecorder.NewPluginRecorder( return xrecorder.NewGRPCPluginRecorder(cfg.Name, c)
xrecorder.PluginConnOption(c),
xrecorder.LoggerOption(logger.Default().WithFields(map[string]any{
"kind": "recorder",
"recorder": cfg.Name,
})),
)
} }
if cfg.File != nil && cfg.File.Path != "" { if cfg.File != nil && cfg.File.Path != "" {

16
connector/socks/v5/selector.go
View File

@ -30,12 +30,13 @@ func (s *clientSelector) Select(methods ...uint8) (method uint8) {
return return
} }
func (s *clientSelector) OnSelected(method uint8, conn net.Conn) (net.Conn, error) { func (s *clientSelector) OnSelected(method uint8, conn net.Conn) (string, net.Conn, error) {
s.logger.Debug("method selected: ", method) s.logger.Debug("method selected: ", method)
switch method { switch method {
case socks.MethodTLS: case socks.MethodTLS:
conn = tls.Client(conn, s.TLSConfig) conn = tls.Client(conn, s.TLSConfig)
return "", conn, nil
case gosocks5.MethodUserPass, socks.MethodTLSAuth: case gosocks5.MethodUserPass, socks.MethodTLSAuth:
if method == socks.MethodTLSAuth { if method == socks.MethodTLSAuth {
@ -52,22 +53,25 @@ func (s *clientSelector) OnSelected(method uint8, conn net.Conn) (net.Conn, erro
s.logger.Trace(req) s.logger.Trace(req)
if err := req.Write(conn); err != nil { if err := req.Write(conn); err != nil {
s.logger.Error(err) s.logger.Error(err)
return nil, err return "", nil, err
} }
resp, err := gosocks5.ReadUserPassResponse(conn) resp, err := gosocks5.ReadUserPassResponse(conn)
if err != nil { if err != nil {
s.logger.Error(err) s.logger.Error(err)
return nil, err return "", nil, err
} }
s.logger.Trace(resp) s.logger.Trace(resp)
if resp.Status != gosocks5.Succeeded { if resp.Status != gosocks5.Succeeded {
return nil, gosocks5.ErrAuthFailure return "", nil, gosocks5.ErrAuthFailure
} }
return "", conn, nil
case gosocks5.MethodNoAcceptable: case gosocks5.MethodNoAcceptable:
return nil, gosocks5.ErrBadMethod return "", nil, gosocks5.ErrBadMethod
default:
return "", nil, gosocks5.ErrBadFormat
} }
return conn, nil
} }

6
go.mod
View File

@ -7,9 +7,9 @@ require (
github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
github.com/gin-contrib/cors v1.3.1 github.com/gin-contrib/cors v1.3.1
github.com/gin-gonic/gin v1.9.1 github.com/gin-gonic/gin v1.9.1
github.com/go-gost/core v0.0.0-20230918131208-c258a114c40b github.com/go-gost/core v0.0.0-20230919141921-a1419ec2f4d1
github.com/go-gost/gosocks4 v0.0.1 github.com/go-gost/gosocks4 v0.0.1
github.com/go-gost/gosocks5 v0.3.1-0.20211109033403-d894d75b7f09 github.com/go-gost/gosocks5 v0.4.0
github.com/go-gost/plugin v0.0.0-20230418123101-d221a4ec9a98 github.com/go-gost/plugin v0.0.0-20230418123101-d221a4ec9a98
github.com/go-gost/relay v0.4.1-0.20230916134211-828f314ddfe7 github.com/go-gost/relay v0.4.1-0.20230916134211-828f314ddfe7
github.com/go-gost/tls-dissector v0.0.2-0.20220408131628-aac992c27451 github.com/go-gost/tls-dissector v0.0.2-0.20220408131628-aac992c27451
@ -86,7 +86,7 @@ require (
github.com/pion/transport/v2 v2.0.2 // indirect github.com/pion/transport/v2 v2.0.2 // indirect
github.com/pion/udp/v2 v2.0.1 // indirect github.com/pion/udp/v2 v2.0.1 // indirect
github.com/pkg/errors v0.9.1 // indirect github.com/pkg/errors v0.9.1 // indirect
github.com/prometheus/client_model v0.3.0 // indirect github.com/prometheus/client_model v0.4.0 // indirect
github.com/prometheus/common v0.37.0 // indirect github.com/prometheus/common v0.37.0 // indirect
github.com/prometheus/procfs v0.8.0 // indirect github.com/prometheus/procfs v0.8.0 // indirect
github.com/quic-go/qpack v0.4.0 // indirect github.com/quic-go/qpack v0.4.0 // indirect

