2020-03-19 12:26:53 +00:00
|
|
|
package outbound
|
|
|
|
|
|
|
|
import (
|
|
|
|
"context"
|
2021-03-18 11:40:34 +00:00
|
|
|
"crypto/tls"
|
2020-03-19 12:26:53 +00:00
|
|
|
"fmt"
|
|
|
|
"net"
|
2021-10-16 12:19:59 +00:00
|
|
|
"net/http"
|
2020-03-19 12:26:53 +00:00
|
|
|
"strconv"
|
|
|
|
|
|
|
|
"github.com/Dreamacro/clash/component/dialer"
|
2023-01-11 14:01:15 +00:00
|
|
|
tlsC "github.com/Dreamacro/clash/component/tls"
|
2020-03-19 12:26:53 +00:00
|
|
|
C "github.com/Dreamacro/clash/constant"
|
2021-05-13 14:18:49 +00:00
|
|
|
"github.com/Dreamacro/clash/transport/gun"
|
|
|
|
"github.com/Dreamacro/clash/transport/trojan"
|
2022-03-29 16:15:39 +00:00
|
|
|
"github.com/Dreamacro/clash/transport/vless"
|
2020-03-19 12:26:53 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
type Trojan struct {
|
|
|
|
*Base
|
|
|
|
instance *trojan.Trojan
|
2021-10-16 12:19:59 +00:00
|
|
|
option *TrojanOption
|
2021-03-18 11:40:34 +00:00
|
|
|
|
|
|
|
// for gun mux
|
|
|
|
gunTLSConfig *tls.Config
|
|
|
|
gunConfig *gun.Config
|
2022-05-04 08:57:08 +00:00
|
|
|
transport *gun.TransportWrap
|
2020-03-19 12:26:53 +00:00
|
|
|
}
|
2022-04-22 10:55:28 +00:00
|
|
|
|
2020-03-19 12:26:53 +00:00
|
|
|
type TrojanOption struct {
|
2021-11-07 08:48:51 +00:00
|
|
|
BasicOption
|
2021-03-18 11:40:34 +00:00
|
|
|
Name string `proxy:"name"`
|
|
|
|
Server string `proxy:"server"`
|
|
|
|
Port int `proxy:"port"`
|
|
|
|
Password string `proxy:"password"`
|
|
|
|
ALPN []string `proxy:"alpn,omitempty"`
|
|
|
|
SNI string `proxy:"sni,omitempty"`
|
|
|
|
SkipCertVerify bool `proxy:"skip-cert-verify,omitempty"`
|
2022-07-11 05:42:28 +00:00
|
|
|
Fingerprint string `proxy:"fingerprint,omitempty"`
|
2021-03-18 11:40:34 +00:00
|
|
|
UDP bool `proxy:"udp,omitempty"`
|
|
|
|
Network string `proxy:"network,omitempty"`
|
|
|
|
GrpcOpts GrpcOptions `proxy:"grpc-opts,omitempty"`
|
2021-10-16 12:19:59 +00:00
|
|
|
WSOpts WSOptions `proxy:"ws-opts,omitempty"`
|
2022-03-29 16:15:39 +00:00
|
|
|
Flow string `proxy:"flow,omitempty"`
|
|
|
|
FlowShow bool `proxy:"flow-show,omitempty"`
|
2021-10-16 12:19:59 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
func (t *Trojan) plainStream(c net.Conn) (net.Conn, error) {
|
|
|
|
if t.option.Network == "ws" {
|
|
|
|
host, port, _ := net.SplitHostPort(t.addr)
|
|
|
|
wsOpts := &trojan.WebsocketOption{
|
|
|
|
Host: host,
|
|
|
|
Port: port,
|
|
|
|
Path: t.option.WSOpts.Path,
|
|
|
|
}
|
|
|
|
|
|
|
|
if t.option.SNI != "" {
|
|
|
|
wsOpts.Host = t.option.SNI
|
|
|
|
}
|
|
|
|
|
|
|
|
if len(t.option.WSOpts.Headers) != 0 {
|
|
|
|
header := http.Header{}
|
|
|
|
for key, value := range t.option.WSOpts.Headers {
|
|
|
|
header.Add(key, value)
|
|
|
|
}
|
|
|
|
wsOpts.Headers = header
|
|
|
|
}
|
|
|
|
|
|
|
|
return t.instance.StreamWebsocketConn(c, wsOpts)
|
|
|
|
}
|
|
|
|
|
|
|
|
return t.instance.StreamConn(c)
|
2020-03-19 12:26:53 +00:00
|
|
|
}
|
|
|
|
|
2021-04-29 03:23:14 +00:00
|
|
|
// StreamConn implements C.ProxyAdapter
|
2020-03-21 15:46:49 +00:00
|
|
|
func (t *Trojan) StreamConn(c net.Conn, metadata *C.Metadata) (net.Conn, error) {
|
2021-03-18 11:40:34 +00:00
|
