inbound.go 8.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290
  1. package inbound
  2. //go:generate go run $GOPATH/src/v2ray.com/core/common/errors/errorgen/main.go -pkg inbound -path Proxy,VMess,Inbound
  3. import (
  4. "context"
  5. "io"
  6. "sync"
  7. "time"
  8. "v2ray.com/core"
  9. "v2ray.com/core/common"
  10. "v2ray.com/core/common/buf"
  11. "v2ray.com/core/common/errors"
  12. "v2ray.com/core/common/log"
  13. "v2ray.com/core/common/net"
  14. "v2ray.com/core/common/protocol"
  15. "v2ray.com/core/common/serial"
  16. "v2ray.com/core/common/signal"
  17. "v2ray.com/core/common/uuid"
  18. "v2ray.com/core/proxy/vmess"
  19. "v2ray.com/core/proxy/vmess/encoding"
  20. "v2ray.com/core/transport/internet"
  21. "v2ray.com/core/transport/ray"
  22. )
  23. type userByEmail struct {
  24. sync.RWMutex
  25. cache map[string]*protocol.User
  26. defaultLevel uint32
  27. defaultAlterIDs uint16
  28. }
  29. func newUserByEmail(users []*protocol.User, config *DefaultConfig) *userByEmail {
  30. cache := make(map[string]*protocol.User)
  31. for _, user := range users {
  32. cache[user.Email] = user
  33. }
  34. return &userByEmail{
  35. cache: cache,
  36. defaultLevel: config.Level,
  37. defaultAlterIDs: uint16(config.AlterId),
  38. }
  39. }
  40. func (v *userByEmail) Get(email string) (*protocol.User, bool) {
  41. var user *protocol.User
  42. var found bool
  43. v.RLock()
  44. user, found = v.cache[email]
  45. v.RUnlock()
  46. if !found {
  47. v.Lock()
  48. user, found = v.cache[email]
  49. if !found {
  50. id := uuid.New()
  51. account := &vmess.Account{
  52. Id: id.String(),
  53. AlterId: uint32(v.defaultAlterIDs),
  54. }
  55. user = &protocol.User{
  56. Level: v.defaultLevel,
  57. Email: email,
  58. Account: serial.ToTypedMessage(account),
  59. }
  60. v.cache[email] = user
  61. }
  62. v.Unlock()
  63. }
  64. return user, found
  65. }
  66. // Handler is an inbound connection handler that handles messages in VMess protocol.
  67. type Handler struct {
  68. policyManager core.PolicyManager
  69. inboundHandlerManager core.InboundHandlerManager
  70. clients protocol.UserValidator
  71. usersByEmail *userByEmail
  72. detours *DetourConfig
  73. sessionHistory *encoding.SessionHistory
  74. }
  75. // New creates a new VMess inbound handler.
  76. func New(ctx context.Context, config *Config) (*Handler, error) {
  77. allowedClients := vmess.NewTimedUserValidator(ctx, protocol.DefaultIDHash)
  78. for _, user := range config.User {
  79. if err := allowedClients.Add(user); err != nil {
  80. return nil, newError("failed to initiate user").Base(err)
  81. }
  82. }
  83. v := core.FromContext(ctx)
  84. if v == nil {
  85. return nil, newError("V is not in context.")
  86. }
  87. handler := &Handler{
  88. policyManager: v.PolicyManager(),
  89. inboundHandlerManager: v.InboundHandlerManager(),
  90. clients: allowedClients,
  91. detours: config.Detour,
  92. usersByEmail: newUserByEmail(config.User, config.GetDefaultValue()),
  93. sessionHistory: encoding.NewSessionHistory(ctx),
  94. }
  95. return handler, nil
  96. }
  97. // Network implements proxy.Inbound.Network().
  98. func (*Handler) Network() net.NetworkList {
  99. return net.NetworkList{
  100. Network: []net.Network{net.Network_TCP},
  101. }
  102. }
  103. func (h *Handler) GetUser(email string) *protocol.User {
  104. user, existing := h.usersByEmail.Get(email)
  105. if !existing {
  106. h.clients.Add(user)
  107. }
  108. return user
  109. }
  110. func transferRequest(timer signal.ActivityUpdater, session *encoding.ServerSession, request *protocol.RequestHeader, input io.Reader, output ray.OutputStream) error {
  111. defer output.Close()
  112. bodyReader := session.DecodeRequestBody(request, input)
  113. if err := buf.Copy(bodyReader, output, buf.UpdateActivity(timer)); err != nil {
  114. return newError("failed to transfer request").Base(err)
  115. }
  116. return nil
  117. }
  118. func transferResponse(timer signal.ActivityUpdater, session *encoding.ServerSession, request *protocol.RequestHeader, response *protocol.ResponseHeader, input buf.Reader, output io.Writer) error {
  119. session.EncodeResponseHeader(response, output)
  120. bodyWriter := session.EncodeResponseBody(request, output)
  121. // Optimize for small response packet
  122. data, err := input.ReadMultiBuffer()
  123. if err != nil {
  124. return err
  125. }
  126. if err := bodyWriter.WriteMultiBuffer(data); err != nil {
  127. return err
  128. }
  129. data.Release()
  130. if bufferedWriter, ok := output.(*buf.BufferedWriter); ok {
  131. if err := bufferedWriter.SetBuffered(false); err != nil {
  132. return err
  133. }
  134. }
  135. if err := buf.Copy(input, bodyWriter, buf.UpdateActivity(timer)); err != nil {
  136. return err
  137. }
  138. if request.Option.Has(protocol.RequestOptionChunkStream) {
  139. if err := bodyWriter.WriteMultiBuffer(buf.MultiBuffer{}); err != nil {
  140. return err
  141. }
  142. }
  143. return nil
  144. }
  145. // Process implements proxy.Inbound.Process().
