[WIP] shadowsocks implementation added
This commit is contained in:
Alex Kh
parent
40996888c9
commit
6583090d4f
2259 changed files with 417734 additions and 92 deletions
239
client/3rd/PacketProcessor/PacketProcessor/TunnelInterface.m
Normal file
239
client/3rd/PacketProcessor/PacketProcessor/TunnelInterface.m
Normal file
|
|
@ -0,0 +1,239 @@
|
|||
//
|
||||
// TunnelInterface.m
|
||||
// Potatso
|
||||
//
|
||||
// Created by LEI on 12/23/15.
|
||||
// Copyright © 2015 TouchingApp. All rights reserved.
|
||||
//
|
||||
|
||||
#import "TunnelInterface.h"
|
||||
#import <netinet/ip.h>
|
||||
#import "ipv4/lwip/ip4.h"
|
||||
#import "lwip/udp.h"
|
||||
#import "lwip/ip.h"
|
||||
#import <arpa/inet.h>
|
||||
#import "inet_chksum.h"
|
||||
#import "tun2socks/tun2socks.h"
|
||||
@import CocoaAsyncSocket;
|
||||
|
||||
#define kTunnelInterfaceErrorDomain [NSString stringWithFormat:@"%@.TunnelInterface", [[NSBundle mainBundle] bundleIdentifier]]
|
||||
|
||||
@interface TunnelInterface () <GCDAsyncUdpSocketDelegate>
|
||||
@property (nonatomic) NEPacketTunnelFlow *tunnelPacketFlow;
|
||||
@property (nonatomic) NSMutableDictionary *udpSession;
|
||||
@property (nonatomic) GCDAsyncUdpSocket *udpSocket;
|
||||
@property (nonatomic) int readFd;
|
||||
@property (nonatomic) int writeFd;
|
||||
@end
|
||||
|
||||
@implementation TunnelInterface
|
||||
|
||||
+ (TunnelInterface *)sharedInterface {
|
||||
static dispatch_once_t onceToken;
|
||||
static TunnelInterface *interface;
|
||||
dispatch_once(&onceToken, ^{
|
||||
interface = [TunnelInterface new];
|
||||
});
|
||||
return interface;
|
||||
}
|
||||
|
||||
- (instancetype)init {
|
||||
self = [super init];
|
||||
if (self) {
|
||||
_udpSession = [NSMutableDictionary dictionaryWithCapacity:5];
|
||||
_udpSocket = [[GCDAsyncUdpSocket alloc] initWithDelegate:self delegateQueue:dispatch_queue_create("udp", NULL)];
|
||||
}
|
||||
return self;
|
||||
}
|
||||
|
||||
+ (NSError *)setupWithPacketTunnelFlow:(NEPacketTunnelFlow *)packetFlow {
|
||||
if (packetFlow == nil) {
|
||||
return [NSError errorWithDomain:kTunnelInterfaceErrorDomain code:1 userInfo:@{NSLocalizedDescriptionKey: @"PacketTunnelFlow can't be nil."}];
|
||||
}
|
||||
[TunnelInterface sharedInterface].tunnelPacketFlow = packetFlow;
|
||||
|
||||
NSError *error;
|
||||
GCDAsyncUdpSocket *udpSocket = [TunnelInterface sharedInterface].udpSocket;
|
||||
[udpSocket bindToPort:0 error:&error];
|
||||
if (error) {
|
||||
return [NSError errorWithDomain:kTunnelInterfaceErrorDomain code:1 userInfo:@{NSLocalizedDescriptionKey: [NSString stringWithFormat:@"UDP bind fail(%@).", [error localizedDescription]]}];
|
||||
}
|
||||
[udpSocket beginReceiving:&error];
|
||||
if (error) {
|
||||
return [NSError errorWithDomain:kTunnelInterfaceErrorDomain code:1 userInfo:@{NSLocalizedDescriptionKey: [NSString stringWithFormat:@"UDP bind fail(%@).", [error localizedDescription]]}];
|
||||
}
|
||||
|
||||
int fds[2];
|
||||
if (pipe(fds) < 0) {
|
||||
return [NSError errorWithDomain:kTunnelInterfaceErrorDomain code:-1 userInfo:@{NSLocalizedDescriptionKey: @"Unable to pipe."}];
|
||||
}
|
||||
[TunnelInterface sharedInterface].readFd = fds[0];
|
||||
[TunnelInterface sharedInterface].writeFd = fds[1];
