wind-socks 0.1.1

Placeholder
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111

use std::net::{IpAddr, Ipv4Addr, SocketAddr};

use fast_socks5::{ReplyError, Socks5Command, server::Socks5ServerProtocol, util::target_addr::TargetAddr as SocksTargetAddr};
use snafu::ResultExt;
use tokio::net::{TcpListener, TcpStream};
use tokio_util::sync::CancellationToken;
use wind_core::{AbstractInbound, InboundCallback, error, info, types::TargetAddr};

use crate::{CallbackSnafu, Error, IoSnafu, SocksSnafu};

pub struct SocksInboundOpt {
	/// Bind on address address. eg. `127.0.0.1:1080`
	pub listen_addr: SocketAddr,

	/// Our external IP address to be sent in reply packets (required for UDP)
	pub public_addr: Option<std::net::IpAddr>,

	/// Choose authentication type
	pub auth: AuthMode,

	/// Don't perform the auth handshake, send directly the command request
	pub skip_auth: bool,

	/// Allow UDP proxying, requires public-addr to be set
	pub allow_udp: bool,
}

pub enum AuthMode {
	NoAuth,
	Password { username: String, password: String },
}

pub struct SocksInbound {
	opts:   SocksInboundOpt,
	cancel: CancellationToken,
}

impl AbstractInbound for SocksInbound {
	async fn listen(&self, cb: &impl InboundCallback) -> eyre::Result<()> {
		let listener = TcpListener::bind(self.opts.listen_addr).await?;
		loop {
			tokio::select! {
				_ = self.cancel.cancelled() => {
					info!(target: "[IN] REACTOR", "Cancellation received, shutting down");
					break;
				}
				res = listener.accept() => {
					match res {
						Err(err) => error!(target:"[IN] REACTOR", "{:}", err),
						Ok((stream, client_addr)) => {
							match self.handle_income(stream, client_addr, cb).await {
								Ok(_) => {}
								Err(err) => error!(target: "[IN] HANDLER" , "{:}", err),
							}
						}
					}
				}
			};
		}
		Ok(())
	}
}

impl SocksInbound {
	pub async fn new(opts: SocksInboundOpt, cancel: CancellationToken) -> Self {
		Self { opts, cancel }
	}

	async fn handle_income(&self, stream: TcpStream, _client_addr: SocketAddr, cb: &impl InboundCallback) -> Result<(), Error> {
		let proto = match &self.opts.auth {
			AuthMode::NoAuth => Socks5ServerProtocol::accept_no_auth(stream).await.context(SocksSnafu)?,
			AuthMode::Password { username, password } => {
				Socks5ServerProtocol::accept_password_auth(stream, |user, pass| user == *username && pass == *password)
					.await
					.context(SocksSnafu)?
					.0
			}
		};
		let (proto, cmd, target_addr) = proto.read_command().await?;

		match cmd {
			Socks5Command::TCPConnect => {
				let inner = proto
					.reply_success(SocketAddr::new(IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1)), 0))
					.await?;
				let target_addr = match target_addr {
					SocksTargetAddr::Ip(socket_addr) => match socket_addr {
						SocketAddr::V4(socket_addr) => TargetAddr::IPv4(*socket_addr.ip(), socket_addr.port()),
						SocketAddr::V6(socket_addr) => TargetAddr::IPv6(*socket_addr.ip(), socket_addr.port()),
					},
					SocksTargetAddr::Domain(domain, port) => TargetAddr::Domain(domain, port),
				};
				cb.handle_tcpstream(target_addr, inner).await.context(CallbackSnafu)?;
			}
			Socks5Command::UDPAssociate if self.opts.allow_udp => {
				let reply_ip = IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1));
				crate::ext::run_udp_proxy(proto, &target_addr, None, reply_ip, move |inbound| async move {
					// Create a virtual UDP socket that handles SOCKS5 UDP headers
					let virtual_socket = crate::udp::Socks5UdpSocket::new(inbound.into()).context(IoSnafu)?;
					cb.handle_udpsocket(virtual_socket).await.context(CallbackSnafu)
				})
				.await?;
			}
			_ => {
				proto.reply_error(&ReplyError::CommandNotSupported).await?;
				return Err(ReplyError::CommandNotSupported.into());
			}
		};
		Ok(())
	}
}