|
|
var err error
|
|
|
|
if t.transport != nil {
|
|
|
|
c, err = gun.StreamGunWithConn(c, t.gunTLSConfig, t.gunConfig)
|
|
|
|
} else {
|
2021-10-16 12:19:59 +00:00
|
|
|
c, err = t.plainStream(c)
|
2021-03-18 11:40:34 +00:00
|
|
|
}
|
|
|
|
|
2020-03-21 15:46:49 +00:00
|
|
|
if err != nil {
|
|
|
|
return nil, fmt.Errorf("%s connect error: %w", t.addr, err)
|
|
|
|
}
|
|
|
|
|
2022-03-29 16:15:39 +00:00
|
|
|
c, err = t.instance.PresetXTLSConn(c)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2022-04-30 14:26:38 +00:00
|
|
|
if metadata.NetWork == C.UDP {
|
|
|
|
err = t.instance.WriteHeader(c, trojan.CommandUDP, serializesSocksAddr(metadata))
|
|
|
|
return c, err
|
|
|
|
}
|
2020-03-21 15:46:49 +00:00
|
|
|
err = t.instance.WriteHeader(c, trojan.CommandTCP, serializesSocksAddr(metadata))
|
|
|
|
return c, err
|
|
|
|
}
|
|
|
|
|
2021-04-29 03:23:14 +00:00
|
|
|
// DialContext implements C.ProxyAdapter
|
2021-11-07 08:48:51 +00:00
|
|
|
func (t *Trojan) DialContext(ctx context.Context, metadata *C.Metadata, opts ...dialer.Option) (_ C.Conn, err error) {
|
2021-03-22 15:26:20 +00:00
|
|
|
// gun transport
|
2021-11-07 08:48:51 +00:00
|
|
|
if t.transport != nil && len(opts) == 0 {
|
2021-03-18 11:40:34 +00:00
|
|
|
c, err := gun.StreamGunWithTransport(t.transport, t.gunConfig)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2022-03-29 16:15:39 +00:00
|
|
|
c, err = t.instance.PresetXTLSConn(c)
|
|
|
|
if err != nil {
|
|
|
|
c.Close()
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2021-03-18 11:40:34 +00:00
|
|
|
if err = t.instance.WriteHeader(c, trojan.CommandTCP, serializesSocksAddr(metadata)); err != nil {
|
|
|
|
c.Close()
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
return NewConn(c, t), nil
|
|
|
|
}
|
2022-12-19 16:11:02 +00:00
|
|
|
return t.DialContextWithDialer(ctx, dialer.NewDialer(t.Base.DialOptions(opts...)...), metadata)
|
2022-12-19 13:34:07 +00:00
|
|
|
}
|
2021-03-18 11:40:34 +00:00
|
|
|
|
2022-12-19 13:34:07 +00:00
|
|
|
// DialContextWithDialer implements C.ProxyAdapter
|
|
|
|
func (t *Trojan) DialContextWithDialer(ctx context.Context, dialer C.Dialer, metadata *C.Metadata) (_ C.Conn, err error) {
|
|
|
|
c, err := dialer.DialContext(ctx, "tcp", t.addr)
|
2020-03-19 12:26:53 +00:00
|
|
|
if err != nil {
|
2020-03-21 15:46:49 +00:00
|
|
|
return nil, fmt.Errorf("%s connect error: %w", t.addr, err)
|
2020-03-19 12:26:53 +00:00
|
|
|
}
|
|
|
|
tcpKeepAlive(c)
|
2021-03-22 15:26:20 +00:00
|
|
|
|
2022-12-16 14:15:44 +00:00
|
|
|
defer func(c net.Conn) {
|
2022-12-13 05:20:40 +00:00
|
|
|
safeConnClose(c, err)
|
2022-12-16 14:15:44 +00:00
|
|
|
}(c)
|
2021-03-22 15:26:20 +00:00
|
|
|
|
2020-03-21 15:46:49 +00:00
|
|
|
c, err = t.StreamConn(c, metadata)
|
2020-03-19 12:26:53 +00:00
|
|
|
if err != nil {
|
2020-03-21 15:46:49 +00:00
|
|
|
return nil, err
|
2020-03-19 12:26:53 +00:00
|
|
|
}
|
|
|
|
|
2020-03-21 15:46:49 +00:00
|
|
|
return NewConn(c, t), err
|
2020-03-19 12:26:53 +00:00
|
|
|
}
|
|
|
|
|
2021-10-15 13:44:53 +00:00
|
|
|
// ListenPacketContext implements C.ProxyAdapter
|
2021-11-07 08:48:51 +00:00
|
|
|
