pre saved
This commit is contained in:
@@ -1,3 +0,0 @@
|
||||
struct TcpConnection {}
|
||||
|
||||
impl TcpConnection {}
|
||||
@@ -0,0 +1 @@
|
||||
pub mod tcp_connection;
|
||||
@@ -0,0 +1,111 @@
|
||||
use netrunner_common::protocol::codec::socks::SocksRequest;
|
||||
use smoltcp::iface::SocketHandle;
|
||||
use smoltcp::socket::tcp;
|
||||
use tokio::io::{AsyncReadExt, AsyncWriteExt};
|
||||
use tokio::net::TcpStream; // Твой код парсера
|
||||
use tokio::sync::mpsc;
|
||||
|
||||
pub enum ConnectionState {
|
||||
/// Сокет только что принял соединение (SYN-ACK завершен)
|
||||
Established,
|
||||
/// Мы в процессе SOCKS5 рукопожатия с локальным прокси
|
||||
Handshaking,
|
||||
/// Соединение готово к передаче данных (Bridge)
|
||||
Active,
|
||||
/// Ошибка или закрытие
|
||||
Closed,
|
||||
}
|
||||
|
||||
pub struct TcpConnection {
|
||||
handle: SocketHandle,
|
||||
state: ConnectionState,
|
||||
tx: mpsc::UnboundedSender<Vec<u8>>,
|
||||
rx: mpsc::UnboundedReceiver<Vec<u8>>,
|
||||
}
|
||||
|
||||
impl TcpConnection {
|
||||
pub fn new(
|
||||
handle: SocketHandle,
|
||||
proxy_addr: String,
|
||||
target_addr: std::net::SocketAddr,
|
||||
) -> Self {
|
||||
let (tx_to_proxy, mut rx_from_smol) = mpsc::unbounded_channel::<Vec<u8>>();
|
||||
let (tx_to_smol, rx_from_proxy) = mpsc::unbounded_channel::<Vec<u8>>();
|
||||
|
||||
// Запускаем асинхронную логику в фоне
|
||||
tokio::spawn(async move {
|
||||
// 1. Подключаемся
|
||||
let mut stream = match TcpStream::connect(&proxy_addr).await {
|
||||
Ok(s) => s,
|
||||
Err(_) => return, // Тут можно добавить логирование
|
||||
};
|
||||
|
||||
// 2. SOCKS Handshake
|
||||
if SocksRequest::perform_client_handshake(&mut stream, &target_addr)
|
||||
.await
|
||||
.is_err()
|
||||
{
|
||||
return;
|
||||
}
|
||||
|
||||
// 3. Копирование данных (Bridge)
|
||||
let (mut reader, mut writer) = stream.into_split();
|
||||
|
||||
// Читаем из канала -> Пишем в прокси
|
||||
let to_proxy = async {
|
||||
while let Some(data) = rx_from_smol.recv().await {
|
||||
if writer.write_all(&data).await.is_err() {
|
||||
break;
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
// Читаем из прокси -> Пишем в канал для smoltcp
|
||||
let from_proxy = async {
|
||||
let mut buf = [0u8; 4096];
|
||||
loop {
|
||||
match reader.read(&mut buf).await {
|
||||
Ok(0) | Err(_) => break,
|
||||
Ok(n) => {
|
||||
if tx_to_smol.send(buf[..n].to_vec()).is_err() {
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
tokio::select! {
|
||||
_ = to_proxy => {},
|
||||
_ = from_proxy => {},
|
||||
}
|
||||
});
|
||||
|
||||
Self {
|
||||
handle,
|
||||
state: ConnectionState::Active, // Сразу переходим в Active, т.к. задача пошла
|
||||
tx: tx_to_proxy,
|
||||
rx: rx_from_proxy,
|
||||
}
|
||||
}
|
||||
|
||||
pub fn poll_and_process(&mut self, socket: &mut tcp::Socket) {
|
||||
// 1. Из smoltcp -> В канал задачи
|
||||
if socket.can_recv() {
|
||||
let mut buf = [0u8; 4096];
|
||||
if let Ok(n) = socket.recv_slice(&mut buf) {
|
||||
if n > 0 {
|
||||
let _ = self.tx.send(buf[..n].to_vec());
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// 2. Из канала задачи -> В smoltcp
|
||||
if socket.can_send() {
|
||||
// try_recv не блокирует поток, что нам и нужно
|
||||
if let Ok(data) = self.rx.try_recv() {
|
||||
