-
Notifications
You must be signed in to change notification settings - Fork 179
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
EricZhou
committed
Nov 8, 2024
1 parent
4e1bcef
commit 2fcd78a
Showing
6 changed files
with
363 additions
and
12 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,265 @@ | ||
| package shadowos | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "github.com/gorilla/websocket" | ||
| "github.com/libragen/felix/util" | ||
| "io" | ||
| "log" | ||
| "net" | ||
| ) | ||
|
|
||
| type VlessCmd byte | ||
| type VlessAddrType byte | ||
|
|
||
| const ( | ||
| VlessCmdTcp VlessCmd = 0x01 | ||
| VlessCmdUdp VlessCmd = 0x02 | ||
| VlessCmdMux VlessCmd = 0x03 | ||
|
|
||
| VlessAddrTypeIPv4 VlessAddrType = 0x01 | ||
| VlessAddrTypeDomain VlessAddrType = 0x02 | ||
| VlessAddrTypeIPv6 VlessAddrType = 0x03 | ||
|
|
||
| SOCKS5VERSION = 0x05 | ||
| CMD_CONNECT = 0x01 | ||
| CMD_BIND = 0x02 | ||
| CMD_UDP_ASSOC = 0x03 | ||
| ) | ||
|
|
||
| type ShadowosApp struct { | ||
| AddrWs string | ||
| AddrSocks5 string | ||
| UUID string | ||
| } | ||
|
|
||
| func (ss *ShadowosApp) Run() { | ||
| listener, err := net.Listen("tcp", ss.AddrSocks5) | ||
| if err != nil { | ||
| log.Fatalf("Failed to listen on port %s: %v", ss.AddrSocks5, err) | ||
| } | ||
| defer listener.Close() | ||
| log.Println("SOCKS5 server listening on: " + ss.AddrSocks5) | ||
|
|
||
| for { | ||
| conn, err := listener.Accept() | ||
| if err != nil { | ||
| log.Printf("Failed to accept connection: %v", err) | ||
| continue | ||
| } | ||
| go ss.handleConnection(conn) | ||
| } | ||
| } | ||
|
|
||
| func socks5packet(conn net.Conn, uuidS string) (connData []byte, err error) { | ||
| uuidBytes, err := util.UUID2bytes(uuidS) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("failed to parse UUID: %w", err) | ||
| } | ||
| buf := make([]byte, 2) | ||
| if _, err := io.ReadFull(conn, buf); err != nil { | ||
| return nil, fmt.Errorf("failed to read version and nmethods: %w", err) | ||
| } | ||
| if buf[0] != SOCKS5VERSION { | ||
| return nil, fmt.Errorf("socks5 only. unsupported SOCKS version: %d", buf[0]) | ||
| } | ||
|
|
||
| // Read the supported authentication methods | ||
| nMethods := int(buf[1]) | ||
| nMethodsData := make([]byte, nMethods) | ||
| if _, err := io.ReadFull(conn, nMethodsData); err != nil { | ||
| return nil, fmt.Errorf("failed to read methods: %w", err) | ||
| } | ||
|
|
||
| // Select no authentication (0x00) | ||
| if _, err := conn.Write([]byte{SOCKS5VERSION, 0x00}); err != nil { | ||
| return nil, fmt.Errorf("failed to write method selection: %w", err) | ||
| } | ||
|
|
||
| // Read the request | ||
| buf = make([]byte, 4) | ||
| if _, err := io.ReadFull(conn, buf); err != nil { | ||
| return nil, fmt.Errorf("failed to read request: %w", err) | ||
| } | ||
|
|
||
| if buf[0] != SOCKS5VERSION { | ||
| return nil, fmt.Errorf("unsupported SOCKS version: %d", buf[0]) | ||
| } | ||
| var vlessCmd VlessCmd | ||
| if buf[1] == CMD_CONNECT { | ||
| vlessCmd = VlessCmdTcp | ||
