outbound.go 6.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211
  1. // +build !confonly
  2. package outbound
  3. //go:generate go run github.com/v2fly/v2ray-core/v4/common/errors/errorgen
  4. import (
  5. "context"
  6. "time"
  7. core "github.com/v2fly/v2ray-core/v4"
  8. "github.com/v2fly/v2ray-core/v4/common"
  9. "github.com/v2fly/v2ray-core/v4/common/buf"
  10. "github.com/v2fly/v2ray-core/v4/common/net"
  11. "github.com/v2fly/v2ray-core/v4/common/platform"
  12. "github.com/v2fly/v2ray-core/v4/common/protocol"
  13. "github.com/v2fly/v2ray-core/v4/common/retry"
  14. "github.com/v2fly/v2ray-core/v4/common/session"
  15. "github.com/v2fly/v2ray-core/v4/common/signal"
  16. "github.com/v2fly/v2ray-core/v4/common/task"
  17. "github.com/v2fly/v2ray-core/v4/features/policy"
  18. "github.com/v2fly/v2ray-core/v4/proxy/vmess"
  19. "github.com/v2fly/v2ray-core/v4/proxy/vmess/encoding"
  20. "github.com/v2fly/v2ray-core/v4/transport"
  21. "github.com/v2fly/v2ray-core/v4/transport/internet"
  22. )
  23. // Handler is an outbound connection handler for VMess protocol.
  24. type Handler struct {
  25. serverList *protocol.ServerList
  26. serverPicker protocol.ServerPicker
  27. policyManager policy.Manager
  28. }
  29. // New creates a new VMess outbound handler.
  30. func New(ctx context.Context, config *Config) (*Handler, error) {
  31. serverList := protocol.NewServerList()
  32. for _, rec := range config.Receiver {
  33. s, err := protocol.NewServerSpecFromPB(rec)
  34. if err != nil {
  35. return nil, newError("failed to parse server spec").Base(err)
  36. }
  37. serverList.AddServer(s)
  38. }
  39. v := core.MustFromContext(ctx)
  40. handler := &Handler{
  41. serverList: serverList,
  42. serverPicker: protocol.NewRoundRobinServerPicker(serverList),
  43. policyManager: v.GetFeature(policy.ManagerType()).(policy.Manager),
  44. }
  45. return handler, nil
  46. }
  47. // Process implements proxy.Outbound.Process().
  48. func (h *Handler) Process(ctx context.Context, link *transport.Link, dialer internet.Dialer) error {
  49. var rec *protocol.ServerSpec
  50. var conn internet.Connection
  51. err := retry.ExponentialBackoff(5, 200).On(func() error {
  52. rec = h.serverPicker.PickServer()
  53. rawConn, err := dialer.Dial(ctx, rec.Destination())
  54. if err != nil {
  55. return err
  56. }
  57. conn = rawConn
  58. return nil
  59. })
  60. if err != nil {
  61. return newError("failed to find an available destination").Base(err).AtWarning()
  62. }
  63. defer conn.Close()
  64. outbound := session.OutboundFromContext(ctx)
  65. if outbound == nil || !outbound.Target.IsValid() {
  66. return newError("target not specified").AtError()
  67. }
  68. target := outbound.Target
  69. newError("tunneling request to ", target, " via ", rec.Destination()).WriteToLog(session.ExportIDToError(ctx))
  70. command := protocol.RequestCommandTCP
  71. if target.Network == net.Network_UDP {
  72. command = protocol.RequestCommandUDP
  73. }
  74. if target.Address.Family().IsDomain() && target.Address.Domain() == "v1.mux.cool" {
  75. command = protocol.RequestCommandMux
  76. }
  77. user := rec.PickUser()
  78. request := &protocol.RequestHeader{
  79. Version: encoding.Version,
  80. User: user,
  81. Command: command,
  82. Address: target.Address,
  83. Port: target.Port,
  84. Option: protocol.RequestOptionChunkStream,
  85. }
  86. account := request.User.Account.(*vmess.MemoryAccount)
  87. request.Security = account.Security
  88. if request.Security == protocol.SecurityType_AES128_GCM || request.Security == protocol.SecurityType_NONE || request.Security == protocol.SecurityType_CHACHA20_POLY1305 {