|
||||
return nil;
|
||||
}
|
||||
|
||||
+ (void)startTun2Socks: (int)socksServerPort {
|
||||
[NSThread detachNewThreadSelector:@selector(_startTun2Socks:) toTarget:[TunnelInterface sharedInterface] withObject:@(socksServerPort)];
|
||||
}
|
||||
|
||||
+ (void)stop {
|
||||
stop_tun2socks();
|
||||
}
|
||||
|
||||
+ (void)writePacket:(NSData *)packet {
|
||||
dispatch_async(dispatch_get_main_queue(), ^{
|
||||
[[TunnelInterface sharedInterface].tunnelPacketFlow writePackets:@[packet] withProtocols:@[@(AF_INET)]];
|
||||
});
|
||||
}
|
||||
|
||||
+ (void)processPackets {
|
||||
__weak typeof(self) weakSelf = self;
|
||||
[[TunnelInterface sharedInterface].tunnelPacketFlow readPacketsWithCompletionHandler:^(NSArray<NSData *> * _Nonnull packets, NSArray<NSNumber *> * _Nonnull protocols) {
|
||||
for (NSData *packet in packets) {
|
||||
uint8_t *data = (uint8_t *)packet.bytes;
|
||||
struct ip_hdr *iphdr = (struct ip_hdr *)data;
|
||||
uint8_t proto = IPH_PROTO(iphdr);
|
||||
if (proto == IP_PROTO_UDP) {
|
||||
[[TunnelInterface sharedInterface] handleUDPPacket:packet];
|
||||
}else if (proto == IP_PROTO_TCP) {
|
||||
[[TunnelInterface sharedInterface] handleTCPPPacket:packet];
|
||||
}
|
||||
}
|
||||
[weakSelf processPackets];
|
||||
}];
|
||||
|
||||
}
|
||||
|
||||
- (void)_startTun2Socks: (NSNumber *)socksServerPort {
|
||||
char socks_server[50];
|
||||
sprintf(socks_server, "127.0.0.1:%d", (int)([socksServerPort integerValue]));
|
||||
#if TCP_DATA_LOG_ENABLE
|
||||
char *log_lvel = "debug";
|
||||
#else
|
||||
char *log_lvel = "none";
|
||||
#endif
|
||||
char *argv[] = {
|
||||
"tun2socks",
|
||||
"--netif-ipaddr",
|
||||
"192.0.2.4",
|
||||
"--netif-netmask",
|
||||
"255.255.255.0",
|
||||
"--loglevel",
|
||||
log_lvel,
|
||||
"--socks-server-addr",
|
||||
socks_server
|
||||
};
|
||||
tun2socks_main(sizeof(argv)/sizeof(argv[0]), argv, self.readFd, TunnelMTU);
|
||||
close(self.readFd);
|
||||
close(self.writeFd);
|
||||
[[NSNotificationCenter defaultCenter] postNotificationName:kTun2SocksStoppedNotification object:nil];
|
||||
}
|
||||
|
||||
- (void)handleTCPPPacket: (NSData *)packet {
|
||||
uint8_t message[TunnelMTU+2];
|
||||
memcpy(message + 2, packet.bytes, packet.length);
|
||||
message[0] = packet.length / 256;
|
||||
message[1] = packet.length % 256;
|
||||
write(self.writeFd , message , packet.length + 2);
|
||||
}
|
||||
|
||||
- (void)handleUDPPacket: (NSData *)packet {
|
||||
uint8_t *data = (uint8_t *)packet.bytes;
|
||||
int data_len = (int)packet.length;
|
||||
struct ip_hdr *iphdr = (struct ip_hdr *)data;
|
||||
uint8_t version = IPH_V(iphdr);
|
||||
|
||||
switch (version) {
|
||||
case 4: {
|
||||
uint16_t iphdr_hlen = IPH_HL(iphdr) * 4;
|
||||
data = data + iphdr_hlen;
|
||||
data_len -= iphdr_hlen;
|
||||
struct udp_hdr *udphdr = (struct udp_hdr *)data;
|
||||
|
||||
data = data + sizeof(struct udp_hdr *);
|
||||
data_len -= sizeof(struct udp_hdr *);
|
||||
|
||||
NSData *outData = [[NSData alloc] initWithBytes:data length:data_len];
|
||||
struct in_addr dest = { iphdr->dest.addr };
|
||||
NSString *destHost = [NSString stringWithUTF8String:inet_ntoa(dest)];
|
||||
NSString *key = [self strForHost:iphdr->dest.addr port:udphdr->dest];
|