10
go.sum
View File

@ -101,10 +101,12 @@ github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2
github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
github.com/go-gost/core v0.0.0-20230918131208-c258a114c40b h1:kqALaNXbbYyKFlcLj3ODsuvzplRxypnJOhMINSiM8sk= github.com/go-gost/core v0.0.0-20230918131208-c258a114c40b h1:kqALaNXbbYyKFlcLj3ODsuvzplRxypnJOhMINSiM8sk=
github.com/go-gost/core v0.0.0-20230918131208-c258a114c40b/go.mod h1:db6lBY+DkC3ct4OJfclsKnQwQmcv1B9NnMnpI2MNUwY= github.com/go-gost/core v0.0.0-20230918131208-c258a114c40b/go.mod h1:db6lBY+DkC3ct4OJfclsKnQwQmcv1B9NnMnpI2MNUwY=
github.com/go-gost/core v0.0.0-20230919141921-a1419ec2f4d1 h1:tV5Ra3bBU5R9Mcg9lGzMQeVeLcnCFEEiE6UNnx6F46k=
github.com/go-gost/core v0.0.0-20230919141921-a1419ec2f4d1/go.mod h1:ndkgWVYRLwupVaFFWv8ML1Nr8tD3xhHK245PLpUDg4E=
github.com/go-gost/gosocks4 v0.0.1 h1:+k1sec8HlELuQV7rWftIkmy8UijzUt2I6t+iMPlGB2s= github.com/go-gost/gosocks4 v0.0.1 h1:+k1sec8HlELuQV7rWftIkmy8UijzUt2I6t+iMPlGB2s=
github.com/go-gost/gosocks4 v0.0.1/go.mod h1:3B6L47HbU/qugDg4JnoFPHgJXE43Inz8Bah1QaN9qCc= github.com/go-gost/gosocks4 v0.0.1/go.mod h1:3B6L47HbU/qugDg4JnoFPHgJXE43Inz8Bah1QaN9qCc=
github.com/go-gost/gosocks5 v0.3.1-0.20211109033403-d894d75b7f09 h1:A95M6UWcfZgOuJkQ7QLfG0Hs5peWIUSysCDNz4pfe04= github.com/go-gost/gosocks5 v0.4.0 h1:EIrOEkpJez4gwHrMa33frA+hHXJyevjp47thpMQsJzI=
github.com/go-gost/gosocks5 v0.3.1-0.20211109033403-d894d75b7f09/go.mod h1:1G6I7HP7VFVxveGkoK8mnprnJqSqJjdcASKsdUn4Pp4= github.com/go-gost/gosocks5 v0.4.0/go.mod h1:1G6I7HP7VFVxveGkoK8mnprnJqSqJjdcASKsdUn4Pp4=
github.com/go-gost/plugin v0.0.0-20230418123101-d221a4ec9a98 h1:dOtNcxZbMDwtowa8b91nK2JcTL1lG0EIv0sXqSbvTc4= github.com/go-gost/plugin v0.0.0-20230418123101-d221a4ec9a98 h1:dOtNcxZbMDwtowa8b91nK2JcTL1lG0EIv0sXqSbvTc4=
github.com/go-gost/plugin v0.0.0-20230418123101-d221a4ec9a98/go.mod h1:IGQawP0E9B36VZ0AfDOpBK23bW4rOSiHtnU7mtafpAM= github.com/go-gost/plugin v0.0.0-20230418123101-d221a4ec9a98/go.mod h1:IGQawP0E9B36VZ0AfDOpBK23bW4rOSiHtnU7mtafpAM=
github.com/go-gost/relay v0.4.1-0.20230916134211-828f314ddfe7 h1:qAG1OyjvdA5h221CfFSS3J359V3d2E7dJWyP29QoDSI= github.com/go-gost/relay v0.4.1-0.20230916134211-828f314ddfe7 h1:qAG1OyjvdA5h221CfFSS3J359V3d2E7dJWyP29QoDSI=
@ -311,8 +313,8 @@ github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:
github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
github.com/prometheus/client_model v0.2.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= github.com/prometheus/client_model v0.2.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
github.com/prometheus/client_model v0.3.0 h1:UBgGFHqYdG/TPFD1B1ogZywDqEkwp3fBMvqdiQ7Xew4= github.com/prometheus/client_model v0.4.0 h1:5lQXD3cAg1OXBf4Wq03gTrXHeaV0TQvGfUooCfx1yqY=
github.com/prometheus/client_model v0.3.0/go.mod h1:LDGWKZIo7rky3hgvBe+caln+Dr3dPggB5dvjtD7w9+w= github.com/prometheus/client_model v0.4.0/go.mod h1:oMQmHW1/JoDwqLtg57MGgP/Fb1CJEYF2imWWhWtMkYU=
github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4= github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
github.com/prometheus/common v0.10.0/go.mod h1:Tlit/dnDKsSWFlCLTWaA1cyBgKHSMdTB80sz/V91rCo= github.com/prometheus/common v0.10.0/go.mod h1:Tlit/dnDKsSWFlCLTWaA1cyBgKHSMdTB80sz/V91rCo=
github.com/prometheus/common v0.26.0/go.mod h1:M7rCNAaPfAosfx8veZJCuw84e35h3Cfd9VFqTh1DIvc= github.com/prometheus/common v0.26.0/go.mod h1:M7rCNAaPfAosfx8veZJCuw84e35h3Cfd9VFqTh1DIvc=

