mirror of
https://github.com/MetaCubeX/mihomo.git
synced 2025-12-19 16:30:07 +08:00
Some checks failed
Test / test (1.20, macos-13) (push) Waiting to run
Test / test (1.20, macos-latest) (push) Waiting to run
Test / test (1.20, ubuntu-24.04-arm) (push) Waiting to run
Test / test (1.20, windows-latest) (push) Waiting to run
Test / test (1.21, macos-13) (push) Waiting to run
Test / test (1.21, macos-latest) (push) Waiting to run
Test / test (1.21, ubuntu-24.04-arm) (push) Waiting to run
Test / test (1.21, windows-latest) (push) Waiting to run
Test / test (1.22, macos-13) (push) Waiting to run
Test / test (1.22, macos-latest) (push) Waiting to run
Test / test (1.22, ubuntu-24.04-arm) (push) Waiting to run
Test / test (1.22, windows-latest) (push) Waiting to run
Test / test (1.23, macos-13) (push) Waiting to run
Test / test (1.23, macos-latest) (push) Waiting to run
Test / test (1.23, ubuntu-24.04-arm) (push) Waiting to run
Test / test (1.23, windows-latest) (push) Waiting to run
Test / test (1.24, macos-13) (push) Waiting to run
Test / test (1.24, macos-latest) (push) Waiting to run
Test / test (1.24, ubuntu-24.04-arm) (push) Waiting to run
Test / test (1.24, windows-latest) (push) Waiting to run
Test / test (1.20, ubuntu-latest) (push) Failing after 1s
Test / test (1.21, ubuntu-latest) (push) Failing after 1s
Test / test (1.22, ubuntu-latest) (push) Failing after 1s
Test / test (1.23, ubuntu-latest) (push) Failing after 1s
Test / test (1.24, ubuntu-latest) (push) Failing after 1s
Trigger CMFA Update / trigger-CMFA-update (push) Failing after 1s
The DNS resolution of the overall UDP part has been delayed to the connection initiation stage. During the rule matching process, it will only be triggered when the IP rule without no-resolve is matched. For direct and wireguard outbound, the same logic as the TCP part will be followed, that is, when direct-nameserver (or DNS configured by wireguard) exists, the result of the matching process will be discarded and the domain name will be re-resolved. This re-resolution logic is only effective for fakeip. For reject and DNS outbound, no resolution is required. For other outbound, resolution will still be performed when the connection is initiated, and the domain name will not be sent directly to the remote server at present.
230 lines
6.1 KiB
Go
230 lines
6.1 KiB
Go
package outbound
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net"
|
|
"strconv"
|
|
|
|
N "github.com/metacubex/mihomo/common/net"
|
|
"github.com/metacubex/mihomo/common/structure"
|
|
"github.com/metacubex/mihomo/component/dialer"
|
|
"github.com/metacubex/mihomo/component/proxydialer"
|
|
C "github.com/metacubex/mihomo/constant"
|
|
obfs "github.com/metacubex/mihomo/transport/simple-obfs"
|
|
"github.com/metacubex/mihomo/transport/snell"
|
|
)
|
|
|
|
type Snell struct {
|
|
*Base
|
|
option *SnellOption
|
|
psk []byte
|
|
pool *snell.Pool
|
|
obfsOption *simpleObfsOption
|
|
version int
|
|
}
|
|
|
|
type SnellOption struct {
|
|
BasicOption
|
|
Name string `proxy:"name"`
|
|
Server string `proxy:"server"`
|
|
Port int `proxy:"port"`
|
|
Psk string `proxy:"psk"`
|
|
UDP bool `proxy:"udp,omitempty"`
|
|
Version int `proxy:"version,omitempty"`
|
|
ObfsOpts map[string]any `proxy:"obfs-opts,omitempty"`
|
|
}
|
|
|
|
type streamOption struct {
|
|
psk []byte
|
|
version int
|
|
addr string
|
|
obfsOption *simpleObfsOption
|
|
}
|
|
|
|
func snellStreamConn(c net.Conn, option streamOption) *snell.Snell {
|
|
switch option.obfsOption.Mode {
|
|
case "tls":
|
|
c = obfs.NewTLSObfs(c, option.obfsOption.Host)
|
|
case "http":
|
|
_, port, _ := net.SplitHostPort(option.addr)
|
|
c = obfs.NewHTTPObfs(c, option.obfsOption.Host, port)
|
|
}
|
|
return snell.StreamConn(c, option.psk, option.version)
|
|
}
|
|
|
|
// StreamConnContext implements C.ProxyAdapter
|
|
func (s *Snell) StreamConnContext(ctx context.Context, c net.Conn, metadata *C.Metadata) (net.Conn, error) {
|
|
c = snellStreamConn(c, streamOption{s.psk, s.version, s.addr, s.obfsOption})
|
|
err := s.writeHeaderContext(ctx, c, metadata)
|
|
return c, err
|
|
}
|
|
|
|
func (s *Snell) writeHeaderContext(ctx context.Context, c net.Conn, metadata *C.Metadata) (err error) {
|
|
if ctx.Done() != nil {
|
|
done := N.SetupContextForConn(ctx, c)
|
|
defer done(&err)
|
|
}
|
|
|
|
if metadata.NetWork == C.UDP {
|
|
err = snell.WriteUDPHeader(c, s.version)
|
|
return
|
|
}
|
|
err = snell.WriteHeader(c, metadata.String(), uint(metadata.DstPort), s.version)
|
|
return
|
|
}
|
|
|
|
