2020-11-25 13:01:53 +02:00
|
|
|
package trojan
|
|
|
|
|
|
|
|
import (
|
|
|
|
"context"
|
|
|
|
"syscall"
|
|
|
|
"time"
|
|
|
|
|
2020-12-04 03:36:16 +02:00
|
|
|
"github.com/xtls/xray-core/common"
|
|
|
|
"github.com/xtls/xray-core/common/buf"
|
2021-01-08 14:00:46 +02:00
|
|
|
"github.com/xtls/xray-core/common/errors"
|
2020-12-04 03:36:16 +02:00
|
|
|
"github.com/xtls/xray-core/common/net"
|
|
|
|
"github.com/xtls/xray-core/common/platform"
|
|
|
|
"github.com/xtls/xray-core/common/protocol"
|
|
|
|
"github.com/xtls/xray-core/common/retry"
|
|
|
|
"github.com/xtls/xray-core/common/session"
|
|
|
|
"github.com/xtls/xray-core/common/signal"
|
|
|
|
"github.com/xtls/xray-core/common/task"
|
|
|
|
core "github.com/xtls/xray-core/core"
|
|
|
|
"github.com/xtls/xray-core/features/policy"
|
|
|
|
"github.com/xtls/xray-core/features/stats"
|
|
|
|
"github.com/xtls/xray-core/transport"
|
|
|
|
"github.com/xtls/xray-core/transport/internet"
|
2021-12-15 02:28:47 +02:00
|
|
|
"github.com/xtls/xray-core/transport/internet/stat"
|
2020-12-04 03:36:16 +02:00
|
|
|
"github.com/xtls/xray-core/transport/internet/xtls"
|
2020-11-25 13:01:53 +02:00
|
|
|
)
|
|
|
|
|
|
|
|
// Client is a inbound handler for trojan protocol
|
|
|
|
type Client struct {
|
|
|
|
serverPicker protocol.ServerPicker
|
|
|
|
policyManager policy.Manager
|
|
|
|
}
|
|
|
|
|
|
|
|
// NewClient create a new trojan client.
|
|
|
|
func NewClient(ctx context.Context, config *ClientConfig) (*Client, error) {
|
|
|
|
serverList := protocol.NewServerList()
|
|
|
|
for _, rec := range config.Server {
|
|
|
|
s, err := protocol.NewServerSpecFromPB(rec)
|
|
|
|
if err != nil {
|
|
|
|
return nil, newError("failed to parse server spec").Base(err)
|
|
|
|
}
|
|
|
|
serverList.AddServer(s)
|
|
|
|
}
|
|
|
|
if serverList.Size() == 0 {
|
|
|
|
return nil, newError("0 server")
|
|
|
|
}
|
|
|
|
|
|
|
|
v := core.MustFromContext(ctx)
|
|
|
|
client := &Client{
|
|
|
|
serverPicker: protocol.NewRoundRobinServerPicker(serverList),
|
|
|
|
policyManager: v.GetFeature(policy.ManagerType()).(policy.Manager),
|
|
|
|
}
|
|
|
|
return client, nil
|
|
|
|
}
|
|
|
|
|
|
|
|
// Process implements OutboundHandler.Process().
|
|
|
|
func (c *Client) Process(ctx context.Context, link *transport.Link, dialer internet.Dialer) error {
|
|
|
|
outbound := session.OutboundFromContext(ctx)
|
|
|
|
if outbound == nil || !outbound.Target.IsValid() {
|
|
|
|
return newError("target not specified")
|
|
|
|
}
|
|
|
|
destination := outbound.Target
|
|
|
|
network := destination.Network
|
|
|
|
|
|
|
|
var server *protocol.ServerSpec
|
2021-09-20 15:11:21 +03:00
|
|
|
var conn stat.Connection
|
2020-11-25 13:01:53 +02:00
|
|
|
|
|
|
|
err := retry.ExponentialBackoff(5, 100).On(func() error {
|
|
|
|
server = c.serverPicker.PickServer()
|
|
|
|
rawConn, err := dialer.Dial(ctx, server.Destination())
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
conn = rawConn
|
|
|
|
return nil
|
|
|
|
})
|
|
|
|
if err != nil {
|
|
|
|
return newError("failed to find an available destination").AtWarning().Base(err)
|
|
|
|
}
|
Quic related improvements (#915)
* DialSystem for Quic
DialSystem() is needed in case of Android client,
where the raw conn is protected for vpn service
* Fix client dialer log
Log such as:
tunneling request to tcp:www.google.com:80 via tcp:x.x.x.x:443
the second "tcp" is misleading when using mKcp or quic transport
Remove the second "tcp" and add the correct logging for transport dialer:
- transport/internet/tcp: dialing TCP to tcp:x.x.x.x:443
- transport/internet/quic: dialing quic to udp:x.x.x.x:443
* Quic new stream allocation mode
Currently this is how Quic works: client muxing all tcp and udp traffic through a single session, when there are more than 32 running streams in the session,
the next stream request will fail and open with a new session (port). Imagine lineup the session from left to right:
|
| |
| | |
As the streams finishes, we still open stream from the left, original session. So the base session will always be there and new sessions on the right come and go.