| } else if buf[1] == CMD_UDP_ASSOC { | ||
| vlessCmd = VlessCmdUdp | ||
| } else { | ||
| return nil, fmt.Errorf("unsupported command: %d", buf[1]) | ||
| } | ||
| var vlessAddrType VlessAddrType | ||
| addrLen := 0 | ||
| // Read the address | ||
| switch buf[3] { | ||
| case 0x01: // IPv4 | ||
| vlessAddrType = VlessAddrTypeIPv4 | ||
| addrLen = net.IPv4len | ||
| case 0x03: // Domain name | ||
| vlessAddrType = VlessAddrTypeDomain | ||
| if _, err := io.ReadFull(conn, buf[:1]); err != nil { | ||
| return nil, fmt.Errorf("failed to read domain length: %w", err) | ||
| } | ||
| addrLen = int(buf[0]) | ||
| case 0x04: // IPv6 | ||
| vlessAddrType = VlessAddrTypeIPv6 | ||
| addrLen = net.IPv6len | ||
| default: | ||
| return nil, fmt.Errorf("unsupported address type: %d", buf[3]) | ||
| } | ||
| addrBytes := make([]byte, addrLen) | ||
| if _, err := io.ReadFull(conn, addrBytes); err != nil { | ||
| return nil, fmt.Errorf("failed to read address: %w", err) | ||
| } | ||
| if vlessAddrType == VlessAddrTypeDomain { | ||
| addrBytes = append([]byte{byte(addrLen)}, addrBytes...) | ||
| } | ||
|
|
||
| // Read the port | ||
| remotePort := make([]byte, 2) | ||
|
|
||
| if _, err = io.ReadFull(conn, remotePort); err != nil { | ||
| log.Printf("Failed to read port: %v", err) | ||
| return | ||
| } | ||
| // Construct vless packet | ||
| connData = make([]byte, 0, 1+16+1+1+2+1+len(addrBytes)) | ||
| connData = append(connData, 0x01) // version | ||
| connData = append(connData, uuidBytes...) //16 bytes of UUID | ||
| connData = append(connData, 0x00) // additional info length M | ||
| connData = append(connData, byte(vlessCmd)) //1 byte of command | ||
| connData = append(connData, remotePort...) //2 bytes of port | ||
| connData = append(connData, byte(vlessAddrType)) //1 byte of address type | ||
| connData = append(connData, addrBytes...) //n bytes of address | ||
| return connData, nil | ||
| } | ||
|
|
||
| func (ss *ShadowosApp) handleConnection(conn net.Conn) { | ||
| defer conn.Close() | ||
|
|
||
| connBytes, err := socks5packet(conn, ss.UUID) | ||
| if err != nil { | ||
| log.Printf("failed to parse SOCKS5 request: %v", err) | ||
| return | ||
| } | ||
| // Read the version and number of authentication methods | ||
|
|
||
| // Connect to the target server | ||
| ws, err := NewWebsocketConn(ss.AddrWs) | ||
| if err != nil { | ||
| log.Printf("failed to connect to target: %v", err) | ||
| conn.Write([]byte{SOCKS5VERSION, 0x01, 0x00, 0x01, 0, 0, 0, 0, 0, 0}) | ||
| return | ||
| } else { // Send success response | ||
| conn.Write([]byte{SOCKS5VERSION, 0x00, 0x00, 0x01, 0, 0, 0, 0, 0, 0}) | ||
| } | ||
| defer ws.Close() | ||
| // Relay data between client and target server | ||
| pipeWebsocketSocks5(ws, conn, connBytes) | ||
| } | ||
|
|
||
| func pipeWebsocketSocks5(ws *WebsocketConn, s5 net.Conn, firstData []byte) { | ||
| go func() { // s5 -> ws | ||
| buf := make([]byte, 1024) | ||
| for { | ||
|
|
||
| n, err := s5.Read(buf) | ||
| if err == io.EOF { | ||