let _ = socket.send_slice(&data);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+1
-1
@@ -1,2 +1,2 @@
|
||||
|
||||
pub mod connections;
|
||||
pub mod tun;
|
||||
|
||||
+7
-5
@@ -13,12 +13,17 @@ async fn main() {
|
||||
info!("Initializing NetRunner Stack...");
|
||||
let tun_device = Tun::create(|config| {
|
||||
config
|
||||
.tun_name("tun0")
|
||||
.address((10, 0, 0, 1))
|
||||
.netmask((255, 255, 255, 0))
|
||||
.destination((10, 0, 0, 2))
|
||||
.up();
|
||||
})
|
||||
.expect("Failed to initialize TUN device");
|
||||
|
||||
tun_device.clear_default_route();
|
||||
tun_device.setup_linux_routes();
|
||||
|
||||
info!("TUN interface is UP: 10.0.0.1/24");
|
||||
|
||||
let config = Config::new(smoltcp::wire::HardwareAddress::Ip);
|
||||
@@ -40,11 +45,8 @@ async fn main() {
|
||||
});
|
||||
|
||||
let mut engine = Engine::new(config, caps, socks_addr);
|
||||
|
||||
engine.add_address(smoltcp::wire::IpCidr::new(
|
||||
smoltcp::wire::IpAddress::v4(10, 0, 0, 2),
|
||||
24,
|
||||
));
|
||||
engine.set_any_ip(true);
|
||||
engine.set_transparent_mode();
|
||||
|
||||
info!("Stack IP initialized: 10.0.0.2");
|
||||
|
||||
|
||||
@@ -9,9 +9,11 @@ use std::{
|
||||
};
|
||||
use tracing::{debug, info};
|
||||
|
||||
use crate::tun::engine::START_TIME;
|
||||
use crate::{connections::tcp_connection::TcpConnection, tun::engine::START_TIME};
|
||||
pub struct ConnectionManager {
|
||||
last_activity: HashMap<SocketHandle, StdInstant>,
|
||||
active_tcp_sessions: HashMap<SocketHandle, TcpConnection>,
|
||||
//active_udp_sessions: HashMap<SocketHandle, UdpSession>,
|
||||
proxy_ip: String,
|
||||
}
|
||||
|
||||
@@ -19,6 +21,7 @@ impl ConnectionManager {
|
||||
pub fn new(ip: String) -> Self {
|
||||
Self {
|
||||
last_activity: HashMap::new(),
|
||||
active_tcp_sessions: HashMap::new(),
|
||||
proxy_ip: ip,
|
||||
}
|
||||
}
|
||||
@@ -45,31 +48,33 @@ impl ConnectionManager {
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
fn handle_tcp(&mut self, handle: SocketHandle, socket: &mut tcp::Socket) {
|
||||
// Важно: проверяем, есть ли что принимать
|
||||
if socket.can_recv() {
|
||||
let mut data_processed = false;
|
||||
if socket.state() == tcp::State::Established {
|
||||
let proxy_ip = self.proxy_ip.clone(); // Берем из конфига менеджера
|
||||
|
||||
// Используем recv_slice или проверяем длину в recv
|
||||
let result = socket.recv(|data| {
|
||||
if !data.is_empty() {
|
||||
debug!(handle=%handle, len=data.len(), "TCP: received data");
|
||||
data_processed = true;
|
||||
(data.len(), ())
|
||||
} else {
|
||||
(0, ())
|
||||
}
|
||||
let conn = self.active_tcp_sessions.entry(handle).or_insert_with(|| {
|
||||
// 1. Получаем endpoint и безопасно распаковываем его
|
||||
let endpoint = socket
|
||||
.remote_endpoint()
|
||||
.expect("TCP socket in Established state must have a remote endpoint");
|
||||
|
||||
// 2. Конвертируем smoltcp::wire::IpAddress в std::net::IpAddr
|
||||
let ip: std::net::IpAddr = match endpoint.addr {
|
||||
smoltcp::wire::IpAddress::Ipv4(v4) => std::net::IpAddr::V4(v4.into()),
|
||||
smoltcp::wire::IpAddress::Ipv6(v6) => std::net::IpAddr::V6(v6.into()),
|
||||
};
|
||||
|
||||
// 3. Собираем финальный SocketAddr
|
||||
let target_addr = std::net::SocketAddr::new(ip, endpoint.port);
|
||||
|
||||
info!(handle=%handle, target=%target_addr, "Creating new TcpConnection bridge");