  146. func (h *Handler) Process(ctx context.Context, network net.Network, connection internet.Connection, dispatcher core.Dispatcher) error {
  147. sessionPolicy := h.policyManager.ForLevel(0)
  148. if err := connection.SetReadDeadline(time.Now().Add(sessionPolicy.Timeouts.Handshake)); err != nil {
  149. return newError("unable to set read deadline").Base(err).AtWarning()
  150. }
  151. reader := buf.NewBufferedReader(buf.NewReader(connection))
  152. session := encoding.NewServerSession(h.clients, h.sessionHistory)
  153. request, err := session.DecodeRequestHeader(reader)
  154. if err != nil {
  155. if errors.Cause(err) != io.EOF {
  156. log.Record(&log.AccessMessage{
  157. From: connection.RemoteAddr(),
  158. To: "",
  159. Status: log.AccessRejected,
  160. Reason: err,
  161. })
  162. err = newError("invalid request from ", connection.RemoteAddr()).Base(err).AtInfo()
  163. }
  164. return err
  165. }
  166. if request.Command == protocol.RequestCommandMux {
  167. request.Address = net.DomainAddress("v1.mux.com")
  168. request.Port = net.Port(0)
  169. }
  170. log.Record(&log.AccessMessage{
  171. From: connection.RemoteAddr(),
  172. To: request.Destination(),
  173. Status: log.AccessAccepted,
  174. Reason: "",
  175. })
  176. newError("received request for ", request.Destination()).WriteToLog()
  177. if err := connection.SetReadDeadline(time.Time{}); err != nil {
  178. newError("unable to set back read deadline").Base(err).WriteToLog()
  179. }
  180. sessionPolicy = h.policyManager.ForLevel(request.User.Level)
  181. ctx = protocol.ContextWithUser(ctx, request.User)
  182. ctx, cancel := context.WithCancel(ctx)
  183. timer := signal.CancelAfterInactivity(ctx, cancel, sessionPolicy.Timeouts.ConnectionIdle)
  184. ray, err := dispatcher.Dispatch(ctx, request.Destination())
  185. if err != nil {
  186. return newError("failed to dispatch request to ", request.Destination()).Base(err)
  187. }
  188. input := ray.InboundInput()
  189. output := ray.InboundOutput()
  190. requestDone := signal.ExecuteAsync(func() error {
  191. defer timer.SetTimeout(sessionPolicy.Timeouts.DownlinkOnly)
  192. return transferRequest(timer, session, request, reader, input)
  193. })
  194. responseDone := signal.ExecuteAsync(func() error {
  195. writer := buf.NewBufferedWriter(buf.NewWriter(connection))
  196. defer writer.Flush()
  197. defer timer.SetTimeout(sessionPolicy.Timeouts.UplinkOnly)
  198. response := &protocol.ResponseHeader{
  199. Command: h.generateCommand(ctx, request),
  200. }
  201. return transferResponse(timer, session, request, response, output, writer)
  202. })
  203. if err := signal.ErrorOrFinish2(ctx, requestDone, responseDone); err != nil {
  204. input.CloseError()
  205. output.CloseError()
  206. return newError("connection ends").Base(err)
  207. }
  208. return nil
  209. }
  210. func (h *Handler) generateCommand(ctx context.Context, request *protocol.RequestHeader) protocol.ResponseCommand {
  211. if h.detours != nil {
  212. tag := h.detours.To
  213. if h.inboundHandlerManager != nil {
  214. handler, err := h.inboundHandlerManager.GetHandler(ctx, tag)
  215. if err != nil {
  216. newError("failed to get detour handler: ", tag).Base(err).AtWarning().WriteToLog()
  217. return nil
  218. }
  219. proxyHandler, port, availableMin := handler.GetRandomInboundProxy()
  220. inboundHandler, ok := proxyHandler.(*Handler)
  221. if ok && inboundHandler != nil {
  222. if availableMin > 255 {
  223. availableMin = 255
  224. }
  225. newError("pick detour handler for port ", port, " for ", availableMin, " minutes.").AtDebug().WriteToLog()
  226. user := inboundHandler.GetUser(request.User.Email)
  227. if user == nil {
  228. return nil
  229. }
  230. account, _ := user.GetTypedAccount()
  231. return &protocol.CommandSwitchAccount{
  232. Port: port,
  233. ID: account.(*vmess.InternalAccount).ID.UUID(),
  234. AlterIds: uint16(len(account.(*vmess.InternalAccount).AlterIDs)),
  235. Level: user.Level,
  236. ValidMin: byte(availableMin),
  237. }
  238. }
  239. }
  240. }
  241. return nil
  242. }
  243. func init() {
  244. common.Must(common.RegisterConfig((*Config)(nil), func(ctx context.Context, config interface{}) (interface{}, error) {
  245. return New(ctx, config.(*Config))
  246. }))
  247. }