inbound.go 8.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289
  1. package inbound
  2. //go:generate go run $GOPATH/src/v2ray.com/core/common/errors/errorgen/main.go -pkg inbound -path Proxy,VMess,Inbound
  3. import (
  4. "context"
  5. "io"
  6. "sync"
  7. "time"
  8. "v2ray.com/core"
  9. "v2ray.com/core/common"
  10. "v2ray.com/core/common/buf"
  11. "v2ray.com/core/common/errors"
  12. "v2ray.com/core/common/log"
  13. "v2ray.com/core/common/net"
  14. "v2ray.com/core/common/protocol"
  15. "v2ray.com/core/common/serial"
  16. "v2ray.com/core/common/signal"
  17. "v2ray.com/core/common/uuid"
  18. "v2ray.com/core/proxy/vmess"
  19. "v2ray.com/core/proxy/vmess/encoding"
  20. "v2ray.com/core/transport/internet"
  21. "v2ray.com/core/transport/ray"
  22. )
  23. type userByEmail struct {
  24. sync.RWMutex
  25. cache map[string]*protocol.User
  26. defaultLevel uint32
  27. defaultAlterIDs uint16
  28. }
  29. func newUserByEmail(users []*protocol.User, config *DefaultConfig) *userByEmail {
  30. cache := make(map[string]*protocol.User)
  31. for _, user := range users {
  32. cache[user.Email] = user
  33. }
  34. return &userByEmail{
  35. cache: cache,
  36. defaultLevel: config.Level,
  37. defaultAlterIDs: uint16(config.AlterId),
  38. }
  39. }
  40. func (v *userByEmail) Get(email string) (*protocol.User, bool) {
  41. var user *protocol.User
  42. var found bool
  43. v.RLock()
  44. user, found = v.cache[email]
  45. v.RUnlock()
  46. if !found {
  47. v.Lock()
  48. user, found = v.cache[email]
  49. if !found {
  50. account := &vmess.Account{
  51. Id: uuid.New().String(),
  52. AlterId: uint32(v.defaultAlterIDs),
  53. }
  54. user = &protocol.User{
  55. Level: v.defaultLevel,
  56. Email: email,
  57. Account: serial.ToTypedMessage(account),
  58. }
  59. v.cache[email] = user
  60. }
  61. v.Unlock()
  62. }
  63. return user, found
  64. }
  65. // Handler is an inbound connection handler that handles messages in VMess protocol.
  66. type Handler struct {
  67. policyManager core.PolicyManager
  68. inboundHandlerManager core.InboundHandlerManager
  69. clients protocol.UserValidator
  70. usersByEmail *userByEmail
  71. detours *DetourConfig
  72. sessionHistory *encoding.SessionHistory
  73. }
  74. // New creates a new VMess inbound handler.
  75. func New(ctx context.Context, config *Config) (*Handler, error) {
  76. allowedClients := vmess.NewTimedUserValidator(ctx, protocol.DefaultIDHash)
  77. for _, user := range config.User {
  78. if err := allowedClients.Add(user); err != nil {
  79. return nil, newError("failed to initiate user").Base(err)
  80. }
  81. }
  82. v := core.FromContext(ctx)
  83. if v == nil {
  84. return nil, newError("V is not in context.")
  85. }
  86. handler := &Handler{
  87. policyManager: v.PolicyManager(),
  88. inboundHandlerManager: v.InboundHandlerManager(),
  89. clients: allowedClients,
  90. detours: config.Detour,
  91. usersByEmail: newUserByEmail(config.User, config.GetDefaultValue()),
  92. sessionHistory: encoding.NewSessionHistory(ctx),
  93. }
  94. return handler, nil
  95. }
  96. // Network implements proxy.Inbound.Network().
  97. func (*Handler) Network() net.NetworkList {
  98. return net.NetworkList{
  99. Network: []net.Network{net.Network_TCP},
  100. }
  101. }
  102. func (h *Handler) GetUser(email string) *protocol.User {
  103. user, existing := h.usersByEmail.Get(email)
  104. if !existing {
  105. h.clients.Add(user)
  106. }
  107. return user
  108. }
  109. func transferRequest(timer signal.ActivityUpdater, session *encoding.ServerSession, request *protocol.RequestHeader, input io.Reader, output ray.OutputStream) error {
  110. defer output.Close()
  111. bodyReader := session.DecodeRequestBody(request, input)
  112. if err := buf.Copy(bodyReader, output, buf.UpdateActivity(timer)); err != nil {
  113. return newError("failed to transfer request").Base(err)
  114. }
  115. return nil
  116. }
  117. func transferResponse(timer signal.ActivityUpdater, session *encoding.ServerSession, request *protocol.RequestHeader, response *protocol.ResponseHeader, input buf.Reader, output io.Writer) error {
  118. session.EncodeResponseHeader(response, output)
  119. bodyWriter := session.EncodeResponseBody(request, output)
  120. // Optimize for small response packet
  121. data, err := input.ReadMultiBuffer()
  122. if err != nil {
  123. return err
  124. }
  125. if err := bodyWriter.WriteMultiBuffer(data); err != nil {
  126. return err
  127. }
  128. data.Release()
  129. if bufferedWriter, ok := output.(*buf.BufferedWriter); ok {
  130. if err := bufferedWriter.SetBuffered(false); err != nil {
  131. return err
  132. }
  133. }
  134. if err := buf.Copy(input, bodyWriter, buf.UpdateActivity(timer)); err != nil {
  135. return err
  136. }
  137. if request.Option.Has(protocol.RequestOptionChunkStream) {
  138. if err := bodyWriter.WriteMultiBuffer(buf.MultiBuffer{}); err != nil {
  139. return err
  140. }
  141. }
  142. return nil
  143. }
  144. // Process implements proxy.Inbound.Process().
