gost/pkg/handler/ssu/handler.go

package ssu

import (
	"bytes"
	"context"
	"net"
	"time"

	"github.com/go-gost/gosocks5"
	"github.com/go-gost/gost/pkg/bypass"
	"github.com/go-gost/gost/pkg/chain"
	"github.com/go-gost/gost/pkg/handler"
	"github.com/go-gost/gost/pkg/internal/bufpool"
	"github.com/go-gost/gost/pkg/internal/utils/ss"
	"github.com/go-gost/gost/pkg/logger"
	md "github.com/go-gost/gost/pkg/metadata"
	"github.com/go-gost/gost/pkg/registry"
)

func init() {
	registry.RegisterHandler("ssu", NewHandler)
}

type ssuHandler struct {
	chain  *chain.Chain
	bypass bypass.Bypass
	logger logger.Logger
	md     metadata
}

func NewHandler(opts ...handler.Option) handler.Handler {
	options := &handler.Options{}
	for _, opt := range opts {
		opt(options)
	}

	return &ssuHandler{
		chain:  options.Chain,
		bypass: options.Bypass,
		logger: options.Logger,
	}
}

func (h *ssuHandler) Init(md md.Metadata) (err error) {
	return h.parseMetadata(md)
}

func (h *ssuHandler) Handle(ctx context.Context, conn net.Conn) {
	defer conn.Close()

	start := time.Now()
	h.logger = h.logger.WithFields(map[string]interface{}{
		"remote": conn.RemoteAddr().String(),
		"local":  conn.LocalAddr().String(),
	})
	h.logger.Infof("%s <> %s", conn.RemoteAddr(), conn.LocalAddr())
	defer func() {
		h.logger.WithFields(map[string]interface{}{
			"duration": time.Since(start),
		}).Infof("%s >< %s", conn.RemoteAddr(), conn.LocalAddr())
	}()

	// obtain a udp connection
	r := (&handler.Router{}).
		WithChain(h.chain).
		WithRetry(h.md.retryCount).
		WithLogger(h.logger)
	c, err := r.Dial(ctx, "udp", "")
	if err != nil {
		h.logger.Error(err)
		return
	}

	cc, ok := c.(net.PacketConn)
	if !ok {
		h.logger.Errorf("%s: not a packet connection")
		return
	}
	defer cc.Close()

	h.logger = h.logger.WithFields(map[string]interface{}{
		"bind": cc.LocalAddr().String(),
	})
	h.logger.Infof("bind on %s OK", cc.LocalAddr().String())

	pc, ok := conn.(net.PacketConn)
	if ok {
		if h.md.cipher != nil {
			pc = h.md.cipher.PacketConn(pc)
		}

		t := time.Now()
		h.logger.Infof("%s <-> %s", conn.RemoteAddr(), cc.LocalAddr())
		h.relayPacket(pc, cc)
		h.logger.
			WithFields(map[string]interface{}{"duration": time.Since(t)}).
			Infof("%s >-< %s", conn.RemoteAddr(), cc.LocalAddr())
		return
	}

	if h.md.cipher != nil {
		conn = ss.ShadowConn(h.md.cipher.StreamConn(conn), nil)
	}

	t := time.Now()
	h.logger.Infof("%s <-> %s", conn.RemoteAddr(), cc.LocalAddr())
	h.tunnelUDP(conn, cc)
	h.logger.
		WithFields(map[string]interface{}{"duration": time.Since(t)}).
		Infof("%s >-< %s", conn.RemoteAddr(), cc.LocalAddr())
}

func (h *ssuHandler) relayPacket(pc1, pc2 net.PacketConn) (err error) {
	bufSize := h.md.bufferSize

	errc := make(chan error, 2)
	var clientAddr net.Addr

	go func() {
		b := bufpool.Get(bufSize)
		defer bufpool.Put(b)

		for {
			err := func() error {
				n, addr, err := pc1.ReadFrom(b)
				if err != nil {
					return err
				}
				if clientAddr == nil {
					clientAddr = addr
				}

				rb := bytes.NewBuffer(b[:n])
				saddr := gosocks5.Addr{}
				if _, err := saddr.ReadFrom(rb); err != nil {
					return err
				}
				taddr, err := net.ResolveUDPAddr("udp", saddr.String())
				if err != nil {
					return err
				}

				if h.bypass != nil && h.bypass.Contains(taddr.String()) {
					h.logger.Warn("bypass: ", taddr)
					return nil
				}

				if _, err = pc2.WriteTo(rb.Bytes(), taddr); err != nil {
					return err
				}

				if h.logger.IsLevelEnabled(logger.DebugLevel) {
					h.logger.Debugf("%s >>> %s: %v, data: %d",
						addr, taddr, saddr.String(), rb.Len())
				}
				return nil
			}()

