x/bypass/bypass.go

package bypass

import (
	"bufio"
	"context"
	"io"
	"net"
	"strings"
	"sync"
	"time"

	"github.com/go-gost/core/bypass"
	"github.com/go-gost/core/logger"
	"github.com/go-gost/x/internal/loader"
	"github.com/go-gost/x/internal/matcher"
)

type options struct {
	whitelist   bool
	matchers    []string
	fileLoader  loader.Loader
	redisLoader loader.Loader
	httpLoader  loader.Loader
	period      time.Duration
	logger      logger.Logger
}

type Option func(opts *options)

func WhitelistOption(whitelist bool) Option {
	return func(opts *options) {
		opts.whitelist = whitelist
	}
}

func MatchersOption(matchers []string) Option {
	return func(opts *options) {
		opts.matchers = matchers
	}
}

func ReloadPeriodOption(period time.Duration) Option {
	return func(opts *options) {
		opts.period = period
	}
}

func FileLoaderOption(fileLoader loader.Loader) Option {
	return func(opts *options) {
		opts.fileLoader = fileLoader
	}
}

func RedisLoaderOption(redisLoader loader.Loader) Option {
	return func(opts *options) {
		opts.redisLoader = redisLoader
	}
}

func HTTPLoaderOption(httpLoader loader.Loader) Option {
	return func(opts *options) {
		opts.httpLoader = httpLoader
	}
}

func LoggerOption(logger logger.Logger) Option {
	return func(opts *options) {
		opts.logger = logger
	}
}

type localBypass struct {
	cidrMatcher     matcher.Matcher
	addrMatcher     matcher.Matcher
	wildcardMatcher matcher.Matcher
	cancelFunc      context.CancelFunc
	options         options
	mu              sync.RWMutex
}

// NewBypass creates and initializes a new Bypass.
// The rules will be reversed if the reverse option is true.
func NewBypass(opts ...Option) bypass.Bypass {
	var options options
	for _, opt := range opts {
		opt(&options)
	}

	ctx, cancel := context.WithCancel(context.TODO())

	bp := &localBypass{
		cancelFunc: cancel,
		options:    options,
	}

	if err := bp.reload(ctx); err != nil {
		options.logger.Warnf("reload: %v", err)
	}
	if bp.options.period > 0 {
		go bp.periodReload(ctx)
	}

	return bp
}

func (bp *localBypass) periodReload(ctx context.Context) error {
	period := bp.options.period
	if period < time.Second {
		period = time.Second
	}
	ticker := time.NewTicker(period)
	defer ticker.Stop()

	for {
		select {
		case <-ticker.C:
			if err := bp.reload(ctx); err != nil {
				bp.options.logger.Warnf("reload: %v", err)
				// return err
			}
		case <-ctx.Done():
			return ctx.Err()
		}
	}
}

func (bp *localBypass) reload(ctx context.Context) error {
	v, err := bp.load(ctx)
	if err != nil {
		return err
	}
	patterns := append(bp.options.matchers, v...)

	var addrs []string
	var inets []*net.IPNet
	var wildcards []string
	for _, pattern := range patterns {
		if _, inet, err := net.ParseCIDR(pattern); err == nil {
			inets = append(inets, inet)
			continue
		}
		if strings.ContainsAny(pattern, "*?") {
			wildcards = append(wildcards, pattern)
			continue
		}
		addrs = append(addrs, pattern)
	}

	bp.mu.Lock()
	defer bp.mu.Unlock()

	bp.cidrMatcher = matcher.CIDRMatcher(inets)
	bp.addrMatcher = matcher.AddrMatcher(addrs)
	bp.wildcardMatcher = matcher.WildcardMatcher(wildcards)

	return nil
}

func (bp *localBypass) load(ctx context.Context) (patterns []string, err error) {
	if bp.options.fileLoader != nil {
		if lister, ok := bp.options.fileLoader.(loader.Lister); ok {
			list, er := lister.List(ctx)
			if er != nil {
				bp.options.logger.Warnf("file loader: %v", er)
			}
			for _, s := range list {
				if line := bp.parseLine(s); line != "" {
					patterns = append(patterns, line)
				}
			}
		} else {
			r, er := bp.options.fileLoader.Load(ctx)
			if er != nil {
				bp.options.logger.Warnf("file loader: %v", er)
			}
			if v, _ := bp.parsePatterns(r); v != nil {
				patterns = append(patterns, v...)
			}
		}
	}
	if bp.options.redisLoader != nil {
		if lister, ok := bp.options.redisLoader.(loader.Lister); ok {
			list, er := lister.List(ctx)
			if er != nil {
				bp.options.logger.Warnf("redis loader: %v", er)
			}
			patterns = append(patterns, list...)
		} else {
			r, er := bp.options.redisLoader.Load(ctx)
			if er != nil {
				bp.options.logger.Warnf("redis loader: %v", er)
			}
			if v, _ := bp.parsePatterns(r); v != nil {
				patterns = append(patterns, v...)
			}
		}
	}
	if bp.options.httpLoader != nil {
		r, er := bp.options.httpLoader.Load(ctx)
		if er != nil {
			bp.options.logger.Warnf("http loader: %v", er)
		}
		if v, _ := bp.parsePatterns(r); v != nil {
			patterns = append(patterns, v...)
		}
	}

	bp.options.logger.Debugf("load items %d", len(patterns))
	return
}

func (bp *localBypass) parsePatterns(r io.Reader) (patterns []string, err error) {
	if r == nil {
		return
	}

	scanner := bufio.NewScanner(r)
	for scanner.Scan() {
		if line := bp.parseLine(scanner.Text()); line != "" {
			patterns = append(patterns, line)
		}
	}

	err = scanner.Err()
	return
}

func (bp *localBypass) Contains(ctx context.Context, network, addr string, opts ...bypass.Option) bool {
	if addr == "" || bp == nil {
		return false
	}

	matched := bp.matched(addr)

	b := !bp.options.whitelist && matched ||
		bp.options.whitelist && !matched
	if b {
		bp.options.logger.Debugf("bypass: %s", addr)
	}
	return b
}

func (bp *localBypass) parseLine(s string) string {
	if n := strings.IndexByte(s, '#'); n >= 0 {
		s = s[:n]
	}
	return strings.TrimSpace(s)
}

func (bp *localBypass) matched(addr string) bool {
	bp.mu.RLock()
	defer bp.mu.RUnlock()

	if bp.addrMatcher.Match(addr) {
		return true
	}

	host, _, _ := net.SplitHostPort(addr)
	if host == "" {
		host = addr
	}

	if ip := net.ParseIP(host); ip != nil {
		return bp.cidrMatcher.Match(host)
	}

	return bp.wildcardMatcher.Match(addr)
}

func (bp *localBypass) Close() error {
	bp.cancelFunc()
	if bp.options.fileLoader != nil {
		bp.options.fileLoader.Close()
	}
	if bp.options.redisLoader != nil {
		bp.options.redisLoader.Close()
	}
	return nil
}