5
handler/forward/local/handler.go
View File

@ -18,6 +18,7 @@ import (
"github.com/go-gost/core/logger" "github.com/go-gost/core/logger"
md "github.com/go-gost/core/metadata" md "github.com/go-gost/core/metadata"
xnet "github.com/go-gost/x/internal/net" xnet "github.com/go-gost/x/internal/net"
auth_util "github.com/go-gost/x/internal/util/auth"
"github.com/go-gost/x/internal/util/forward" "github.com/go-gost/x/internal/util/forward"
"github.com/go-gost/x/registry" "github.com/go-gost/x/registry"
) )
@ -208,12 +209,14 @@ func (h *forwardHandler) handleHTTP(ctx context.Context, rw io.ReadWriter, log l
if auther := target.Options().Auther; auther != nil { if auther := target.Options().Auther; auther != nil {
username, password, _ := req.BasicAuth() username, password, _ := req.BasicAuth()
if !auther.Authenticate(ctx, username, password) { ok, id := auther.Authenticate(ctx, username, password)
if !ok {
resp.StatusCode = http.StatusUnauthorized resp.StatusCode = http.StatusUnauthorized
resp.Header.Set("WWW-Authenticate", "Basic") resp.Header.Set("WWW-Authenticate", "Basic")
log.Warnf("node %s(%s) 401 unauthorized", target.Name, target.Addr) log.Warnf("node %s(%s) 401 unauthorized", target.Name, target.Addr)
return resp.Write(rw) return resp.Write(rw)
} }
ctx = auth_util.ContextWithID(ctx, auth_util.ID(id))
} }
var cc net.Conn var cc net.Conn

5
handler/forward/remote/handler.go
View File

@ -19,6 +19,7 @@ import (
mdata "github.com/go-gost/core/metadata" mdata "github.com/go-gost/core/metadata"
mdutil "github.com/go-gost/core/metadata/util" mdutil "github.com/go-gost/core/metadata/util"
xnet "github.com/go-gost/x/internal/net" xnet "github.com/go-gost/x/internal/net"
auth_util "github.com/go-gost/x/internal/util/auth"
"github.com/go-gost/x/internal/util/forward" "github.com/go-gost/x/internal/util/forward"
"github.com/go-gost/x/registry" "github.com/go-gost/x/registry"
) )
@ -205,12 +206,14 @@ func (h *forwardHandler) handleHTTP(ctx context.Context, rw io.ReadWriter, log l
if auther := target.Options().Auther; auther != nil { if auther := target.Options().Auther; auther != nil {
username, password, _ := req.BasicAuth() username, password, _ := req.BasicAuth()
if !auther.Authenticate(ctx, username, password) { ok, id := auther.Authenticate(ctx, username, password)
if !ok {
resp.StatusCode = http.StatusUnauthorized resp.StatusCode = http.StatusUnauthorized
resp.Header.Set("WWW-Authenticate", "Basic") resp.Header.Set("WWW-Authenticate", "Basic")
log.Warnf("node %s(%s) 401 unauthorized", target.Name, target.Addr) log.Warnf("node %s(%s) 401 unauthorized", target.Name, target.Addr)
return resp.Write(rw) return resp.Write(rw)
} }
ctx = auth_util.ContextWithID(ctx, auth_util.ID(id))
} }
var cc net.Conn var cc net.Conn

20
handler/http/handler.go
View File

@ -22,6 +22,7 @@ import (
"github.com/go-gost/core/logger" "github.com/go-gost/core/logger"
md "github.com/go-gost/core/metadata" md "github.com/go-gost/core/metadata"
netpkg "github.com/go-gost/x/internal/net" netpkg "github.com/go-gost/x/internal/net"
auth_util "github.com/go-gost/x/internal/util/auth"
sx "github.com/go-gost/x/internal/util/selector" sx "github.com/go-gost/x/internal/util/selector"
"github.com/go-gost/x/registry" "github.com/go-gost/x/registry"
) )
@ -145,6 +146,12 @@ func (h *httpHandler) handleRequest(ctx context.Context, conn net.Conn, req *htt
resp.Header = http.Header{} resp.Header = http.Header{}
} }
ok, id := h.authenticate(ctx, conn, req, resp, log)
if !ok {
return nil
}
ctx = auth_util.ContextWithID(ctx, auth_util.ID(id))
if h.options.Bypass != nil && h.options.Bypass.Contains(ctx, addr) { if h.options.Bypass != nil && h.options.Bypass.Contains(ctx, addr) {
resp.StatusCode = http.StatusForbidden resp.StatusCode = http.StatusForbidden
@ -157,10 +164,6 @@ func (h *httpHandler) handleRequest(ctx context.Context, conn net.Conn, req *htt
return resp.Write(conn) return resp.Write(conn)
} }
if !h.authenticate(ctx, conn, req, resp, log) {
return nil
}
if network == "udp" { if network == "udp" {
return h.handleUDP(ctx, conn, log) return h.handleUDP(ctx, conn, log)
} }
@ -266,10 +269,13 @@ func (h *httpHandler) basicProxyAuth(proxyAuth string, log logger.Logger) (usern
return cs[:s], cs[s+1:], true return cs[:s], cs[s+1:], true
} }
func (h *httpHandler) authenticate(ctx context.Context, conn net.Conn, req *http.Request, resp *http.Response, log logger.Logger) (ok bool) { func (h *httpHandler) authenticate(ctx context.Context, conn net.Conn, req *http.Request, resp *http.Response, log logger.Logger) (ok bool, token string) {
u, p, _ := h.basicProxyAuth(req.Header.Get("Proxy-Authorization"), log) u, p, _ := h.basicProxyAuth(req.Header.Get("Proxy-Authorization"), log)
if h.options.Auther == nil || h.options.Auther.Authenticate(ctx, u, p) { if h.options.Auther == nil {
return true return true, ""
}
if ok, token = h.options.Auther.Authenticate(ctx, u, p); ok {
return
} }
pr := h.md.probeResistance pr := h.md.probeResistance