// DialContext implements C.ProxyAdapter
|
|
func (s *Snell) DialContext(ctx context.Context, metadata *C.Metadata) (_ C.Conn, err error) {
|
|
if s.version == snell.Version2 {
|
|
c, err := s.pool.Get()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if err = s.writeHeaderContext(ctx, c, metadata); err != nil {
|
|
_ = c.Close()
|
|
return nil, err
|
|
}
|
|
return NewConn(c, s), err
|
|
}
|
|
|
|
return s.DialContextWithDialer(ctx, dialer.NewDialer(s.DialOptions()...), metadata)
|
|
}
|
|
|
|
// DialContextWithDialer implements C.ProxyAdapter
|
|
func (s *Snell) DialContextWithDialer(ctx context.Context, dialer C.Dialer, metadata *C.Metadata) (_ C.Conn, err error) {
|
|
if len(s.option.DialerProxy) > 0 {
|
|
dialer, err = proxydialer.NewByName(s.option.DialerProxy, dialer)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
c, err := dialer.DialContext(ctx, "tcp", s.addr)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("%s connect error: %w", s.addr, err)
|
|
}
|
|
|
|
defer func(c net.Conn) {
|
|
safeConnClose(c, err)
|
|
}(c)
|
|
|
|
c, err = s.StreamConnContext(ctx, c, metadata)
|
|
return NewConn(c, s), err
|
|
}
|
|
|
|
// ListenPacketContext implements C.ProxyAdapter
|
|
func (s *Snell) ListenPacketContext(ctx context.Context, metadata *C.Metadata) (C.PacketConn, error) {
|
|
return s.ListenPacketWithDialer(ctx, dialer.NewDialer(s.DialOptions()...), metadata)
|
|
}
|
|
|
|
// ListenPacketWithDialer implements C.ProxyAdapter
|
|
func (s *Snell) ListenPacketWithDialer(ctx context.Context, dialer C.Dialer, metadata *C.Metadata) (C.PacketConn, error) {
|
|
var err error
|
|
if len(s.option.DialerProxy) > 0 {
|
|
dialer, err = proxydialer.NewByName(s.option.DialerProxy, dialer)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
if err = s.ResolveUDP(ctx, metadata); err != nil {
|
|
return nil, err
|
|
}
|
|
c, err := dialer.DialContext(ctx, "tcp", s.addr)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
c, err = s.StreamConnContext(ctx, c, metadata)
|
|
|
|
pc := snell.PacketConn(c)
|
|
return newPacketConn(pc, s), nil
|
|
}
|
|
|
|
// SupportWithDialer implements C.ProxyAdapter
|
|
func (s *Snell) SupportWithDialer() C.NetWork {
|
|
return C.ALLNet
|
|
}
|
|
|
|
// SupportUOT implements C.ProxyAdapter
|
|
func (s *Snell) SupportUOT() bool {
|
|
return true
|
|
}
|
|
|
|
// ProxyInfo implements C.ProxyAdapter
|
|
func (s *Snell) ProxyInfo() C.ProxyInfo {
|
|
info := s.Base.ProxyInfo()
|
|
info.DialerProxy = s.option.DialerProxy
|
|
return info
|
|
}
|
|
|
|
func NewSnell(option SnellOption) (*Snell, error) {
|
|
addr := net.JoinHostPort(option.Server, strconv.Itoa(option.Port))
|
|
psk := []byte(option.Psk)
|
|
|
|
decoder := structure.NewDecoder(structure.Option{TagName: "obfs", WeaklyTypedInput: true})
|
|
obfsOption := &simpleObfsOption{Host: "bing.com"}
|
|
if err := decoder.Decode(option.ObfsOpts, obfsOption); err != nil {
|
|
return nil, fmt.Errorf("snell %s initialize obfs error: %w", addr, err)
|
|
}
|
|
|
|
switch obfsOption.Mode {
|
|
case "tls", "http", "":
|
|
break
|
|
default:
|
|
return nil, fmt.Errorf("snell %s obfs mode error: %s", addr, obfsOption.Mode)
|
|
}
|
|
|
|
// backward compatible
|
|
if option.Version == 0 {
|
|
option.Version = snell.DefaultSnellVersion
|
|
}
|
|
switch option.Version {
|
|
case snell.Version1, snell.Version2:
|
|
if option.UDP {
|
|
return nil, fmt.Errorf("snell version %d not support UDP", option.Version)
|
|
}
|
|
case snell.Version3:
|
|
default:
|
|
return nil, fmt.Errorf("snell version error: %d", option.Version)
|
|
}
|
|
|
|
s := &Snell{
|
|
Base: &Base{
|
|
name: option.Name,
|
|
addr: addr,
|
|
tp: C.Snell,
|
|
udp: option.UDP,
|
|
tfo: option.TFO,
|
|
mpTcp: option.MPTCP,
|
|
iface: option.Interface,
|
|
rmark: option.RoutingMark,
|
|
prefer: C.NewDNSPrefer(option.IPVersion),
|
|
},
|
|
option: &option,
|
|
psk: psk,
|
|
obfsOption: obfsOption,
|
|
version: option.Version,
|
|
}
|
|
|
|
if option.Version == snell.Version2 {
|
|
s.pool = snell.NewPool(func(ctx context.Context) (*snell.Snell, error) {
|
|
var err error
|
|
var cDialer C.Dialer = dialer.NewDialer(s.DialOptions()...)
|
|
if len(s.option.DialerProxy) > 0 {
|
|
cDialer, err = proxydialer.NewByName(s.option.DialerProxy, cDialer)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
c, err := cDialer.DialContext(ctx, "tcp", addr)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return snellStreamConn(c, streamOption{psk, option.Version, addr, obfsOption}), nil
|
|
})
|
|
}
|
|
return s, nil
|
|
}
|