  145. func (h *Handler) Process(ctx context.Context, network net.Network, connection internet.Connection, dispatcher core.Dispatcher) error {
  146. sessionPolicy := h.policyManager.ForLevel(0)
  147. if err := connection.SetReadDeadline(time.Now().Add(sessionPolicy.Timeouts.Handshake)); err != nil {
  148. return newError("unable to set read deadline").Base(err).AtWarning()
  149. }
  150. reader := buf.NewBufferedReader(buf.NewReader(connection))
  151. session := encoding.NewServerSession(h.clients, h.sessionHistory)
  152. request, err := session.DecodeRequestHeader(reader)
  153. if err != nil {
  154. if errors.Cause(err) != io.EOF {
  155. log.Record(&log.AccessMessage{
  156. From: connection.RemoteAddr(),
  157. To: "",
  158. Status: log.AccessRejected,
  159. Reason: err,
  160. })
  161. newError("invalid request from ", connection.RemoteAddr(), ": ", err).AtInfo().WriteToLog()
  162. }
  163. return err
  164. }
  165. if request.Command == protocol.RequestCommandMux {
  166. request.Address = net.DomainAddress("v1.mux.com")
  167. request.Port = net.Port(0)
  168. }
  169. log.Record(&log.AccessMessage{
  170. From: connection.RemoteAddr(),
  171. To: request.Destination(),
  172. Status: log.AccessAccepted,
  173. Reason: "",
  174. })
  175. newError("received request for ", request.Destination()).WriteToLog()
  176. if err := connection.SetReadDeadline(time.Time{}); err != nil {
  177. newError("unable to set back read deadline").Base(err).WriteToLog()
  178. }
  179. sessionPolicy = h.policyManager.ForLevel(request.User.Level)
  180. ctx = protocol.ContextWithUser(ctx, request.User)
  181. ctx, cancel := context.WithCancel(ctx)
  182. timer := signal.CancelAfterInactivity(ctx, cancel, sessionPolicy.Timeouts.ConnectionIdle)
  183. ray, err := dispatcher.Dispatch(ctx, request.Destination())
  184. if err != nil {
  185. return newError("failed to dispatch request to ", request.Destination()).Base(err)
  186. }
  187. input := ray.InboundInput()
  188. output := ray.InboundOutput()
  189. requestDone := signal.ExecuteAsync(func() error {
  190. defer timer.SetTimeout(sessionPolicy.Timeouts.DownlinkOnly)
  191. return transferRequest(timer, session, request, reader, input)
  192. })
  193. responseDone := signal.ExecuteAsync(func() error {
  194. writer := buf.NewBufferedWriter(buf.NewWriter(connection))
  195. defer writer.Flush()
  196. defer timer.SetTimeout(sessionPolicy.Timeouts.UplinkOnly)
  197. response := &protocol.ResponseHeader{
  198. Command: h.generateCommand(ctx, request),
  199. }
  200. return transferResponse(timer, session, request, response, output, writer)
  201. })
  202. if err := signal.ErrorOrFinish2(ctx, requestDone, responseDone); err != nil {
  203. input.CloseError()
  204. output.CloseError()
  205. return newError("connection ends").Base(err)
  206. }
  207. return nil
  208. }
  209. func (h *Handler) generateCommand(ctx context.Context, request *protocol.RequestHeader) protocol.ResponseCommand {
  210. if h.detours != nil {
  211. tag := h.detours.To
  212. if h.inboundHandlerManager != nil {
  213. handler, err := h.inboundHandlerManager.GetHandler(ctx, tag)
  214. if err != nil {
  215. newError("failed to get detour handler: ", tag, err).AtWarning().WriteToLog()
  216. return nil
  217. }
  218. proxyHandler, port, availableMin := handler.GetRandomInboundProxy()
  219. inboundHandler, ok := proxyHandler.(*Handler)
  220. if ok && inboundHandler != nil {
  221. if availableMin > 255 {
  222. availableMin = 255
  223. }
  224. newError("pick detour handler for port ", port, " for ", availableMin, " minutes.").AtDebug().WriteToLog()
  225. user := inboundHandler.GetUser(request.User.Email)
  226. if user == nil {
  227. return nil
  228. }
  229. account, _ := user.GetTypedAccount()
  230. return &protocol.CommandSwitchAccount{
  231. Port: port,
  232. ID: account.(*vmess.InternalAccount).ID.UUID(),
  233. AlterIds: uint16(len(account.(*vmess.InternalAccount).AlterIDs)),
  234. Level: user.Level,
  235. ValidMin: byte(availableMin),
  236. }
  237. }
  238. }
  239. }
  240. return nil
  241. }
  242. func init() {
  243. common.Must(common.RegisterConfig((*Config)(nil), func(ctx context.Context, config interface{}) (interface{}, error) {
  244. return New(ctx, config.(*Config))
  245. }))
  246. }