x/listener/dns/listener.go

package dns

import (
	"bytes"
	"encoding/base64"
	"errors"
	"io"
	"net"
	"net/http"
	"strings"

	admission "github.com/go-gost/x/admission/wrapper"
	limiter "github.com/go-gost/x/limiter/traffic/wrapper"

	"github.com/go-gost/core/listener"
	"github.com/go-gost/core/logger"
	md "github.com/go-gost/core/metadata"
	metrics "github.com/go-gost/x/metrics/wrapper"
	"github.com/go-gost/x/registry"
	stats "github.com/go-gost/x/stats/wrapper"
	"github.com/miekg/dns"
)

func init() {
	registry.ListenerRegistry().Register("dns", NewListener)
}

type dnsListener struct {
	addr    net.Addr
	server  Server
	cqueue  chan net.Conn
	errChan chan error
	logger  logger.Logger
	md      metadata
	options listener.Options
}

func NewListener(opts ...listener.Option) listener.Listener {
	options := listener.Options{}
	for _, opt := range opts {
		opt(&options)
	}
	return &dnsListener{
		logger:  options.Logger,
		options: options,
	}
}

func (l *dnsListener) Init(md md.Metadata) (err error) {
	if err = l.parseMetadata(md); err != nil {
		return
	}

	l.addr, err = net.ResolveTCPAddr("tcp", l.options.Addr)
	if err != nil {
		return err
	}

	switch strings.ToLower(l.md.mode) {
	case "tcp":
		l.server = &dns.Server{
			Net:          "tcp",
			Addr:         l.options.Addr,
			Handler:      l,
			ReadTimeout:  l.md.readTimeout,
			WriteTimeout: l.md.writeTimeout,
		}
	case "tls":
		l.server = &dns.Server{
			Net:          "tcp-tls",
			Addr:         l.options.Addr,
			Handler:      l,
			TLSConfig:    l.options.TLSConfig,
			ReadTimeout:  l.md.readTimeout,
			WriteTimeout: l.md.writeTimeout,
		}
	case "https":
		l.server = &dohServer{
			addr:      l.options.Addr,
			tlsConfig: l.options.TLSConfig,
			server: &http.Server{
				Handler:      l,
				ReadTimeout:  l.md.readTimeout,
				WriteTimeout: l.md.writeTimeout,
			},
		}
	default:
		l.addr, err = net.ResolveUDPAddr("udp", l.options.Addr)
		l.server = &dns.Server{
			Net:          "udp",
			Addr:         l.options.Addr,
			Handler:      l,
			UDPSize:      l.md.readBufferSize,
			ReadTimeout:  l.md.readTimeout,
			WriteTimeout: l.md.writeTimeout,
		}
	}

	if err != nil {
		return
	}

	l.cqueue = make(chan net.Conn, l.md.backlog)
	l.errChan = make(chan error, 1)

	go func() {
		err := l.server.ListenAndServe()
		if err != nil {
			l.errChan <- err
		}
		close(l.errChan)
	}()
	return
}

func (l *dnsListener) Accept() (conn net.Conn, err error) {
	var ok bool
	select {
	case conn = <-l.cqueue:
		conn = metrics.WrapConn(l.options.Service, conn)
		conn = stats.WrapConn(conn, l.options.Stats)
		conn = admission.WrapConn(l.options.Admission, conn)
		conn = limiter.WrapConn(l.options.TrafficLimiter, conn)
	case err, ok = <-l.errChan:
		if !ok {
			err = listener.ErrClosed
		}
	}
	return
}

func (l *dnsListener) Close() error {
	return l.server.Shutdown()
}

func (l *dnsListener) Addr() net.Addr {
	return l.addr
}

func (l *dnsListener) ServeDNS(w dns.ResponseWriter, m *dns.Msg) {
	b, err := m.Pack()
	if err != nil {
		l.logger.Error(err)
		return
	}
	if err := l.serve(w, b); err != nil {
		l.logger.Error(err)
	}
}

// Based on https://github.com/semihalev/sdns
func (l *dnsListener) ServeHTTP(w http.ResponseWriter, r *http.Request) {
	var buf []byte
	var err error
	switch r.Method {
	case http.MethodGet:
		buf, err = base64.RawURLEncoding.DecodeString(r.URL.Query().Get("dns"))
		if len(buf) == 0 || err != nil {
			http.Error(w, http.StatusText(http.StatusBadRequest), http.StatusBadRequest)
			return
		}
	case http.MethodPost:
		if ct := r.Header.Get("Content-Type"); ct != "application/dns-message" {
			l.logger.Errorf("unsupported media type: %s", ct)
			http.Error(w, http.StatusText(http.StatusUnsupportedMediaType), http.StatusUnsupportedMediaType)
			return
		}

		buf, err = io.ReadAll(r.Body)
		if err != nil {
			l.logger.Error(err)
			http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError)
			return
		}
	default:
		l.logger.Errorf("method not allowd: %s", r.Method)
		http.Error(w, http.StatusText(http.StatusMethodNotAllowed), http.StatusMethodNotAllowed)
		return
	}

	mq := &dns.Msg{}
	if err := mq.Unpack(buf); err != nil {
		l.logger.Error(err)
		http.Error(w, http.StatusText(http.StatusBadRequest), http.StatusBadRequest)
		return
	}

	w.Header().Set("Server", "SDNS")
	w.Header().Set("Content-Type", "application/dns-message")

	raddr, _ := net.ResolveTCPAddr("tcp", r.RemoteAddr)
	if raddr == nil {
		raddr = &net.TCPAddr{}
	}
	if err := l.serve(&dohResponseWriter{raddr: raddr, ResponseWriter: w}, buf); err != nil {
		l.logger.Error(err)
		http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError)
	}
}

func (l *dnsListener) serve(w ResponseWriter, msg []byte) (err error) {
	conn := &serverConn{
		r:      bytes.NewReader(msg),
		w:      w,
		laddr:  l.addr,
		closed: make(chan struct{}),
	}

	select {
	case l.cqueue <- conn:
	default:
		l.logger.Warnf("connection queue is full, client %s discarded", w.RemoteAddr())
		return errors.New("connection queue is full")
	}

	return conn.Wait()
}