||||
NSString *value = [self strForHost:iphdr->src.addr port:udphdr->src];;
|
||||
self.udpSession[key] = value;
|
||||
[self.udpSocket sendData:outData toHost:destHost port:ntohs(udphdr->dest) withTimeout:30 tag:0];
|
||||
} break;
|
||||
case 6: {
|
||||
|
||||
} break;
|
||||
}
|
||||
}
|
||||
|
||||
- (void)udpSocket:(GCDAsyncUdpSocket *)sock didReceiveData:(NSData *)data fromAddress:(NSData *)address withFilterContext:(id)filterContext {
|
||||
const struct sockaddr_in *addr = (const struct sockaddr_in *)[address bytes];
|
||||
ip_addr_p_t dest ={ addr->sin_addr.s_addr };
|
||||
in_port_t dest_port = addr->sin_port;
|
||||
NSString *strHostPort = self.udpSession[[self strForHost:dest.addr port:dest_port]];
|
||||
NSArray *hostPortArray = [strHostPort componentsSeparatedByString:@":"];
|
||||
int src_ip = [hostPortArray[0] intValue];
|
||||
int src_port = [hostPortArray[1] intValue];
|
||||
uint8_t *bytes = (uint8_t *)[data bytes];
|
||||
int bytes_len = (int)data.length;
|
||||
int udp_length = sizeof(struct udp_hdr) + bytes_len;
|
||||
int total_len = IP_HLEN + udp_length;
|
||||
|
||||
ip_addr_p_t src = {src_ip};
|
||||
struct ip_hdr *iphdr = generateNewIPHeader(IP_PROTO_UDP, dest, src, total_len);
|
||||
|
||||
struct udp_hdr udphdr;
|
||||
udphdr.src = dest_port;
|
||||
udphdr.dest = src_port;
|
||||
udphdr.len = hton16(udp_length);
|
||||
udphdr.chksum = hton16(0);
|
||||
|
||||
uint8_t *udpdata = malloc(sizeof(uint8_t) * udp_length);
|
||||
memcpy(udpdata, &udphdr, sizeof(struct udp_hdr));
|
||||
memcpy(udpdata + sizeof(struct udp_hdr), bytes, bytes_len);
|
||||
|
||||
ip_addr_t odest = { dest.addr };
|
||||
ip_addr_t osrc = { src_ip };
|
||||
|
||||
struct pbuf *p_udp = pbuf_alloc(PBUF_TRANSPORT, udp_length, PBUF_RAM);
|
||||
pbuf_take(p_udp, udpdata, udp_length);
|
||||
|
||||
struct udp_hdr *new_udphdr = (struct udp_hdr *) p_udp->payload;
|
||||
new_udphdr->chksum = inet_chksum_pseudo(p_udp, IP_PROTO_UDP, p_udp->len, &odest, &osrc);
|
||||
|
||||
uint8_t *ipdata = malloc(sizeof(uint8_t) * total_len);
|
||||
memcpy(ipdata, iphdr, IP_HLEN);
|
||||
memcpy(ipdata + sizeof(struct ip_hdr), p_udp->payload, udp_length);
|
||||
|
||||
NSData *outData = [[NSData alloc] initWithBytes:ipdata length:total_len];
|
||||
free(ipdata);
|
||||
free(iphdr);
|
||||
free(udpdata);
|
||||
pbuf_free(p_udp);
|
||||
[TunnelInterface writePacket:outData];
|
||||
}
|
||||
|
||||
struct ip_hdr *generateNewIPHeader(u8_t proto, ip_addr_p_t src, ip_addr_p_t dest, uint16_t total_len) {
|
||||
struct ip_hdr *iphdr = malloc(sizeof(struct ip_hdr));
|
||||
IPH_VHL_SET(iphdr, 4, IP_HLEN / 4);
|
||||
IPH_TOS_SET(iphdr, 0);
|
||||
IPH_LEN_SET(iphdr, htons(total_len));
|
||||
IPH_ID_SET(iphdr, 0);
|
||||
IPH_OFFSET_SET(iphdr, 0);
|
||||
IPH_TTL_SET(iphdr, 64);
|
||||
IPH_PROTO_SET(iphdr, IP_PROTO_UDP);
|
||||
iphdr->src = src;
|
||||
iphdr->dest = dest;
|
||||
IPH_CHKSUM_SET(iphdr, 0);
|
||||
IPH_CHKSUM_SET(iphdr, inet_chksum(iphdr, IP_HLEN));
|
||||
return iphdr;
|
||||
}
|
||||
|
||||
- (NSString *)strForHost: (int)host port: (int)port {
|
||||
return [NSString stringWithFormat:@"%d:%d",host, port];
|
||||
}
|
||||
|
||||
|
||||
|
||||
@end
|
||||
Loading…
Add table
Add a link
Reference in a new issue