mirror of
https://github.com/apernet/hysteria.git
synced 2025-04-03 04:27:39 +03:00
91 lines
2.4 KiB
Go
91 lines
2.4 KiB
Go
package http
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"net"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/apernet/hysteria/core/transport"
|
|
"github.com/apernet/hysteria/core/utils"
|
|
|
|
"github.com/elazarl/goproxy/ext/auth"
|
|
|
|
"github.com/apernet/hysteria/core/acl"
|
|
"github.com/apernet/hysteria/core/cs"
|
|
"github.com/elazarl/goproxy"
|
|
)
|
|
|
|
func NewProxyHTTPServer(hyClient *cs.Client, transport *transport.ClientTransport, idleTimeout time.Duration,
|
|
aclEngine *acl.Engine,
|
|
basicAuthFunc func(user, password string) bool,
|
|
newDialFunc func(reqAddr string, action acl.Action, arg string),
|
|
proxyErrorFunc func(reqAddr string, err error),
|
|
) (*goproxy.ProxyHttpServer, error) {
|
|
proxy := goproxy.NewProxyHttpServer()
|
|
proxy.Logger = &nopLogger{}
|
|
proxy.NonproxyHandler = http.NotFoundHandler()
|
|
proxy.Tr = &http.Transport{
|
|
Dial: func(network, addr string) (conn net.Conn, err error) {
|
|
defer func() {
|
|
if err != nil {
|
|
proxyErrorFunc(addr, err)
|
|
}
|
|
}()
|
|
// Parse addr string
|
|
host, port, err := utils.SplitHostPort(addr)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
// ACL
|
|
action, arg := acl.ActionProxy, ""
|
|
var ipAddr *net.IPAddr
|
|
var resErr error
|
|
if aclEngine != nil {
|
|
action, arg, _, ipAddr, resErr = aclEngine.ResolveAndMatch(host, port, false)
|
|
// Doesn't always matter if the resolution fails, as we may send it through HyClient
|
|
}
|
|
newDialFunc(addr, action, arg)
|
|
// Handle according to the action
|
|
switch action {
|
|
case acl.ActionDirect:
|
|
if resErr != nil {
|
|
return nil, resErr
|
|
}
|
|
return transport.DialTCP(&net.TCPAddr{
|
|
IP: ipAddr.IP,
|
|
Port: int(port),
|
|
Zone: ipAddr.Zone,
|
|
})
|
|
case acl.ActionProxy:
|
|
return hyClient.DialTCP(addr)
|
|
case acl.ActionBlock:
|
|
return nil, errors.New("blocked by ACL")
|
|
case acl.ActionHijack:
|
|
hijackIPAddr, err := transport.ResolveIPAddr(arg)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return transport.DialTCP(&net.TCPAddr{
|
|
IP: hijackIPAddr.IP,
|
|
Port: int(port),
|
|
Zone: hijackIPAddr.Zone,
|
|
})
|
|
default:
|
|
return nil, fmt.Errorf("unknown action %d", action)
|
|
}
|
|
},
|
|
IdleConnTimeout: idleTimeout,
|
|
// Disable HTTP2 support? ref: https://github.com/elazarl/goproxy/issues/361
|
|
}
|
|
proxy.ConnectDial = nil
|
|
if basicAuthFunc != nil {
|
|
auth.ProxyBasic(proxy, "hysteria", basicAuthFunc)
|
|
}
|
|
return proxy, nil
|
|
}
|
|
|
|
type nopLogger struct{}
|
|
|
|
func (n *nopLogger) Printf(format string, v ...interface{}) {}
|