26
handler/http2/handler.go
View File

@ -24,6 +24,7 @@ import (
md "github.com/go-gost/core/metadata" md "github.com/go-gost/core/metadata"
xio "github.com/go-gost/x/internal/io" xio "github.com/go-gost/x/internal/io"
netpkg "github.com/go-gost/x/internal/net" netpkg "github.com/go-gost/x/internal/net"
auth_util "github.com/go-gost/x/internal/util/auth"
sx "github.com/go-gost/x/internal/util/selector" sx "github.com/go-gost/x/internal/util/selector"
"github.com/go-gost/x/registry" "github.com/go-gost/x/registry"
) )
@ -138,12 +139,6 @@ func (h *http2Handler) roundTrip(ctx context.Context, w http.ResponseWriter, req
w.Header().Set(k, h.md.header.Get(k)) w.Header().Set(k, h.md.header.Get(k))
} }
if h.options.Bypass != nil && h.options.Bypass.Contains(ctx, addr) {
w.WriteHeader(http.StatusForbidden)
log.Debug("bypass: ", addr)
return nil
}
resp := &http.Response{ resp := &http.Response{
ProtoMajor: 2, ProtoMajor: 2,
ProtoMinor: 0, ProtoMinor: 0,
@ -151,7 +146,15 @@ func (h *http2Handler) roundTrip(ctx context.Context, w http.ResponseWriter, req
Body: io.NopCloser(bytes.NewReader([]byte{})), Body: io.NopCloser(bytes.NewReader([]byte{})),
} }
if !h.authenticate(ctx, w, req, resp, log) { ok, id := h.authenticate(ctx, w, req, resp, log)
if !ok {
return nil
}
ctx = auth_util.ContextWithID(ctx, auth_util.ID(id))
if h.options.Bypass != nil && h.options.Bypass.Contains(ctx, addr) {
w.WriteHeader(http.StatusForbidden)
log.Debug("bypass: ", addr)
return nil return nil
} }
@ -251,10 +254,13 @@ func (h *http2Handler) basicProxyAuth(proxyAuth string) (username, password stri
return cs[:s], cs[s+1:], true return cs[:s], cs[s+1:], true
} }
func (h *http2Handler) authenticate(ctx context.Context, w http.ResponseWriter, r *http.Request, resp *http.Response, log logger.Logger) (ok bool) { func (h *http2Handler) authenticate(ctx context.Context, w http.ResponseWriter, r *http.Request, resp *http.Response, log logger.Logger) (ok bool, token string) {
u, p, _ := h.basicProxyAuth(r.Header.Get("Proxy-Authorization")) u, p, _ := h.basicProxyAuth(r.Header.Get("Proxy-Authorization"))
if h.options.Auther == nil || h.options.Auther.Authenticate(ctx, u, p) { if h.options.Auther == nil {
return true return true, ""
}
if ok, token = h.options.Auther.Authenticate(ctx, u, p); ok {
return
} }
pr := h.md.probeResistance pr := h.md.probeResistance

