135 lines
2.7 KiB
Go
135 lines
2.7 KiB
Go
package mtls
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"net"
|
|
|
|
admission "github.com/go-gost/core/admission/wrapper"
|
|
"github.com/go-gost/core/listener"
|
|
"github.com/go-gost/core/logger"
|
|
md "github.com/go-gost/core/metadata"
|
|
metrics "github.com/go-gost/core/metrics/wrapper"
|
|
xnet "github.com/go-gost/x/internal/net"
|
|
"github.com/go-gost/x/registry"
|
|
"github.com/xtaci/smux"
|
|
)
|
|
|
|
func init() {
|
|
registry.ListenerRegistry().Register("mtls", NewListener)
|
|
}
|
|
|
|
type mtlsListener struct {
|
|
net.Listener
|
|
cqueue chan net.Conn
|
|
errChan chan error
|
|
logger logger.Logger
|
|
md metadata
|
|
options listener.Options
|
|
}
|
|
|
|
func NewListener(opts ...listener.Option) listener.Listener {
|
|
options := listener.Options{}
|
|
for _, opt := range opts {
|
|
opt(&options)
|
|
}
|
|
return &mtlsListener{
|
|
logger: options.Logger,
|
|
options: options,
|
|
}
|
|
}
|
|
|
|
func (l *mtlsListener) Init(md md.Metadata) (err error) {
|
|
if err = l.parseMetadata(md); err != nil {
|
|
return
|
|
}
|
|
|
|
network := "tcp"
|
|
if xnet.IsIPv4(l.options.Addr) {
|
|
network = "tcp4"
|
|
}
|
|
ln, err := net.Listen(network, l.options.Addr)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
ln = metrics.WrapListener(l.options.Service, ln)
|
|
ln = admission.WrapListener(l.options.Admission, ln)
|
|
l.Listener = tls.NewListener(ln, l.options.TLSConfig)
|
|
|
|
l.cqueue = make(chan net.Conn, l.md.backlog)
|
|
l.errChan = make(chan error, 1)
|
|
|
|
go l.listenLoop()
|
|
|
|
return
|
|
}
|
|
|
|
func (l *mtlsListener) Accept() (conn net.Conn, err error) {
|
|
var ok bool
|
|
select {
|
|
case conn = <-l.cqueue:
|
|
case err, ok = <-l.errChan:
|
|
if !ok {
|
|
err = listener.ErrClosed
|
|
}
|
|
}
|
|
return
|
|
}
|
|
|
|
func (l *mtlsListener) listenLoop() {
|
|
for {
|
|
conn, err := l.Listener.Accept()
|
|
if err != nil {
|
|
l.errChan <- err
|
|
close(l.errChan)
|
|
return
|
|
}
|
|
go l.mux(conn)
|
|
}
|
|
}
|
|
|
|
func (l *mtlsListener) mux(conn net.Conn) {
|
|
defer conn.Close()
|
|
|
|
smuxConfig := smux.DefaultConfig()
|
|
smuxConfig.KeepAliveDisabled = l.md.muxKeepAliveDisabled
|
|
if l.md.muxKeepAliveInterval > 0 {
|
|
smuxConfig.KeepAliveInterval = l.md.muxKeepAliveInterval
|
|
}
|
|
if l.md.muxKeepAliveTimeout > 0 {
|
|
smuxConfig.KeepAliveTimeout = l.md.muxKeepAliveTimeout
|
|
}
|
|
if l.md.muxMaxFrameSize > 0 {
|
|
smuxConfig.MaxFrameSize = l.md.muxMaxFrameSize
|
|
}
|
|
if l.md.muxMaxReceiveBuffer > 0 {
|
|
smuxConfig.MaxReceiveBuffer = l.md.muxMaxReceiveBuffer
|
|
}
|
|
if l.md.muxMaxStreamBuffer > 0 {
|
|
smuxConfig.MaxStreamBuffer = l.md.muxMaxStreamBuffer
|
|
}
|
|
session, err := smux.Server(conn, smuxConfig)
|
|
if err != nil {
|
|
l.logger.Error(err)
|
|
return
|
|
}
|
|
defer session.Close()
|
|
|
|
for {
|
|
stream, err := session.AcceptStream()
|
|
if err != nil {
|
|
l.logger.Error("accept stream: ", err)
|
|
return
|
|
}
|
|
|
|
select {
|
|
case l.cqueue <- stream:
|
|
case <-stream.GetDieCh():
|
|
stream.Close()
|
|
default:
|
|
stream.Close()
|
|
l.logger.Warnf("connection queue is full, client %s discarded", stream.RemoteAddr())
|
|
}
|
|
}
|
|
}
|