However, either due to QOS or bugs in Quic implementation, the traffic "wear out" the base session. It will become slower and in the end not receiving any data from server side.
I couldn't figure out a solution for this problem at the moment, as a workaround:
| |
| | |
| | |
I came up with this new stream allocation mode, that it will never open new streams in the old sessions, but only from current or new session from right.
The keeplive config is turned off from server and client side. This way old sessions will natually close and new sessions keep generating.
Note the frequency of new session is still controlled by the server side. Server can assign a large max stream limit. In this case the new allocation mode will be similar to the current mode.
2022-01-29 01:11:30 +02:00
|
|
|
newError("tunneling request to ", destination, " via ", server.Destination().NetAddr()).WriteToLog(session.ExportIDToError(ctx))
|
2020-11-25 13:01:53 +02:00
|
|
|
|
|
|
|
defer conn.Close()
|
|
|
|
|
2020-12-14 11:05:15 +02:00
|
|
|
iConn := conn
|
2021-09-20 15:11:21 +03:00
|
|
|
statConn, ok := iConn.(*stat.CounterConnection)
|
2020-12-14 11:05:15 +02:00
|
|
|
if ok {
|
|
|
|
iConn = statConn.Connection
|
|
|
|
}
|
|
|
|
|
2020-11-25 13:01:53 +02:00
|
|
|
user := server.PickUser()
|
|
|
|
account, ok := user.Account.(*MemoryAccount)
|
|
|
|
if !ok {
|
|
|
|
return newError("user account is not valid")
|
|
|
|
}
|
|
|
|
|
2020-12-14 11:05:15 +02:00
|
|
|
connWriter := &ConnWriter{
|
|
|
|
Flow: account.Flow,
|
2020-11-25 13:01:53 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
var rawConn syscall.RawConn
|
2020-12-11 05:05:39 +02:00
|
|
|
var sctx context.Context
|
2020-11-25 13:01:53 +02:00
|
|
|
|
|
|
|
allowUDP443 := false
|
2020-12-14 11:05:15 +02:00
|
|
|
switch connWriter.Flow {
|
2020-12-11 05:05:39 +02:00
|
|
|
case XRO + "-udp443", XRD + "-udp443", XRS + "-udp443":
|
2020-11-25 13:01:53 +02:00
|
|
|
allowUDP443 = true
|
2020-12-14 11:05:15 +02:00
|
|
|
connWriter.Flow = connWriter.Flow[:16]
|
2020-11-25 13:01:53 +02:00
|
|
|
fallthrough
|
2020-12-11 05:05:39 +02:00
|
|
|
case XRO, XRD, XRS:
|
2020-11-25 13:01:53 +02:00
|
|
|
if destination.Address.Family().IsDomain() && destination.Address.Domain() == muxCoolAddress {
|
2020-12-14 11:05:15 +02:00
|
|
|
return newError(connWriter.Flow + " doesn't support Mux").AtWarning()
|
2020-11-25 13:01:53 +02:00
|
|
|
}
|
|
|
|
if destination.Network == net.Network_UDP {
|
|
|
|
if !allowUDP443 && destination.Port == 443 {
|
2020-12-14 11:05:15 +02:00
|
|
|
return newError(connWriter.Flow + " stopped UDP/443").AtInfo()
|
2020-11-25 13:01:53 +02:00
|
|
|
}
|
2020-12-14 11:05:15 +02:00
|
|
|
connWriter.Flow = ""
|
2020-11-25 13:01:53 +02:00
|
|
|
} else { // enable XTLS only if making TCP request
|
|
|
|
if xtlsConn, ok := iConn.(*xtls.Conn); ok {
|
|
|
|
xtlsConn.RPRX = true
|
2020-12-14 11:05:15 +02:00
|
|
|
xtlsConn.SHOW = xtls_show
|
2020-12-11 05:05:39 +02:00
|
|
|
xtlsConn.MARK = "XTLS"
|
2020-12-14 11:05:15 +02:00
|
|
|
if connWriter.Flow == XRS {
|
2020-12-11 05:05:39 +02:00
|
|
|
sctx = ctx
|
2020-12-14 11:05:15 +02:00
|
|
|
connWriter.Flow = XRD
|
2020-12-11 05:05:39 +02:00
|
|
|
}
|
2020-12-14 11:05:15 +02:00
|
|
|
if connWriter.Flow == XRD {
|
2020-11-25 13:01:53 +02:00
|
|
|
xtlsConn.DirectMode = true
|
2020-12-11 05:05:39 +02:00
|
|
|
if sc, ok := xtlsConn.Connection.(syscall.Conn); ok {
|
|
|
|
rawConn, _ = sc.SyscallConn()
|
|
|
|
}
|
2020-11-25 13:01:53 +02:00
|
|
|
}
|
|
|
|
} else {
|
2020-12-14 11:05:15 +02:00
|
|
|
return newError(`failed to use ` + connWriter.Flow + `, maybe "security" is not "xtls"`).AtWarning()
|
2020-11-25 13:01:53 +02:00
|
|
|
}
|
|
|
|
}
|
2020-12-14 11:05:15 +02:00