  89. request.Option.Set(protocol.RequestOptionChunkMasking)
  90. }
  91. if shouldEnablePadding(request.Security) && request.Option.Has(protocol.RequestOptionChunkMasking) {
  92. request.Option.Set(protocol.RequestOptionGlobalPadding)
  93. }
  94. if request.Security == protocol.SecurityType_ZERO {
  95. request.Security = protocol.SecurityType_NONE
  96. request.Option.Clear(protocol.RequestOptionChunkStream)
  97. request.Option.Clear(protocol.RequestOptionChunkMasking)
  98. }
  99. input := link.Reader
  100. output := link.Writer
  101. isAEAD := false
  102. if !aeadDisabled && len(account.AlterIDs) == 0 {
  103. isAEAD = true
  104. }
  105. session := encoding.NewClientSession(ctx, isAEAD, protocol.DefaultIDHash)
  106. sessionPolicy := h.policyManager.ForLevel(request.User.Level)
  107. ctx, cancel := context.WithCancel(ctx)
  108. timer := signal.CancelAfterInactivity(ctx, cancel, sessionPolicy.Timeouts.ConnectionIdle)
  109. requestDone := func() error {
  110. defer timer.SetTimeout(sessionPolicy.Timeouts.DownlinkOnly)
  111. writer := buf.NewBufferedWriter(buf.NewWriter(conn))
  112. if err := session.EncodeRequestHeader(request, writer); err != nil {
  113. return newError("failed to encode request").Base(err).AtWarning()
  114. }
  115. bodyWriter := session.EncodeRequestBody(request, writer)
  116. if err := buf.CopyOnceTimeout(input, bodyWriter, time.Millisecond*100); err != nil && err != buf.ErrNotTimeoutReader && err != buf.ErrReadTimeout {
  117. return newError("failed to write first payload").Base(err)
  118. }
  119. if err := writer.SetBuffered(false); err != nil {
  120. return err
  121. }
  122. if err := buf.Copy(input, bodyWriter, buf.UpdateActivity(timer)); err != nil {
  123. return err
  124. }
  125. if request.Option.Has(protocol.RequestOptionChunkStream) {
  126. if err := bodyWriter.WriteMultiBuffer(buf.MultiBuffer{}); err != nil {
  127. return err
  128. }
  129. }
  130. return nil
  131. }
  132. responseDone := func() error {
  133. defer timer.SetTimeout(sessionPolicy.Timeouts.UplinkOnly)
  134. reader := &buf.BufferedReader{Reader: buf.NewReader(conn)}
  135. header, err := session.DecodeResponseHeader(reader)
  136. if err != nil {
  137. return newError("failed to read header").Base(err)
  138. }
  139. h.handleCommand(rec.Destination(), header.Command)
  140. bodyReader := session.DecodeResponseBody(request, reader)
  141. return buf.Copy(bodyReader, output, buf.UpdateActivity(timer))
  142. }
  143. responseDonePost := task.OnSuccess(responseDone, task.Close(output))
  144. if err := task.Run(ctx, requestDone, responseDonePost); err != nil {
  145. return newError("connection ends").Base(err)
  146. }
  147. return nil
  148. }
  149. var (
  150. enablePadding = false
  151. aeadDisabled = false
  152. )
  153. func shouldEnablePadding(s protocol.SecurityType) bool {
  154. return enablePadding || s == protocol.SecurityType_AES128_GCM || s == protocol.SecurityType_CHACHA20_POLY1305 || s == protocol.SecurityType_AUTO
  155. }
  156. func init() {
  157. common.Must(common.RegisterConfig((*Config)(nil), func(ctx context.Context, config interface{}) (interface{}, error) {
  158. return New(ctx, config.(*Config))
  159. }))
  160. const defaultFlagValue = "NOT_DEFINED_AT_ALL"
  161. paddingValue := platform.NewEnvFlag("v2ray.vmess.padding").GetValue(func() string { return defaultFlagValue })
  162. if paddingValue != defaultFlagValue {
  163. enablePadding = true
  164. }
  165. isAeadDisabled := platform.NewEnvFlag("v2ray.vmess.aead.disabled").GetValue(func() string { return defaultFlagValue })
  166. if isAeadDisabled == "true" {
  167. aeadDisabled = true
  168. }
  169. }