outbound.go 6.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215
  1. // +build !confonly
  2. package outbound
  3. //go:generate go run github.com/v2fly/v2ray-core/v4/common/errors/errorgen
  4. import (
  5. "context"
  6. "time"
  7. core "github.com/v2fly/v2ray-core/v4"
  8. "github.com/v2fly/v2ray-core/v4/common"
  9. "github.com/v2fly/v2ray-core/v4/common/buf"
  10. "github.com/v2fly/v2ray-core/v4/common/net"
  11. "github.com/v2fly/v2ray-core/v4/common/platform"
  12. "github.com/v2fly/v2ray-core/v4/common/protocol"
  13. "github.com/v2fly/v2ray-core/v4/common/retry"
  14. "github.com/v2fly/v2ray-core/v4/common/session"
  15. "github.com/v2fly/v2ray-core/v4/common/signal"
  16. "github.com/v2fly/v2ray-core/v4/common/task"
  17. "github.com/v2fly/v2ray-core/v4/features/policy"
  18. "github.com/v2fly/v2ray-core/v4/proxy/vmess"
  19. "github.com/v2fly/v2ray-core/v4/proxy/vmess/encoding"
  20. "github.com/v2fly/v2ray-core/v4/transport"
  21. "github.com/v2fly/v2ray-core/v4/transport/internet"
  22. )
  23. // Handler is an outbound connection handler for VMess protocol.
  24. type Handler struct {
  25. serverList *protocol.ServerList
  26. serverPicker protocol.ServerPicker
  27. policyManager policy.Manager
  28. }
  29. // New creates a new VMess outbound handler.
  30. func New(ctx context.Context, config *Config) (*Handler, error) {
  31. serverList := protocol.NewServerList()
  32. for _, rec := range config.Receiver {
  33. s, err := protocol.NewServerSpecFromPB(rec)
  34. if err != nil {
  35. return nil, newError("failed to parse server spec").Base(err)
  36. }
  37. serverList.AddServer(s)
  38. }
  39. v := core.MustFromContext(ctx)
  40. handler := &Handler{
  41. serverList: serverList,
  42. serverPicker: protocol.NewRoundRobinServerPicker(serverList),
  43. policyManager: v.GetFeature(policy.ManagerType()).(policy.Manager),
  44. }
  45. return handler, nil
  46. }
  47. // Process implements proxy.Outbound.Process().
  48. func (h *Handler) Process(ctx context.Context, link *transport.Link, dialer internet.Dialer) error {
  49. var rec *protocol.ServerSpec
  50. var conn internet.Connection
  51. err := retry.ExponentialBackoff(5, 200).On(func() error {
  52. rec = h.serverPicker.PickServer()
  53. rawConn, err := dialer.Dial(ctx, rec.Destination())
  54. if err != nil {
  55. return err
  56. }
  57. conn = rawConn
  58. return nil
  59. })
  60. if err != nil {
  61. return newError("failed to find an available destination").Base(err).AtWarning()
  62. }
  63. defer conn.Close()
  64. outbound := session.OutboundFromContext(ctx)
  65. if outbound == nil || !outbound.Target.IsValid() {
  66. return newError("target not specified").AtError()
  67. }
  68. target := outbound.Target
  69. newError("tunneling request to ", target, " via ", rec.Destination()).WriteToLog(session.ExportIDToError(ctx))
  70. command := protocol.RequestCommandTCP
  71. if target.Network == net.Network_UDP {
  72. command = protocol.RequestCommandUDP
  73. }
  74. if target.Address.Family().IsDomain() && target.Address.Domain() == "v1.mux.cool" {
  75. command = protocol.RequestCommandMux
  76. }
  77. user := rec.PickUser()
  78. request := &protocol.RequestHeader{
  79. Version: encoding.Version,
  80. User: user,
  81. Command: command,
  82. Address: target.Address,
  83. Port: target.Port,
  84. Option: protocol.RequestOptionChunkStream,
  85. }
  86. account := request.User.Account.(*vmess.MemoryAccount)
  87. request.Security = account.Security
  88. if request.Security == protocol.SecurityType_AES128_GCM || request.Security == protocol.SecurityType_NONE || request.Security == protocol.SecurityType_CHACHA20_POLY1305 {
  89. request.Option.Set(protocol.RequestOptionChunkMasking)
  90. }
