vane 0.8.15

A flow-based reverse proxy with multi-layer routing and programmable pipelines.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

/* src/plugins/l4/proxy/mod.rs */

pub mod domain;
pub mod forwarder;
pub mod ip;
pub mod node;

use crate::engine::interfaces::ConnectionObject;
use crate::layers::l4::model::ResolvedTarget;
use crate::resources::kv::KvStore;
use anyhow::{Result, anyhow};
use fancy_log::{LogLevel, log};

pub async fn execute_proxy(
	target: ResolvedTarget,
	kv: &KvStore,
	conn: ConnectionObject,
) -> Result<()> {
	let protocol = kv
		.get("conn.proto")
		.map(|s| s.as_str())
		.unwrap_or("unknown");

	match conn {
		ConnectionObject::Tcp(stream) => {
			forwarder::proxy_tcp_stream(stream, target).await?;
		}
		ConnectionObject::Stream(stream) => {
			log(
				LogLevel::Debug,
				&format!(
					"➜ Proxying L4+ Stream ({}) to {}:{}",
					protocol, target.ip, target.port
				),
			);
			forwarder::proxy_generic_stream(stream, target).await?;
		}
		ConnectionObject::Udp {
			socket,
			datagram,
			client_addr,
		} => {
			let is_quic = kv
				.get("conn.proto.carrier")
				.map(|p| p == "quic")
				.unwrap_or(false);
			if is_quic {
				forwarder::proxy_quic_association(socket, &datagram, client_addr, target).await?;
			} else {
				forwarder::proxy_udp_direct(socket, &datagram, client_addr, target).await?;
			}
		}
		ConnectionObject::Virtual(desc) => {
			return Err(anyhow!(
				"Cannot transport-proxy a Virtual connection: {desc}"
			));
		}
	}

	Ok(())
}