31878a72ec
- Add package-level architecture doc in handler.go covering: - NAT traversal reverse proxy architecture - CmdBind/CmdConnect roles and data flow - Connector lifecycle and waitClose semantics - Entrypoint protocol dispatch (first-byte sniffing) - SD fallback behavior - Add data-flow-oriented doc comments to all business files: - entrypoint.go: protocol dispatch, dial flow - connector.go: Connector/ConnectorPool semantics - dialer.go: two-phase dial strategy - tunnel.go: MaxWeight semantics, selection algorithm - bind.go: 6-step CmdBind flow - connect.go: CmdConnect flow with relay framing - ephttp.go, eptls.go, eprelay.go: per-protocol entrypoint flow - Fix observeStats: after successful error retry, also flush new events instead of skipping the current tick (handler.go:261-271) - Add test for observeStats retry-then-flush (handler_test.go)
128 lines
3.4 KiB
Go
128 lines
3.4 KiB
Go
package tunnel
|
|
|
|
import (
|
|
"context"
|
|
"crypto/md5"
|
|
"encoding/hex"
|
|
"net"
|
|
|
|
"github.com/go-gost/core/ingress"
|
|
"github.com/go-gost/core/logger"
|
|
"github.com/go-gost/core/observer/stats"
|
|
"github.com/go-gost/core/sd"
|
|
"github.com/go-gost/relay"
|
|
"github.com/go-gost/x/internal/util/mux"
|
|
"github.com/google/uuid"
|
|
)
|
|
|
|
// handleBind handles a CmdBind request from an internal client.
|
|
//
|
|
// Flow:
|
|
// 1. Generate a random connector ID (copies weight from tunnelID).
|
|
// 2. Compute an 8-hex-char endpoint from md5(tunnelID) for ingress routing.
|
|
// 3. Send relay response with address + tunnel features back to client.
|
|
// 4. Upgrade the TCP connection to a mux.ClientSession (smux).
|
|
// 5. Create a Connector wrapping the mux session.
|
|
// 6. Register:
|
|
// a. Add Connector to ConnectorPool (under tunnelID).
|
|
// b. If ingress is configured, set rules: endpoint → tunnelID, and
|
|
// the bind address host → tunnelID.
|
|
// c. If SD is configured, register the service (tunnelID, node, network).
|
|
//
|
|
// The mux session ownership is transferred to the Connector — conn is NOT
|
|
// closed after this function returns (no defer conn.Close()). The Connector's
|
|
// waitClose goroutine handles session lifecycle.
|
|
func (h *tunnelHandler) handleBind(ctx context.Context, conn net.Conn, network, address string, tunnelID relay.TunnelID, log logger.Logger) (err error) {
|
|
resp := relay.Response{
|
|
Version: relay.Version1,
|
|
Status: relay.StatusOK,
|
|
}
|
|
|
|
uuid, err := uuid.NewRandom()
|
|
if err != nil {
|
|
resp.Status = relay.StatusInternalServerError
|
|
resp.WriteTo(conn)
|
|
return
|
|
}
|
|
connectorID := relay.NewConnectorID(uuid[:])
|
|
if network == "udp" {
|
|
connectorID = relay.NewUDPConnectorID(uuid[:])
|
|
}
|
|
// copy weight from tunnelID
|
|
connectorID = connectorID.SetWeight(tunnelID.Weight())
|
|
|
|
v := md5.Sum([]byte(tunnelID.String()))
|
|
endpoint := hex.EncodeToString(v[:8])
|
|
|
|
host, port, _ := net.SplitHostPort(address)
|
|
if host == "" || h.md.ingress == nil {
|
|
host = endpoint
|
|
} else if host != endpoint {
|
|
host = endpoint
|
|
}
|
|
addr := net.JoinHostPort(host, port)
|
|
|
|
af := &relay.AddrFeature{}
|
|
err = af.ParseFrom(addr)
|
|
if err != nil {
|
|
log.Warn(err)
|
|
}
|
|
resp.Features = append(resp.Features, af,
|
|
&relay.TunnelFeature{
|
|
ID: connectorID,
|
|
},
|
|
)
|
|
if _, err = resp.WriteTo(conn); err != nil {
|
|
log.Error(err)
|
|
return
|
|
}
|
|
|
|
// Upgrade connection to multiplex session.
|
|
session, err := mux.ClientSession(conn, h.md.muxCfg)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
var stats stats.Stats
|
|
if h.stats != nil {
|
|
stats = h.stats.Stats(tunnelID.String())
|
|
}
|
|
|
|
c := NewConnector(connectorID, tunnelID, h.id, session, &ConnectorOptions{
|
|
service: h.options.Service,
|
|
sd: h.md.sd,
|
|
stats: stats,
|
|
limiter: h.limiter,
|
|
})
|
|
|
|
h.pool.Add(tunnelID, c, h.md.tunnelTTL)
|
|
if h.md.ingress != nil {
|
|
h.md.ingress.SetRule(ctx, &ingress.Rule{
|
|
Hostname: endpoint,
|
|
Endpoint: tunnelID.String(),
|
|
}, ingress.WithService(h.options.Service))
|
|
if host != "" {
|
|
h.md.ingress.SetRule(ctx, &ingress.Rule{
|
|
Hostname: host,
|
|
Endpoint: tunnelID.String(),
|
|
}, ingress.WithService(h.options.Service))
|
|
}
|
|
}
|
|
if h.md.sd != nil {
|
|
err := h.md.sd.Register(ctx, &sd.Service{
|
|
ID: connectorID.String(),
|
|
Name: tunnelID.String(),
|
|
Node: h.id,
|
|
Network: network,
|
|
Address: h.md.entryPoint,
|
|
})
|
|
if err != nil {
|
|
h.log.Error(err)
|
|
}
|
|
}
|
|
|
|
log.Debugf("%s/%s: tunnel=%s, connector=%s, weight=%d established", addr, network, tunnelID, connectorID, connectorID.Weight())
|
|
|
|
return
|
|
}
|