| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202 |
- // Package socks contains protocol definition and io lib for SOCKS5 protocol
- package socks
- import (
- "encoding/binary"
- "fmt"
- "io"
- )
- const (
- socksVersion = uint8(5)
- )
- // Authentication request header of Socks5 protocol
- type Socks5AuthenticationRequest struct {
- version byte
- nMethods byte
- authMethods [256]byte
- }
- func ReadAuthentication(reader io.Reader) (auth Socks5AuthenticationRequest, err error) {
- buffer := make([]byte, 2)
- nBytes, err := reader.Read(buffer)
- if err != nil {
- return
- }
- if nBytes < 2 {
- err = fmt.Errorf("Expected 2 bytes read, but actaully %d bytes read", nBytes)
- return
- }
- auth.version = buffer[0]
- if auth.version != socksVersion {
- err = fmt.Errorf("Unknown SOCKS version %d", auth.version)
- return
- }
- auth.nMethods = buffer[1]
- if auth.nMethods <= 0 {
- err = fmt.Errorf("Zero length of authentication methods")
- return
- }
- buffer = make([]byte, auth.nMethods)
- nBytes, err = reader.Read(buffer)
- if err != nil {
- return
- }
- if nBytes != int(auth.nMethods) {
- err = fmt.Errorf("Unmatching number of auth methods, expecting %d, but got %d", auth.nMethods, nBytes)
- return
- }
- copy(auth.authMethods[:nBytes], buffer)
- return
- }
- type Socks5AuthenticationResponse struct {
- version byte
- authMethod byte
- }
- func (r *Socks5AuthenticationResponse) ToBytes() []byte {
- buffer := make([]byte, 2 /* size of Socks5AuthenticationResponse */)
- buffer[0] = r.version
- buffer[1] = r.authMethod
- return buffer
- }
- func WriteAuthentication(writer io.Writer, response Socks5AuthenticationResponse) error {
- _, err := writer.Write(response.ToBytes())
- return err
- }
- const (
- AddrTypeIPv4 = byte(0x01)
- AddrTypeIPv6 = byte(0x04)
- AddrTypeDomain = byte(0x03)
- )
- type Socks5Request struct {
- version byte
- command byte
- addrType byte
- ipv4 [4]byte
- domain string
- ipv6 [16]byte
- port uint16
- }
- func ReadRequest(reader io.Reader) (request *Socks5Request, err error) {
- request = new(Socks5Request)
- buffer := make([]byte, 4)
- nBytes, err := reader.Read(buffer)
- if err != nil {
- return
- }
- if nBytes < len(buffer) {
- err = fmt.Errorf("Unable to read request.")
- return
- }
- request.version = buffer[0]
- request.command = buffer[1]
- // buffer[2] is a reserved field
- request.addrType = buffer[3]
- switch request.addrType {
- case 0x01:
- nBytes, err = reader.Read(request.ipv4[:])
- if err != nil {
- return
- }
- if nBytes != 4 {
- err = fmt.Errorf("Unable to read IPv4 address.")
- return
- }
- case 0x03:
- buffer = make([]byte, 257)
- nBytes, err = reader.Read(buffer)
- if err != nil {
- return
- }
- domainLength := buffer[0]
- if nBytes != int(domainLength)+1 {
- err = fmt.Errorf("Unable to read domain")
- return
- }
- request.domain = string(buffer[1 : domainLength+1])
- case 0x04:
- nBytes, err = reader.Read(request.ipv6[:])
- if err != nil {
- return
- }
- if nBytes != 16 {
- err = fmt.Errorf("Unable to read IPv4 address.")
- return
- }
- default:
- err = fmt.Errorf("Unexpected address type %d", request.addrType)
- return
- }
- buffer = make([]byte, 2)
- nBytes, err = reader.Read(buffer)
- if err != nil {
- return
- }
- if nBytes != 2 {
- err = fmt.Errorf("Unable to read port.")
- return
- }
- request.port = binary.BigEndian.Uint16(buffer)
- return
- }
- const (
- ErrorSuccess = byte(0x00)
- ErrorGeneralFailure = byte(0x01)
- ErrorConnectionNotAllowed = byte(0x02)
- ErrorNetworkUnreachable = byte(0x03)
- ErrorHostUnUnreachable = byte(0x04)
- ErrorConnectionRefused = byte(0x05)
- ErrorTTLExpired = byte(0x06)
- ErrorCommandNotSupported = byte(0x07)
- ErrorAddressTypeNotSupported = byte(0x08)
- )
- type Socks5Response struct {
- Version byte
- Error byte
- AddrType byte
- IPv4 [4]byte
- Domain string
- IPv6 [16]byte
- Port uint16
- }
- func (r Socks5Response) toBytes() []byte {
- buffer := make([]byte, 0, 300)
- buffer = append(buffer, r.Version)
- buffer = append(buffer, r.Error)
- buffer = append(buffer, 0x00) // reserved
- buffer = append(buffer, r.AddrType)
- switch r.AddrType {
- case 0x01:
- buffer = append(buffer, r.IPv4[:]...)
- case 0x03:
- buffer = append(buffer, byte(len(r.Domain)))
- buffer = append(buffer, []byte(r.Domain)...)
- case 0x04:
- buffer = append(buffer, r.IPv6[:]...)
- }
- portBuffer := make([]byte, 2)
- binary.BigEndian.PutUint16(portBuffer, r.Port)
- buffer = append(buffer, portBuffer...)
- return buffer
- }
- func WriteResponse(writer io.Writer, response Socks5Response) error {
- _, err := writer.Write(response.toBytes())
- return err
- }
|