func (t *Trojan) ListenPacketContext(ctx context.Context, metadata *C.Metadata, opts ...dialer.Option) (_ C.PacketConn, err error) {
|
2021-03-22 15:26:20 +00:00
|
|
|
var c net.Conn
|
|
|
|
|
|
|
|
// grpc transport
|
2021-11-07 08:48:51 +00:00
|
|
|
if t.transport != nil && len(opts) == 0 {
|
2021-03-22 15:26:20 +00:00
|
|
|
c, err = gun.StreamGunWithTransport(t.transport, t.gunConfig)
|
2021-03-18 11:40:34 +00:00
|
|
|
if err != nil {
|
2021-03-22 15:26:20 +00:00
|
|
|
return nil, fmt.Errorf("%s connect error: %w", t.addr, err)
|
2021-03-18 11:40:34 +00:00
|
|
|
}
|
2022-12-22 04:31:45 +00:00
|
|
|
defer func(c net.Conn) {
|
2022-12-13 05:20:40 +00:00
|
|
|
safeConnClose(c, err)
|
2022-12-22 04:31:45 +00:00
|
|
|
}(c)
|
2022-12-19 13:34:07 +00:00
|
|
|
err = t.instance.WriteHeader(c, trojan.CommandUDP, serializesSocksAddr(metadata))
|
2021-04-05 15:26:13 +00:00
|
|
|
if err != nil {
|
2022-12-19 13:34:07 +00:00
|
|
|
return nil, err
|
2021-04-05 15:26:13 +00:00
|
|
|
}
|
2022-12-19 13:34:07 +00:00
|
|
|
|
|
|
|
pc := t.instance.PacketConn(c)
|
|
|
|
return newPacketConn(pc, t), err
|
|
|
|
}
|
2022-12-19 16:11:02 +00:00
|
|
|
return t.ListenPacketWithDialer(ctx, dialer.NewDialer(t.Base.DialOptions(opts...)...), metadata)
|
2022-12-19 13:34:07 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// ListenPacketWithDialer implements C.ProxyAdapter
|
|
|
|
func (t *Trojan) ListenPacketWithDialer(ctx context.Context, dialer C.Dialer, metadata *C.Metadata) (_ C.PacketConn, err error) {
|
|
|
|
c, err := dialer.DialContext(ctx, "tcp", t.addr)
|
|
|
|
if err != nil {
|
|
|
|
return nil, fmt.Errorf("%s connect error: %w", t.addr, err)
|
|
|
|
}
|
2022-12-22 04:31:45 +00:00
|
|
|
defer func(c net.Conn) {
|
2022-12-19 13:34:07 +00:00
|
|
|
safeConnClose(c, err)
|
2022-12-22 04:31:45 +00:00
|
|
|
}(c)
|
2022-12-19 13:34:07 +00:00
|
|
|
tcpKeepAlive(c)
|
|
|
|
c, err = t.plainStream(c)
|
|
|
|
if err != nil {
|
|
|
|
return nil, fmt.Errorf("%s connect error: %w", t.addr, err)
|
2021-03-18 11:40:34 +00:00
|
|
|
}
|
|
|
|
|
2022-05-01 22:27:45 +00:00
|
|
|
err = t.instance.WriteHeader(c, trojan.CommandUDP, serializesSocksAddr(metadata))
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
pc := t.instance.PacketConn(c)
|
|
|
|
return newPacketConn(pc, t), err
|
2022-04-30 03:36:42 +00:00
|
|
|
}
|
|
|
|
|
2022-12-19 13:34:07 +00:00
|
|
|
// SupportWithDialer implements C.ProxyAdapter
|
|
|
|
func (t *Trojan) SupportWithDialer() bool {
|
|
|
|
return true
|
|
|
|
}
|
|
|
|
|
2022-04-30 03:36:42 +00:00
|
|
|
// ListenPacketOnStreamConn implements C.ProxyAdapter
|
|
|
|
func (t *Trojan) ListenPacketOnStreamConn(c net.Conn, metadata *C.Metadata) (_ C.PacketConn, err error) {
|
2020-03-19 12:26:53 +00:00
|
|
|
pc := t.instance.PacketConn(c)
|
2020-06-12 15:39:03 +00:00
|
|
|
return newPacketConn(pc, t), err
|
2020-03-19 12:26:53 +00:00
|
|
|
}
|
|
|
|
|
2022-04-30 03:36:42 +00:00
|
|
|
// SupportUOT implements C.ProxyAdapter
|
|
|
|
func (t *Trojan) SupportUOT() bool {
|
|
|
|
return true
|
|
|
|
}
|
|
|
|
|
2020-03-19 12:26:53 +00:00
|
|
|
func NewTrojan(option TrojanOption) (*Trojan, error) {
|
2020-03-21 15:46:49 +00:00
