forked from txthinking/brook
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
d13b214
commit 048edc9
Showing
8 changed files
with
807 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| package brook | ||
|
|
||
| // RunTproxy used to start a tproxy | ||
| func RunTproxy(address, server, password string, tcpTimeout, tcpDeadline, udpDeadline int) error { | ||
| c, err := NewTproxy(address, server, password, tcpTimeout, tcpDeadline, udpDeadline) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| return c.ListenAndServe() | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| #!/bin/bash | ||
|
|
||
| sudo ip rule add fwmark 1 lookup 100 | ||
| sudo ip route add local 0.0.0.0/0 dev lo table 100 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,31 @@ | ||
| #!/bin/bash | ||
|
|
||
| sudo sysctl -w net.ipv4.ip_forward=1 | ||
| sudo sysctl -w net.ipv6.conf.all.forwarding=1 | ||
|
|
||
| sudo iptables -t mangle -F | ||
| sudo iptables -t mangle -X | ||
| sudo iptables -P INPUT ACCEPT | ||
| sudo iptables -P FORWARD ACCEPT | ||
| sudo iptables -P OUTPUT ACCEPT | ||
|
|
||
| sudo iptables -t mangle -N BROOK | ||
|
|
||
| sudo iptables -t mangle -A BROOK -d 0.0.0.0/8 -j RETURN | ||
| sudo iptables -t mangle -A BROOK -d 10.0.0.0/8 -j RETURN | ||
| sudo iptables -t mangle -A BROOK -d 127.0.0.0/8 -j RETURN | ||
| sudo iptables -t mangle -A BROOK -d 169.254.0.0/16 -j RETURN | ||
| sudo iptables -t mangle -A BROOK -d 172.16.0.0/12 -j RETURN | ||
| sudo iptables -t mangle -A BROOK -d 192.168.0.0/16 -j RETURN | ||
| sudo iptables -t mangle -A BROOK -d 224.0.0.0/4 -j RETURN | ||
| sudo iptables -t mangle -A BROOK -d 240.0.0.0/4 -j RETURN | ||
| sudo iptables -t mangle -A BROOK -d BROOK_SERVER_IP -j RETURN | ||
|
|
||
| sudo iptables -t mangle -A BROOK -j MARK --set-mark 1 | ||
| sudo iptables -t mangle -A BROOK -j ACCEPT | ||
|
|
||
| sudo iptables -t mangle -A PREROUTING -p tcp -m socket -j BROOK | ||
| sudo iptables -t mangle -A PREROUTING -p tcp -j TPROXY --tproxy-mark 0x1/0x1 --on-port BROOK_TPROXY_PORT | ||
|
|
||
| sudo iptables -t mangle -A PREROUTING -p udp -m socket -j BROOK | ||
| sudo iptables -t mangle -A PREROUTING -p udp -j TPROXY --tproxy-mark 0x1/0x1 --on-port BROOK_TPROXY_PORT |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,111 @@ | ||
| package tproxy | ||
|
|
||
| import ( | ||
| "net" | ||
| "os" | ||
| "strconv" | ||
| "strings" | ||
| "syscall" | ||
|
|
||
| "github.com/txthinking/ant" | ||
| ) | ||
|
|
||
| func ListenTCP(network string, laddr *net.TCPAddr) (*net.TCPListener, error) { | ||
| l, err := net.ListenTCP(network, laddr) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| defer l.Close() | ||
|
|
||
| f, err := l.File() | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| defer f.Close() | ||
| fd := int(f.Fd()) | ||
| if err := syscall.SetsockoptInt(fd, syscall.SOL_IP, syscall.IP_TRANSPARENT, 1); err != nil { | ||
| return nil, err | ||
| } | ||
| tmp, err := net.FileListener(f) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| return tmp.(*net.TCPListener), nil | ||
| } | ||
|
|
||
| func DialTCP(network, addr string) (net.Conn, error) { | ||
| taddr, err := net.ResolveTCPAddr("tcp", addr) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| saddr, err := tcpAddrToSocketAddr(taddr) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| fd, err := syscall.Socket(tcpAddrFamily("tcp", taddr, nil), syscall.SOCK_STREAM, syscall.IPPROTO_TCP) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| if err := syscall.SetsockoptInt(fd, syscall.SOL_SOCKET, syscall.SO_REUSEADDR, 1); err != nil { | ||
| syscall.Close(fd) | ||
| return nil, err | ||
| } | ||
| if err := syscall.SetsockoptInt(fd, syscall.SOL_IP, syscall.IP_TRANSPARENT, 1); err != nil { | ||
| syscall.Close(fd) | ||
| return nil, err | ||
| } | ||
| if err := syscall.SetNonblock(fd, true); err != nil { | ||
| syscall.Close(fd) | ||
| return nil, err | ||
| } | ||
| if err = syscall.Connect(fd, saddr); err != nil && !strings.Contains(err.Error(), "operation now in progress") { | ||
| syscall.Close(fd) | ||
| return nil, err | ||
| } | ||
|
|
||
| f := os.NewFile(uintptr(fd), string(ant.RandomNumber())) | ||
| defer f.Close() | ||
|
|
||
| c, err := net.FileConn(f) | ||
| if err != nil { | ||
| syscall.Close(fd) | ||
| return nil, err | ||
| } | ||
| return c, nil | ||
| } | ||
|
|
||
| func tcpAddrToSocketAddr(addr *net.TCPAddr) (syscall.Sockaddr, error) { | ||
| switch { | ||
| case addr.IP.To4() != nil: | ||
| ip := [4]byte{} | ||
| copy(ip[:], addr.IP.To4()) | ||
|
|
||
| return &syscall.SockaddrInet4{Addr: ip, Port: addr.Port}, nil | ||
|
|
||
| default: | ||
| ip := [16]byte{} | ||
| copy(ip[:], addr.IP.To16()) | ||
|
|
||
| zoneID, err := strconv.ParseUint(addr.Zone, 10, 32) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| return &syscall.SockaddrInet6{Addr: ip, Port: addr.Port, ZoneId: uint32(zoneID)}, nil | ||
| } | ||
| } | ||
|
|
||
| func tcpAddrFamily(net string, laddr, raddr *net.TCPAddr) int { | ||
| switch net[len(net)-1] { | ||
| case '4': | ||
| return syscall.AF_INET | ||
| case '6': | ||
| return syscall.AF_INET6 | ||
| } | ||
|
|
||
| if (laddr == nil || laddr.IP.To4() != nil) && | ||
| (raddr == nil || raddr.IP.To4() != nil) { | ||
| return syscall.AF_INET | ||
| } | ||
| return syscall.AF_INET6 | ||
| } |
Oops, something went wrong.