8
handler/relay/handler.go
View File

@ -15,6 +15,7 @@ import (
"github.com/go-gost/core/service" "github.com/go-gost/core/service"
"github.com/go-gost/relay" "github.com/go-gost/relay"
xnet "github.com/go-gost/x/internal/net" xnet "github.com/go-gost/x/internal/net"
auth_util "github.com/go-gost/x/internal/util/auth"
"github.com/go-gost/x/registry" "github.com/go-gost/x/registry"
xservice "github.com/go-gost/x/service" xservice "github.com/go-gost/x/service"
) )
@ -200,12 +201,15 @@ func (h *relayHandler) Handle(ctx context.Context, conn net.Conn, opts ...handle
log = log.WithFields(map[string]any{"user": user}) log = log.WithFields(map[string]any{"user": user})
} }
if h.options.Auther != nil && if h.options.Auther != nil {
!h.options.Auther.Authenticate(ctx, user, pass) { ok, id := h.options.Auther.Authenticate(ctx, user, pass)
if !ok {
resp.Status = relay.StatusUnauthorized resp.Status = relay.StatusUnauthorized
resp.WriteTo(conn) resp.WriteTo(conn)
return ErrUnauthorized return ErrUnauthorized
} }
ctx = auth_util.ContextWithID(ctx, auth_util.ID(id))
}
network := networkID.String() network := networkID.String()
if (req.Cmd & relay.FUDP) == relay.FUDP { if (req.Cmd & relay.FUDP) == relay.FUDP {

8
handler/socks/v4/handler.go
View File

@ -12,6 +12,7 @@ import (
md "github.com/go-gost/core/metadata" md "github.com/go-gost/core/metadata"
"github.com/go-gost/gosocks4" "github.com/go-gost/gosocks4"
netpkg "github.com/go-gost/x/internal/net" netpkg "github.com/go-gost/x/internal/net"
auth_util "github.com/go-gost/x/internal/util/auth"
sx "github.com/go-gost/x/internal/util/selector" sx "github.com/go-gost/x/internal/util/selector"
"github.com/go-gost/x/registry" "github.com/go-gost/x/registry"
) )
@ -90,12 +91,15 @@ func (h *socks4Handler) Handle(ctx context.Context, conn net.Conn, opts ...handl
conn.SetReadDeadline(time.Time{}) conn.SetReadDeadline(time.Time{})
if h.options.Auther != nil && if h.options.Auther != nil {
!h.options.Auther.Authenticate(ctx, string(req.Userid), "") { ok, id := h.options.Auther.Authenticate(ctx, string(req.Userid), "")
if !ok {
resp := gosocks4.NewReply(gosocks4.RejectedUserid, nil) resp := gosocks4.NewReply(gosocks4.RejectedUserid, nil)
log.Trace(resp) log.Trace(resp)
return resp.Write(conn) return resp.Write(conn)
} }
ctx = auth_util.ContextWithID(ctx, auth_util.ID(id))
}
switch req.Cmd { switch req.Cmd {
case gosocks4.CmdConnect: case gosocks4.CmdConnect:

9
handler/socks/v5/handler.go
View File

@ -10,6 +10,7 @@ import (
"github.com/go-gost/core/handler" "github.com/go-gost/core/handler"
md "github.com/go-gost/core/metadata" md "github.com/go-gost/core/metadata"
"github.com/go-gost/gosocks5" "github.com/go-gost/gosocks5"
auth_util "github.com/go-gost/x/internal/util/auth"
"github.com/go-gost/x/internal/util/socks" "github.com/go-gost/x/internal/util/socks"
"github.com/go-gost/x/registry" "github.com/go-gost/x/registry"
) )
@ -86,13 +87,17 @@ func (h *socks5Handler) Handle(ctx context.Context, conn net.Conn, opts ...handl
conn.SetReadDeadline(time.Now().Add(h.md.readTimeout)) conn.SetReadDeadline(time.Now().Add(h.md.readTimeout))
} }
conn = gosocks5.ServerConn(conn, h.selector) sc := gosocks5.ServerConn(conn, h.selector)
req, err := gosocks5.ReadRequest(conn) req, err := gosocks5.ReadRequest(sc)
if err != nil { if err != nil {
log.Error(err) log.Error(err)
return err return err
} }
log.Trace(req) log.Trace(req)
ctx = auth_util.ContextWithID(ctx, auth_util.ID(sc.ID()))
conn = sc
conn.SetReadDeadline(time.Time{}) conn.SetReadDeadline(time.Time{})
address := req.Addr.String() address := req.Addr.String()