|
|
|
addr := net.JoinHostPort(option.Server, strconv.Itoa(option.Port))
|
2020-03-19 12:26:53 +00:00
|
|
|
|
|
|
|
tOption := &trojan.Option{
|
2021-07-03 12:34:44 +00:00
|
|
|
Password: option.Password,
|
|
|
|
ALPN: option.ALPN,
|
|
|
|
ServerName: option.Server,
|
|
|
|
SkipCertVerify: option.SkipCertVerify,
|
2022-03-29 16:15:39 +00:00
|
|
|
FlowShow: option.FlowShow,
|
2022-07-11 05:42:28 +00:00
|
|
|
Fingerprint: option.Fingerprint,
|
2022-03-29 16:15:39 +00:00
|
|
|
}
|
|
|
|
|
2023-01-11 14:01:15 +00:00
|
|
|
switch option.Network {
|
|
|
|
case "", "tcp":
|
|
|
|
if len(option.Flow) >= 16 {
|
|
|
|
option.Flow = option.Flow[:16]
|
|
|
|
switch option.Flow {
|
|
|
|
case vless.XRO, vless.XRD, vless.XRS:
|
|
|
|
tOption.Flow = option.Flow
|
|
|
|
default:
|
|
|
|
return nil, fmt.Errorf("unsupported xtls flow type: %s", option.Flow)
|
|
|
|
}
|
2022-03-29 16:15:39 +00:00
|
|
|
}
|
2020-03-19 12:26:53 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
if option.SNI != "" {
|
|
|
|
tOption.ServerName = option.SNI
|
|
|
|
}
|
|
|
|
|
2021-03-18 11:40:34 +00:00
|
|
|
t := &Trojan{
|
2020-03-19 12:26:53 +00:00
|
|
|
Base: &Base{
|
2022-08-28 05:41:19 +00:00
|
|
|
name: option.Name,
|
|
|
|
addr: addr,
|
|
|
|
tp: C.Trojan,
|
|
|
|
udp: option.UDP,
|
|
|
|
iface: option.Interface,
|
|
|
|
rmark: option.RoutingMark,
|
|
|
|
prefer: C.NewDNSPrefer(option.IPVersion),
|
2020-03-19 12:26:53 +00:00
|
|
|
},
|
|
|
|
instance: trojan.New(tOption),
|
2021-10-16 12:19:59 +00:00
|
|
|
option: &option,
|
2021-03-18 11:40:34 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
if option.Network == "grpc" {
|
|
|
|
dialFn := func(network, addr string) (net.Conn, error) {
|
2021-11-07 08:48:51 +00:00
|
|
|
c, err := dialer.DialContext(context.Background(), "tcp", t.addr, t.Base.DialOptions()...)
|
2021-03-18 11:40:34 +00:00
|
|
|
if err != nil {
|
|
|
|
return nil, fmt.Errorf("%s connect error: %s", t.addr, err.Error())
|
|
|
|
}
|
|
|
|
tcpKeepAlive(c)
|
|
|
|
return c, nil
|
|
|
|
}
|
|
|
|
|
2022-07-11 05:42:28 +00:00
|
|
|
tlsConfig := &tls.Config{
|
2021-03-18 11:40:34 +00:00
|
|
|
NextProtos: option.ALPN,
|
|
|
|
MinVersion: tls.VersionTLS12,
|
|
|
|
InsecureSkipVerify: tOption.SkipCertVerify,
|
|
|
|
ServerName: tOption.ServerName,
|
2022-07-11 05:42:28 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
if len(option.Fingerprint) == 0 {
|
2023-01-13 01:55:01 +00:00
|
|
|
tlsConfig = tlsC.GetGlobalFingerprintTLSConfig(tlsConfig)
|
2022-07-11 05:42:28 +00:00
|
|
|
} else {
|
|
|
|
var err error
|
|
|
|
if tlsConfig, err = tlsC.GetSpecifiedFingerprintTLSConfig(tlsConfig, option.Fingerprint); err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
}
|
2021-03-18 11:40:34 +00:00
|
|
|
|
2023-01-11 14:01:15 +00:00
|
|
|
t.transport = gun.NewHTTP2Client(dialFn, tlsConfig)
|
2022-03-29 16:15:39 +00:00
|
|
|
|
2021-03-18 11:40:34 +00:00
|
|
|
t.gunTLSConfig = tlsConfig
|
|
|
|
t.gunConfig = &gun.Config{
|
|
|
|
ServiceName: option.GrpcOpts.GrpcServiceName,
|
|
|
|
Host: tOption.ServerName,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return t, nil
|
2020-03-19 12:26:53 +00:00
|
|
|
}
|