3 Commits

Author	SHA1	Message	Date
ginuerzh	382d47ea12	fix: nil HTTP recorder ref in WebSocket goroutines, add tunnel loop detection ... - handler/http/websocket, forwarder/sniffer_ws, sniffing/sniffer_ws: nil ro2.HTTP in WebSocket copy goroutines to avoid data races on the shared HTTP recorder object - handler/tunnel/bind: remove ingress rule check that incorrectly overrode the endpoint host for non-matching ingress rules - handler/tunnel/entrypoint: add forwarding loop detection by checking Gost-Forwarded-Node header for the entrypoint's own node ID	2026-06-01 18:28:01 +08:00
ginuerzh	23b58ddd23	refactor(handler/http): extract Authenticator, SnifferBuilder, and normalizeRequest as testable units ... Extract three pure-logic components from httpHandler to eliminate I/O coupling from auth and sniffing construction, enabling synchronous unit tests and reducing per-request allocation in sniffAndHandle: - Authenticator struct with AuthResult return type — auth decisions no longer write to the connection; callers handle response I/O. Auth tests drop net.Pipe/goroutines for direct return-value assertions. - SnifferBuilder pre-built in Init and reused per-connection via Build(), replacing inline sniffing.Sniffer{} construction in sniffAndHandle. - normalizeRequest extracted to util.go with NormalizedRequest type, collapsing 20 lines of inline URL/normalisation into a single call. - knockMatch extracted as standalone pure function. - clampBodySize exported as ClampBodySize for cross-package use. - util_test.go with 22 tests covering utility functions. - helpers_test.go consolidates shared test fakes (logger, observer, conn).	2026-05-29 00:14:44 +08:00
ginuerzh	3246b39c93	refactor(handler/http): split handler monolith into 7 focused files with 96 unit tests ... Extract the 1024-line handler.go into concern-focused files: util.go — 5 pure functions (decodeServerName, basicProxyAuth, upgradeType, normalizeHostPort, buildConnectResponse) — 100% coverage auth.go — authenticate (5 probe-resistance strategies + knock) + checkRateLimit connect.go — handleConnect, sniffAndHandle, dial, setupTrafficLimiter proxy.go — handleProxy keep-alive loop, proxyRoundTrip, handleUpgradeResponse websocket.go — WebSocket frame sniffing/recording with rate-limited sampling udp.go — UDP-over-HTTP relay with SOCKS5 tunnel metadata.go — metadata struct, parseMetadata, probeResistance type Key improvements: - Transport injection (http.RoundTripper field) enables testing without real network - Nil Router guards in dial, handleUDP, and nil Addr guard in checkRateLimit - Pure functions converted from methods to package-level (no state dependency) - setupTrafficLimiter returns cleanup closure to preserve defer lifetime - handleConnect accepts caller's resp for correct recorder status capture - Comprehensive package doc with full request-flow documentation 96 tests: 100% on pure functions, 86% on metadata parsing, 55% overall (integration paths verified by e2e tests).	2026-05-28 23:06:37 +08:00