26
handler/socks/v5/selector.go
View File

@ -46,11 +46,12 @@ func (s *serverSelector) Select(methods ...uint8) (method uint8) {
return return
} }
func (s *serverSelector) OnSelected(method uint8, conn net.Conn) (net.Conn, error) { func (s *serverSelector) OnSelected(method uint8, conn net.Conn) (string, net.Conn, error) {
s.logger.Debugf("%d %d", gosocks5.Ver5, method) s.logger.Debugf("%d %d", gosocks5.Ver5, method)
switch method { switch method {
case socks.MethodTLS: case socks.MethodTLS:
conn = tls.Server(conn, s.TLSConfig) conn = tls.Server(conn, s.TLSConfig)
return "", conn, nil
case gosocks5.MethodUserPass, socks.MethodTLSAuth: case gosocks5.MethodUserPass, socks.MethodTLSAuth:
if method == socks.MethodTLSAuth { if method == socks.MethodTLSAuth {
@ -60,32 +61,37 @@ func (s *serverSelector) OnSelected(method uint8, conn net.Conn) (net.Conn, erro
req, err := gosocks5.ReadUserPassRequest(conn) req, err := gosocks5.ReadUserPassRequest(conn)
if err != nil { if err != nil {
s.logger.Error(err) s.logger.Error(err)
return nil, err return "", nil, err
} }
s.logger.Trace(req) s.logger.Trace(req)
if s.Authenticator != nil && var id string
!s.Authenticator.Authenticate(context.Background(), req.Username, req.Password) { if s.Authenticator != nil {
var ok bool
ok, id = s.Authenticator.Authenticate(context.Background(), req.Username, req.Password)
if !ok {
resp := gosocks5.NewUserPassResponse(gosocks5.UserPassVer, gosocks5.Failure) resp := gosocks5.NewUserPassResponse(gosocks5.UserPassVer, gosocks5.Failure)
if err := resp.Write(conn); err != nil { if err := resp.Write(conn); err != nil {
s.logger.Error(err) s.logger.Error(err)
return nil, err return "", nil, err
} }
s.logger.Info(resp) s.logger.Info(resp)
return nil, gosocks5.ErrAuthFailure return "", nil, gosocks5.ErrAuthFailure
}
} }
resp := gosocks5.NewUserPassResponse(gosocks5.UserPassVer, gosocks5.Succeeded) resp := gosocks5.NewUserPassResponse(gosocks5.UserPassVer, gosocks5.Succeeded)
s.logger.Trace(resp) s.logger.Trace(resp)
if err := resp.Write(conn); err != nil { if err := resp.Write(conn); err != nil {
s.logger.Error(err) s.logger.Error(err)
return nil, err return "", nil, err
} }
return id, conn, nil
case gosocks5.MethodNoAcceptable: case gosocks5.MethodNoAcceptable:
return nil, gosocks5.ErrBadMethod return "", nil, gosocks5.ErrBadMethod
default:
return "", nil, gosocks5.ErrBadFormat
} }
return conn, nil
} }

2
handler/tun/server.go
View File

@ -135,7 +135,7 @@ func (h *tunHandler) transportServer(ctx context.Context, tun io.ReadWriter, con
ok := true ok := true
key := bytes.TrimRight((*b)[4:20], "\x00") key := bytes.TrimRight((*b)[4:20], "\x00")
for _, ip := range peerIPs { for _, ip := range peerIPs {
if ok = auther.Authenticate(ctx, ip.String(), string(key)); !ok { if ok, _ = auther.Authenticate(ctx, ip.String(), string(key)); !ok {
break break
} }
} }

47
hosts/plugin.go
View File

@ -2,39 +2,39 @@ package hosts
import ( import (
"context" "context"
"io"
"net" "net"
"github.com/go-gost/core/hosts" "github.com/go-gost/core/hosts"
"github.com/go-gost/core/logger"
"github.com/go-gost/plugin/hosts/proto" "github.com/go-gost/plugin/hosts/proto"
xlogger "github.com/go-gost/x/logger" auth_util "github.com/go-gost/x/internal/util/auth"
"google.golang.org/grpc"
) )
type pluginHostMapper struct { type grpcPluginHostMapper struct {
conn grpc.ClientConnInterface
client proto.HostMapperClient client proto.HostMapperClient
options options log logger.Logger
} }
// NewPluginHostMapper creates a plugin HostMapper. // NewGRPCPluginHostMapper creates a HostMapper plugin based on gRPC.
func NewPluginHostMapper(opts ...Option) hosts.HostMapper { func NewGRPCPluginHostMapper(name string, conn grpc.ClientConnInterface) hosts.HostMapper {
var options options p := &grpcPluginHostMapper{
for _, opt := range opts { conn: conn,
opt(&options) log: logger.Default().WithFields(map[string]any{
"kind": "hosts",
"hosts": name,
}),
} }
if options.logger == nil { if conn != nil {
options.logger = xlogger.Nop() p.client = proto.NewHostMapperClient(conn)
}
p := &pluginHostMapper{
options: options,
}
if options.client != nil {
p.client = proto.NewHostMapperClient(options.client)
} }
return p return p
} }
func (p *pluginHostMapper) Lookup(ctx context.Context, network, host string) (ips []net.IP, ok bool) { func (p *grpcPluginHostMapper) Lookup(ctx context.Context, network, host string) (ips []net.IP, ok bool) {
p.options.logger.Debugf("lookup %s/%s", host, network) p.log.Debugf("lookup %s/%s", host, network)
if p.client == nil { if p.client == nil {
return return
@ -44,9 +44,10 @@ func (p *pluginHostMapper) Lookup(ctx context.Context, network, host string) (ip
&proto.LookupRequest{ &proto.LookupRequest{
Network: network, Network: network,
Host: host, Host: host,
Client: string(auth_util.IDFromContext(ctx)),
}) })
if err != nil { if err != nil {
p.options.logger.Error(err) p.log.Error(err)
return return
} }
for _, s := range r.Ips { for _, s := range r.Ips {
@ -58,9 +59,9 @@ func (p *pluginHostMapper) Lookup(ctx context.Context, network, host string) (ip
return return
} }
func (p *pluginHostMapper) Close() error { func (p *grpcPluginHostMapper) Close() error {
if p.options.client != nil { if closer, ok := p.conn.(io.Closer); ok {
return p.options.client.Close() return closer.Close()
} }
return nil return nil
} }