			if err != nil {
				errc <- err
				return
			}
		}
	}()

	go func() {
		b := bufpool.Get(bufSize)
		defer bufpool.Put(b)

		const dataPos = 259

		for {
			err := func() error {
				n, raddr, err := pc2.ReadFrom(b[dataPos:])
				if err != nil {
					return err
				}
				if clientAddr == nil {
					return nil
				}

				if h.bypass != nil && h.bypass.Contains(raddr.String()) {
					h.logger.Warn("bypass: ", raddr)
					return nil
				}

				socksAddr, _ := gosocks5.NewAddr(raddr.String())
				if socksAddr == nil {
					socksAddr = &gosocks5.Addr{}
				}
				addrLen := socksAddr.Length()
				socksAddr.Encode(b[dataPos-addrLen : dataPos])

				if _, err = pc1.WriteTo(b[dataPos-addrLen:dataPos+n], clientAddr); err != nil {
					return err
				}

				if h.logger.IsLevelEnabled(logger.DebugLevel) {
					h.logger.Debugf("%s <<< %s: %v data: %d",
						clientAddr, raddr, b[dataPos-addrLen:dataPos], n)
				}
				return nil
			}()

			if err != nil {
				errc <- err
				return
			}
		}
	}()

	return <-errc
}

func (h *ssuHandler) tunnelUDP(tunnel net.Conn, c net.PacketConn) (err error) {
	bufSize := h.md.bufferSize
	errc := make(chan error, 2)

	go func() {
		b := bufpool.Get(bufSize)
		defer bufpool.Put(b)

		const dataPos = 262

		for {
			addr := gosocks5.Addr{}
			header := gosocks5.UDPHeader{
				Addr: &addr,
			}

			data := b[dataPos:]
			dgram := gosocks5.UDPDatagram{
				Header: &header,
				Data:   data,
			}
			_, err := dgram.ReadFrom(tunnel)
			if err != nil {
				errc <- err
				return
			}
			// NOTE: the dgram.Data may be reallocated if the provided buffer is too short,
			// we drop it for simplicity. As this occurs, you should enlarge the buffer size.
			if len(dgram.Data) > len(data) {
				h.logger.Warnf("buffer too short, dropped")
				continue
			}

			raddr, err := net.ResolveUDPAddr("udp", addr.String())
			if err != nil {
				continue // drop silently
			}
			if h.bypass != nil && h.bypass.Contains(raddr.String()) {
				h.logger.Warn("bypass: ", raddr.String())
				continue // bypass
			}

			if _, err := c.WriteTo(dgram.Data, raddr); err != nil {
				errc <- err
				return
			}

			if h.logger.IsLevelEnabled(logger.DebugLevel) {
				h.logger.Debugf("%s >>> %s: %v data: %d",
					tunnel.RemoteAddr(), raddr, header.String(), len(dgram.Data))
			}
		}
	}()

	go func() {
		b := bufpool.Get(bufSize)
		defer bufpool.Put(b)

		for {
			n, raddr, err := c.ReadFrom(b)
			if err != nil {
				errc <- err
				return
			}

			if h.bypass != nil && h.bypass.Contains(raddr.String()) {
				h.logger.Warn("bypass: ", raddr.String())
				continue // bypass
			}

			addr, _ := gosocks5.NewAddr(raddr.String())
			if addr == nil {
				addr = &gosocks5.Addr{}
			}
			header := gosocks5.UDPHeader{
				Rsv:  uint16(n),
				Addr: addr,
			}
			dgram := gosocks5.UDPDatagram{
				Header: &header,
				Data:   b[:n],
			}

			if _, err := dgram.WriteTo(tunnel); err != nil {
				errc <- err
				return
			}
			if h.logger.IsLevelEnabled(logger.DebugLevel) {
				h.logger.Debugf("%s <<< %s: %v data: %d",
					tunnel.RemoteAddr(), raddr, header.String(), len(dgram.Data))
			}
		}
	}()

	return <-errc
}

func (h *ssuHandler) parseMetadata(md md.Metadata) (err error) {
	h.md.cipher, err = ss.ShadowCipher(
		md.GetString(method),
		md.GetString(password),
		md.GetString(key),
	)
	if err != nil {
		return
	}

	h.md.readTimeout = md.GetDuration(readTimeout)
	h.md.retryCount = md.GetInt(retryCount)

	h.md.bufferSize = md.GetInt(bufferSize)
	if h.md.bufferSize > 0 {
		if h.md.bufferSize < 512 {
			h.md.bufferSize = 512 // min buffer size
		}
		if h.md.bufferSize > 65*1024 {
			h.md.bufferSize = 65 * 1024 // max buffer size
		}
	} else {
		h.md.bufferSize = 4096 // default buffer size
	}

	return
}