|
||||
TcpConnection::new(handle, proxy_ip, target_addr)
|
||||
});
|
||||
|
||||
if let Err(e) = result {
|
||||
debug!(handle=%handle, "TCP recv error: {:?}", e);
|
||||
}
|
||||
conn.poll_and_process(socket);
|
||||
}
|
||||
|
||||
// Если сокет закрывается, нужно дать ему закрыться, а не крутить вечно
|
||||
if !socket.may_recv() && socket.state() == tcp::State::CloseWait {
|
||||
socket.close();
|
||||
if socket.state() == tcp::State::Closed {
|
||||
self.active_tcp_sessions.remove(&handle);
|
||||
}
|
||||
}
|
||||
|
||||
@@ -126,16 +131,43 @@ impl ConnectionManager {
|
||||
const TARGET_FREE_TCP: usize = 16;
|
||||
const TARGET_FREE_UDP: usize = 8;
|
||||
|
||||
let tcp_listeners = socket_set
|
||||
.iter()
|
||||
.filter(|(_, s)| {
|
||||
if let Some(tcp) = tcp::Socket::downcast(s) {
|
||||
tcp.state() == tcp::State::Listen
|
||||
} else {
|
||||
false
|
||||
for &port in &[80, 443, 8080] {
|
||||
let current_port_sockets = socket_set
|
||||
.iter()
|
||||
.filter(|(_, s)| {
|
||||
if let Some(tcp) = tcp::Socket::downcast(s) {
|
||||
// Если эндпоинт есть - сверяем порт
|
||||
if let Some(endpoint) = tcp.local_endpoint() {
|
||||
return endpoint.port == port;
|
||||
}
|
||||
|
||||
// КЛЮЧЕВОЙ МОМЕНТ:
|
||||
// Если эндпоинта НЕТ, но сокет НЕ в состоянии CLOSED,
|
||||
// или он только что был создан для прослушивания.
|
||||
// В smoltcp после listen() сокет переходит в LISTEN,
|
||||
// но local_endpoint может появиться чуть позже.
|
||||
tcp.state() == tcp::State::Listen
|
||||
} else {
|
||||
false
|
||||
}
|
||||
})
|
||||
.count();
|
||||
|
||||
if current_port_sockets < 5 {
|
||||
let mut s = Self::create_tcp_socket();
|
||||
let endpoint = IpListenEndpoint { addr: None, port };
|
||||
|
||||
// Попробуй сначала listen, а потом добавлять
|
||||
if s.listen(endpoint).is_ok() {
|
||||
socket_set.add(s);
|
||||
info!(
|
||||
"--- REAL ADD --- Port: {}, Sockets for this port: {}",
|
||||
port,
|
||||
current_port_sockets + 1
|
||||
);
|
||||
}
|
||||
})
|
||||
.count();
|
||||
}
|
||||
}
|
||||
|
||||
let udp_active = socket_set
|
||||
.iter()
|
||||
@@ -146,20 +178,6 @@ impl ConnectionManager {
|
||||
.iter()
|
||||
.any(|(_, s)| icmp::Socket::downcast(s).is_some());
|
||||
|
||||
if tcp_listeners < TARGET_FREE_TCP {
|
||||
let diff = TARGET_FREE_TCP - tcp_listeners;
|
||||
debug!("Refilling TCP pool: adding {} listeners", diff);
|
||||
for _ in 0..diff {
|
||||
let mut s = Self::create_tcp_socket();
|
||||
let endpoint = IpListenEndpoint {
|
||||
addr: None,
|
||||
port: 8080,
|
||||
};
|
||||
s.listen(endpoint).unwrap();
|
||||
socket_set.add(s);
|
||||
}
|
||||
}
|
||||
|
||||
if udp_active < TARGET_FREE_UDP {
|
||||
let diff = TARGET_FREE_UDP - udp_active;
|
||||
debug!("Refilling UDP pool: adding {} sockets", diff);
|
||||
|
||||
@@ -3,6 +3,7 @@ use smoltcp::{
|
||||
iface::{Config, Interface, SocketSet},
|
||||
phy::DeviceCapabilities,
|
||||
};
|
||||
use std::net::Ipv4Addr;
|
||||
use std::{
|
||||
mem,
|
||||
sync::{Arc, LazyLock, atomic::AtomicBool},
|
||||
@@ -13,7 +14,7 @@ use tokio::sync::mpsc::{self, UnboundedReceiver, UnboundedSender};
|
||||
use tokio::time::{Duration, sleep};
|
||||
use tun::{DeviceReader, DeviceWriter};
|
||||
|
||||
use tracing::{debug, warn};
|
||||
use tracing::{debug, info, warn};
|
||||
|
||||