43
ingress/plugin.go
View File

@ -2,37 +2,36 @@ package ingress
import ( import (
"context" "context"
"io"
ingress_pkg "github.com/go-gost/core/ingress" ingress_pkg "github.com/go-gost/core/ingress"
"github.com/go-gost/core/logger"
"github.com/go-gost/plugin/ingress/proto" "github.com/go-gost/plugin/ingress/proto"
xlogger "github.com/go-gost/x/logger" "google.golang.org/grpc"
) )
type pluginIngress struct { type grpcPluginIngress struct {
conn grpc.ClientConnInterface
client proto.IngressClient client proto.IngressClient
options options log logger.Logger
} }
// NewPluginIngress creates a plugin ingress. // NewGRPCPluginIngress creates a ingress plugin based on gRPC.
func NewPluginIngress(opts ...Option) ingress_pkg.Ingress { func NewGRPCPluginIngress(name string, conn grpc.ClientConnInterface) ingress_pkg.Ingress {
var options options p := &grpcPluginIngress{
for _, opt := range opts { conn: conn,
opt(&options) log: logger.Default().WithFields(map[string]any{
"kind": "ingress",
"ingress": name,
}),
} }
if options.logger == nil { if conn != nil {
options.logger = xlogger.Nop() p.client = proto.NewIngressClient(conn)
}
p := &pluginIngress{
options: options,
}
if options.client != nil {
p.client = proto.NewIngressClient(options.client)
} }
return p return p
} }
func (p *pluginIngress) Get(ctx context.Context, host string) string { func (p *grpcPluginIngress) Get(ctx context.Context, host string) string {
if p.client == nil { if p.client == nil {
return "" return ""
} }
@ -42,15 +41,15 @@ func (p *pluginIngress) Get(ctx context.Context, host string) string {
Host: host, Host: host,
}) })
if err != nil { if err != nil {
p.options.logger.Error(err) p.log.Error(err)
return "" return ""
} }
return r.GetEndpoint() return r.GetEndpoint()
} }
func (p *pluginIngress) Close() error { func (p *grpcPluginIngress) Close() error {
if p.options.client != nil { if closer, ok := p.conn.(io.Closer); ok {
return p.options.client.Close() return closer.Close()
} }
return nil return nil
} }

22
internal/util/auth/key.go Normal file
View File

@ -0,0 +1,22 @@
package auth
import (
"context"
)
type idKey struct{}
type ID string
var (
clientIDKey = &idKey{}
)
func ContextWithID(ctx context.Context, id ID) context.Context {
return context.WithValue(ctx, clientIDKey, id)
}
func IDFromContext(ctx context.Context) ID {
v, _ := ctx.Value(clientIDKey).(ID)
return v
}

2
internal/util/ssh/ssh.go
View File

@ -27,7 +27,7 @@ func PasswordCallback(au auth.Authenticator) PasswordCallbackFunc {
return nil return nil
} }
return func(conn ssh.ConnMetadata, password []byte) (*ssh.Permissions, error) { return func(conn ssh.ConnMetadata, password []byte) (*ssh.Permissions, error) {
if au.Authenticate(context.Background(), conn.User(), string(password)) { if ok, _ := au.Authenticate(context.Background(), conn.User(), string(password)); ok {
return nil, nil return nil, nil
} }
return nil, fmt.Errorf("password rejected for %s", conn.User()) return nil, fmt.Errorf("password rejected for %s", conn.User())