| log.Println("EOF from socks5") | ||
| continue | ||
| } | ||
| if err != nil { | ||
| log.Printf("read from socks5 error %T", err) | ||
| log.Println("read from socks5 error", err) | ||
| continue | ||
| } | ||
| log.Println("read from socks5", n) | ||
| data := buf[:n] | ||
| if len(firstData) > 0 { | ||
| log.Println("send version header only once") | ||
| data = append(firstData, buf[:n]...) | ||
| firstData = nil | ||
| } | ||
| _, err = ws.Write(data) | ||
| if err != nil { | ||
| log.Println("write error", err) | ||
| return | ||
| } | ||
|
|
||
| } | ||
| }() | ||
| isFirstData := true | ||
| for { | ||
| buf := make([]byte, 1024) | ||
| n, err := ws.Read(buf) | ||
| if err == io.EOF { | ||
| log.Println("EOF from ws") | ||
| continue | ||
| } | ||
| if err != nil { | ||
| log.Printf("read from ws -> socks5 error %T", err) | ||
| log.Println("read from ws -> socks5 error", err) | ||
| continue | ||
| } | ||
| fromByteIndex := 0 | ||
| // skip the first data | ||
| if isFirstData && n >= 2 { | ||
| extraN := buf[1] | ||
| isFirstData = false | ||
| fromByteIndex = 2 + int(extraN) | ||
| } | ||
| _, err = s5.Write(buf[fromByteIndex:n]) | ||
| if err != nil { | ||
| log.Println(" ws -> socks5 error", err) | ||
| return | ||
| } | ||
|
|
||
| } | ||
|
|
||
| } | ||
|
|
||
| type WebsocketConn struct { | ||
| c *websocket.Conn | ||
| } | ||
|
|
||
| func NewWebsocketConn(url string) (*WebsocketConn, error) { | ||
| c, _, err := websocket.DefaultDialer.Dial(url, nil) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("failed to connect to WebSocket server: %w", err) | ||
| } | ||
| return &WebsocketConn{c: c}, nil | ||
| } | ||
|
|
||
| func (w WebsocketConn) Close() error { | ||
| err := w.c.WriteMessage(websocket.CloseMessage, websocket.FormatCloseMessage(websocket.CloseNormalClosure, "")) | ||
| if err != nil { | ||
| log.Println("failed to send close message", err) | ||
| return err | ||
| } | ||
| return w.c.Close() | ||
| } | ||
|
|
||
| func (w WebsocketConn) Write(bytes []byte) (int, error) { | ||
| err := w.c.WriteMessage(websocket.BinaryMessage, bytes) | ||
| if err != nil { | ||
| return 0, err | ||
| } | ||
| return len(bytes), nil | ||
| } | ||
|
|
||
| func (w WebsocketConn) Read(p []byte) (n int, err error) { | ||
| messageType, bytes, err := w.c.ReadMessage() | ||
| if err != nil { | ||
| return 0, err | ||
| } | ||
| if messageType != websocket.BinaryMessage { | ||
| return 0, fmt.Errorf("unexpected message type: %d", messageType) | ||
| } | ||
| n = copy(p, bytes) | ||
| return n, nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,19 @@ | ||
| package shadowos | ||
|
|
||
| import ( | ||
| "log" | ||
| "testing" | ||
| ) | ||
|
|
||
| var ( | ||
| app = &ShadowosApp{ | ||
| AddrWs: "ws://127.0.0.1:8787", | ||
| AddrSocks5: "127.0.0.1:2080", | ||
| UUID: "53881505-c10c-464a-8949-e57184a576a9", | ||
| } | ||
| ) | ||
|
|
||
| func TestShadowosApp_Run(t *testing.T) { | ||
| log.SetFlags(log.LstdFlags | log.Lshortfile) | ||
| app.Run() | ||
| } |
Oops, something went wrong.