use crate::tun::connection_manager::ConnectionManager;
|
||||
use crate::tun::device::{TokenBuffer, VirtTunDevice};
|
||||
@@ -34,7 +35,8 @@ impl Engine {
|
||||
pub fn new(config: Config, caps: DeviceCapabilities, ip: String) -> Self {
|
||||
let now = Engine::current_time();
|
||||
let (mut device, bridge_rx, bridge_tx, avail) = VirtTunDevice::new(caps);
|
||||
let interface = Interface::new(config, &mut device, now);
|
||||
let mut interface = Interface::new(config, &mut device, now);
|
||||
|
||||
let socket_set = SocketSet::new(vec![]);
|
||||
Self {
|
||||
interface,
|
||||
@@ -141,4 +143,39 @@ impl Engine {
|
||||
.add_default_ipv4_route(smoltcp::wire::Ipv4Address::new(10, 0, 0, 1))
|
||||
.ok();
|
||||
}
|
||||
|
||||
pub fn set_any_ip(&mut self, state: bool) -> () {
|
||||
self.interface.set_any_ip(state)
|
||||
}
|
||||
|
||||
pub fn set_transparent_mode(&mut self) {
|
||||
info!("Switching engine to transparent mode (AnyIP + 0.0.0.0/0)");
|
||||
|
||||
self.interface.set_any_ip(true);
|
||||
self.interface.update_ip_addrs(|addrs| {
|
||||
addrs.clear();
|
||||
addrs
|
||||
.push(smoltcp::wire::IpCidr::new(
|
||||
smoltcp::wire::IpAddress::v4(0, 0, 0, 0),
|
||||
0,
|
||||
))
|
||||
.expect("Failed to set 0.0.0.0/0");
|
||||
});
|
||||
|
||||
// Устанавливаем дефолтный маршрут "в никуда" (локально)
|
||||
self.interface.routes_mut().remove_default_ipv4_route();
|
||||
self.interface
|
||||
.routes_mut()
|
||||
.add_default_ipv4_route(smoltcp::wire::Ipv4Address::new(0, 0, 0, 0))
|
||||
.ok();
|
||||
}
|
||||
|
||||
pub fn set_default_gateway(&mut self, gateway: smoltcp::wire::Ipv4Address) {
|
||||
info!("Setting default IPv4 gateway to: {}", gateway);
|
||||
self.interface.routes_mut().remove_default_ipv4_route();
|
||||
self.interface
|
||||
.routes_mut()
|
||||
.add_default_ipv4_route(gateway)
|
||||
.expect("Failed to set default gateway");
|
||||
}
|
||||
}
|
||||
|
||||
+35
-1
@@ -1,5 +1,5 @@
|
||||
use std::io;
|
||||
use tracing::error;
|
||||
use tracing::{error, info, warn};
|
||||
use tun::{AsyncDevice, Configuration, DeviceReader, DeviceWriter, create_as_async};
|
||||
|
||||
pub struct Tun {
|
||||
@@ -42,4 +42,38 @@ impl Tun {
|
||||
let (writer, reader) = self.device.split()?;
|
||||
Ok((writer, reader))
|
||||
}
|
||||
|
||||
pub fn setup_linux_routes(&self) -> io::Result<()> {
|
||||
use std::process::Command;
|
||||
|
||||
// Направляем трафик через IP, который слушает твой smoltcp Engine
|
||||
// Предположим, smoltcp настроен на 10.0.0.2
|
||||
let status = Command::new("ip")
|
||||
.args(&["route", "add", "default", "via", "10.0.0.2", "dev", "tun0"])
|
||||
.status()?;
|
||||
|
||||
if !status.success() {
|
||||
return Err(io::Error::new(
|
||||
io::ErrorKind::Other,
|
||||
"Failed to setup routes",
|
||||
));
|
||||
}
|
||||
Ok(())
|
||||
}
|
||||
|
||||
pub fn clear_default_route(&self) -> io::Result<()> {
|
||||
use std::process::Command;
|
||||
|
||||
info!("Removing existing default route...");
|
||||
|
||||
// Удаляем текущий маршрут по умолчанию
|
||||
let status = Command::new("sudo")
|
||||
.args(&["ip", "route", "del", "default"])
|
||||
.status()?;
|
||||
|
||||
if !status.success() {
|
||||
warn!("Could not delete default route (maybe it doesn't exist?)");
|
||||
}
|
||||
Ok(())
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user