60
recorder/plugin.go
View File

@ -2,58 +2,36 @@ package recorder
import ( import (
"context" "context"
"io"
"github.com/go-gost/core/logger" "github.com/go-gost/core/logger"
"github.com/go-gost/core/recorder" "github.com/go-gost/core/recorder"
"github.com/go-gost/plugin/recorder/proto" "github.com/go-gost/plugin/recorder/proto"
xlogger "github.com/go-gost/x/logger"
"google.golang.org/grpc" "google.golang.org/grpc"
) )
type pluginOptions struct { type grpcPluginRecorder struct {
client *grpc.ClientConn conn grpc.ClientConnInterface
logger logger.Logger
}
type PluginOption func(opts *pluginOptions)
func PluginConnOption(c *grpc.ClientConn) PluginOption {
return func(opts *pluginOptions) {
opts.client = c
}
}
func LoggerOption(logger logger.Logger) PluginOption {
return func(opts *pluginOptions) {
opts.logger = logger
}
}
type pluginRecorder struct {
client proto.RecorderClient client proto.RecorderClient
options pluginOptions log logger.Logger
} }
// NewPluginRecorder creates a plugin recorder. // NewGRPCPluginRecorder creates a plugin recorder.
func NewPluginRecorder(opts ...PluginOption) recorder.Recorder { func NewGRPCPluginRecorder(name string, conn grpc.ClientConnInterface) recorder.Recorder {
var options pluginOptions p := &grpcPluginRecorder{
for _, opt := range opts { conn: conn,
opt(&options) log: logger.Default().WithFields(map[string]any{
"kind": "recorder",
"recorder": name,
}),
} }
if options.logger == nil { if conn != nil {
options.logger = xlogger.Nop() p.client = proto.NewRecorderClient(conn)
}
p := &pluginRecorder{
options: options,
}
if options.client != nil {
p.client = proto.NewRecorderClient(options.client)
} }
return p return p
} }
func (p *pluginRecorder) Record(ctx context.Context, b []byte) error { func (p *grpcPluginRecorder) Record(ctx context.Context, b []byte) error {
if p.client == nil { if p.client == nil {
return nil return nil
} }
@ -63,15 +41,15 @@ func (p *pluginRecorder) Record(ctx context.Context, b []byte) error {
Data: b, Data: b,
}) })
if err != nil { if err != nil {
p.options.logger.Error(err) p.log.Error(err)
return err return err
} }
return nil return nil
} }
func (p *pluginRecorder) Close() error { func (p *grpcPluginRecorder) Close() error {
if p.options.client != nil { if closer, ok := p.conn.(io.Closer); ok {
return p.options.client.Close() return closer.Close()
} }
return nil return nil
} }

4
registry/auther.go
View File

@ -30,10 +30,10 @@ type autherWrapper struct {
r *autherRegistry r *autherRegistry
} }
func (w *autherWrapper) Authenticate(ctx context.Context, user, password string) bool { func (w *autherWrapper) Authenticate(ctx context.Context, user, password string) (bool, string) {
v := w.r.get(w.name) v := w.r.get(w.name)
if v == nil { if v == nil {
return true return true, ""
} }
return v.Authenticate(ctx, user, password) return v.Authenticate(ctx, user, password)
} }

47
resolver/plugin.go
View File

@ -2,39 +2,39 @@ package resolver
import ( import (
"context" "context"
"io"
"net" "net"
"github.com/go-gost/core/logger"
resolver_pkg "github.com/go-gost/core/resolver" resolver_pkg "github.com/go-gost/core/resolver"
"github.com/go-gost/plugin/resolver/proto" "github.com/go-gost/plugin/resolver/proto"
xlogger "github.com/go-gost/x/logger" auth_util "github.com/go-gost/x/internal/util/auth"
"google.golang.org/grpc"
) )
type pluginResolver struct { type grpcPluginResolver struct {
conn grpc.ClientConnInterface
client proto.ResolverClient client proto.ResolverClient
options options log logger.Logger
} }
// NewPluginResolver creates a plugin Resolver. // NewGRPCPluginResolver creates a Resolver plugin based on gRPC.
func NewPluginResolver(opts ...Option) (resolver_pkg.Resolver, error) { func NewGRPCPluginResolver(name string, conn grpc.ClientConnInterface) (resolver_pkg.Resolver, error) {
var options options p := &grpcPluginResolver{
for _, opt := range opts { conn: conn,
opt(&options) log: logger.Default().WithFields(map[string]any{
"kind": "resolver",
"resolver": name,
}),
} }
if options.logger == nil { if conn != nil {
options.logger = xlogger.Nop() p.client = proto.NewResolverClient(conn)
}
p := &pluginResolver{
options: options,
}
if options.client != nil {
p.client = proto.NewResolverClient(options.client)
} }
return p, nil return p, nil
} }
func (p *pluginResolver) Resolve(ctx context.Context, network, host string) (ips []net.IP, err error) { func (p *grpcPluginResolver) Resolve(ctx context.Context, network, host string) (ips []net.IP, err error) {
p.options.logger.Debugf("resolve %s/%s", host, network) p.log.Debugf("resolve %s/%s", host, network)
if p.client == nil { if p.client == nil {
return return
@ -44,9 +44,10 @@ func (p *pluginResolver) Resolve(ctx context.Context, network, host string) (ips
&proto.ResolveRequest{ &proto.ResolveRequest{
Network: network, Network: network,
Host: host, Host: host,
Client: string(auth_util.IDFromContext(ctx)),
}) })
if err != nil { if err != nil {
p.options.logger.Error(err) p.log.Error(err)
return return
} }
for _, s := range r.Ips { for _, s := range r.Ips {
@ -57,9 +58,9 @@ func (p *pluginResolver) Resolve(ctx context.Context, network, host string) (ips
return return
} }
func (p *pluginResolver) Close() error { func (p *grpcPluginResolver) Close() error {
if p.options.client != nil { if closer, ok := p.conn.(io.Closer); ok {
return p.options.client.Close() return closer.Close()
} }
return nil return nil
} }