|
|
|
default:
|
2020-11-25 13:01:53 +02:00
|
|
|
if _, ok := iConn.(*xtls.Conn); ok {
|
|
|
|
panic(`To avoid misunderstanding, you must fill in Trojan "flow" when using XTLS.`)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
sessionPolicy := c.policyManager.ForLevel(user.Level)
|
|
|
|
ctx, cancel := context.WithCancel(ctx)
|
|
|
|
timer := signal.CancelAfterInactivity(ctx, cancel, sessionPolicy.Timeouts.ConnectionIdle)
|
|
|
|
|
|
|
|
postRequest := func() error {
|
|
|
|
defer timer.SetTimeout(sessionPolicy.Timeouts.DownlinkOnly)
|
|
|
|
|
|
|
|
bufferWriter := buf.NewBufferedWriter(buf.NewWriter(conn))
|
2021-01-08 14:00:46 +02:00
|
|
|
|
2020-11-25 13:01:53 +02:00
|
|
|
connWriter.Writer = bufferWriter
|
|
|
|
connWriter.Target = destination
|
|
|
|
connWriter.Account = account
|
|
|
|
|
2021-01-08 14:00:46 +02:00
|
|
|
var bodyWriter buf.Writer
|
2020-11-25 13:01:53 +02:00
|
|
|
if destination.Network == net.Network_UDP {
|
|
|
|
bodyWriter = &PacketWriter{Writer: connWriter, Target: destination}
|
|
|
|
} else {
|
|
|
|
bodyWriter = connWriter
|
|
|
|
}
|
|
|
|
|
|
|
|
// write some request payload to buffer
|
|
|
|
if err = buf.CopyOnceTimeout(link.Reader, bodyWriter, time.Millisecond*100); err != nil && err != buf.ErrNotTimeoutReader && err != buf.ErrReadTimeout {
|
|
|
|
return newError("failed to write A request payload").Base(err).AtWarning()
|
|
|
|
}
|
|
|
|
|
|
|
|
// Flush; bufferWriter.WriteMultiBufer now is bufferWriter.writer.WriteMultiBuffer
|
|
|
|
if err = bufferWriter.SetBuffered(false); err != nil {
|
|
|
|
return newError("failed to flush payload").Base(err).AtWarning()
|
|
|
|
}
|
|
|
|
|
2021-01-08 14:00:46 +02:00
|
|
|
// Send header if not sent yet
|
|
|
|
if _, err = connWriter.Write([]byte{}); err != nil {
|
|
|
|
return err.(*errors.Error).AtWarning()
|
|
|
|
}
|
|
|
|
|
2020-11-25 13:01:53 +02:00
|
|
|
if err = buf.Copy(link.Reader, bodyWriter, buf.UpdateActivity(timer)); err != nil {
|
|
|
|
return newError("failed to transfer request payload").Base(err).AtInfo()
|
|
|
|
}
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
getResponse := func() error {
|
|
|
|
defer timer.SetTimeout(sessionPolicy.Timeouts.UplinkOnly)
|
|
|
|
|
|
|
|
var reader buf.Reader
|
|
|
|
if network == net.Network_UDP {
|
|
|
|
reader = &PacketReader{
|
|
|
|
Reader: conn,
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
reader = buf.NewReader(conn)
|
|
|
|
}
|
|
|
|
if rawConn != nil {
|
|
|
|
var counter stats.Counter
|
|
|
|
if statConn != nil {
|
|
|
|
counter = statConn.ReadCounter
|
|
|
|
}
|
2020-12-11 05:05:39 +02:00
|
|
|
return ReadV(reader, link.Writer, timer, iConn.(*xtls.Conn), rawConn, counter, sctx)
|
2020-11-25 13:01:53 +02:00
|
|
|
}
|
|
|
|
return buf.Copy(reader, link.Writer, buf.UpdateActivity(timer))
|
|
|
|
}
|
|
|
|
|
2021-10-19 19:57:14 +03:00
|
|
|
responseDoneAndCloseWriter := task.OnSuccess(getResponse, task.Close(link.Writer))
|
2020-11-25 13:01:53 +02:00
|
|
|
if err := task.Run(ctx, postRequest, responseDoneAndCloseWriter); err != nil {
|
|
|
|
return newError("connection ends").Base(err)
|
|
|
|
}
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func init() {
|
|
|
|
common.Must(common.RegisterConfig((*ClientConfig)(nil), func(ctx context.Context, config interface{}) (interface{}, error) {
|
|
|
|
return NewClient(ctx, config.(*ClientConfig))
|
|
|
|
}))
|
|
|
|
|
|
|
|
const defaultFlagValue = "NOT_DEFINED_AT_ALL"
|
|
|
|
|
|
|
|
xtlsShow := platform.NewEnvFlag("xray.trojan.xtls.show").GetValue(func() string { return defaultFlagValue })
|
|
|
|
if xtlsShow == "true" {
|
2020-12-14 11:05:15 +02:00
|
|
|
xtls_show = true
|
2020-11-25 13:01:53 +02:00
|
|
|
}
|
|
|
|
}
|