  91. if shouldEnablePadding(request.Security) && request.Option.Has(protocol.RequestOptionChunkMasking) {
  92. request.Option.Set(protocol.RequestOptionGlobalPadding)
  93. }
  94. if request.Security == protocol.SecurityType_ZERO {
  95. request.Security = protocol.SecurityType_NONE
  96. request.Option.Clear(protocol.RequestOptionChunkStream)
  97. request.Option.Clear(protocol.RequestOptionChunkMasking)
  98. }
  99. if account.AuthenticatedLengthExperiment {
  100. request.Option.Set(protocol.RequestOptionAuthenticatedLength)
  101. }
  102. input := link.Reader
  103. output := link.Writer
  104. isAEAD := false
  105. if !aeadDisabled && len(account.AlterIDs) == 0 {
  106. isAEAD = true
  107. }
  108. session := encoding.NewClientSession(ctx, isAEAD, protocol.DefaultIDHash)
  109. sessionPolicy := h.policyManager.ForLevel(request.User.Level)
  110. ctx, cancel := context.WithCancel(ctx)
  111. timer := signal.CancelAfterInactivity(ctx, cancel, sessionPolicy.Timeouts.ConnectionIdle)
  112. requestDone := func() error {
  113. defer timer.SetTimeout(sessionPolicy.Timeouts.DownlinkOnly)
  114. writer := buf.NewBufferedWriter(buf.NewWriter(conn))
  115. if err := session.EncodeRequestHeader(request, writer); err != nil {
  116. return newError("failed to encode request").Base(err).AtWarning()
  117. }
  118. bodyWriter := session.EncodeRequestBody(request, writer)
  119. if err := buf.CopyOnceTimeout(input, bodyWriter, time.Millisecond*100); err != nil && err != buf.ErrNotTimeoutReader && err != buf.ErrReadTimeout {
  120. return newError("failed to write first payload").Base(err)
  121. }
  122. if err := writer.SetBuffered(false); err != nil {
  123. return err
  124. }
  125. if err := buf.Copy(input, bodyWriter, buf.UpdateActivity(timer)); err != nil {
  126. return err
  127. }
  128. if request.Option.Has(protocol.RequestOptionChunkStream) && !account.NoTerminationSignal {
  129. if err := bodyWriter.WriteMultiBuffer(buf.MultiBuffer{}); err != nil {
  130. return err
  131. }
  132. }
  133. return nil
  134. }
  135. responseDone := func() error {
  136. defer timer.SetTimeout(sessionPolicy.Timeouts.UplinkOnly)
  137. reader := &buf.BufferedReader{Reader: buf.NewReader(conn)}
  138. header, err := session.DecodeResponseHeader(reader)
  139. if err != nil {
  140. return newError("failed to read header").Base(err)
  141. }
  142. h.handleCommand(rec.Destination(), header.Command)
  143. bodyReader := session.DecodeResponseBody(request, reader)
  144. return buf.Copy(bodyReader, output, buf.UpdateActivity(timer))
  145. }
  146. responseDonePost := task.OnSuccess(responseDone, task.Close(output))
  147. if err := task.Run(ctx, requestDone, responseDonePost); err != nil {
  148. return newError("connection ends").Base(err)
  149. }
  150. return nil
  151. }
  152. var (
  153. enablePadding = false
  154. aeadDisabled = false
  155. )
  156. func shouldEnablePadding(s protocol.SecurityType) bool {
  157. return enablePadding || s == protocol.SecurityType_AES128_GCM || s == protocol.SecurityType_CHACHA20_POLY1305 || s == protocol.SecurityType_AUTO
  158. }
  159. func init() {
  160. common.Must(common.RegisterConfig((*Config)(nil), func(ctx context.Context, config interface{}) (interface{}, error) {
  161. return New(ctx, config.(*Config))
  162. }))
  163. const defaultFlagValue = "NOT_DEFINED_AT_ALL"
  164. paddingValue := platform.NewEnvFlag("v2ray.vmess.padding").GetValue(func() string { return defaultFlagValue })
  165. if paddingValue != defaultFlagValue {
  166. enablePadding = true
  167. }
  168. isAeadDisabled := platform.NewEnvFlag("v2ray.vmess.aead.disabled").GetValue(func() string { return defaultFlagValue })
  169. if isAeadDisabled == "true" {
  170. aeadDisabled = true
  171. }
  172. }