mirror of
https://github.com/tailscale/tailscale.git
synced 2024-11-26 11:35:35 +00:00
0f4359116e
No ListenPacket support yet, but Listen with a udp network type fit easier into netstack's model to start. Then added an example of using it to cmd/sniproxy with a little udp :53 handler. No tests in tsnet yet because we don't have support for dialing over UDP in tsnet yet. When that's done, a new test can test both sides. Updates #5871 Updates #1748 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
118 lines
2.4 KiB
Go
118 lines
2.4 KiB
Go
// Copyright (c) Tailscale Inc & AUTHORS
|
|
// SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
// The sniproxy is an outbound SNI proxy. It receives TLS connections over
|
|
// Tailscale on one or more TCP ports and sends them out to the same SNI
|
|
// hostname & port on the internet. It only does TCP.
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"flag"
|
|
"log"
|
|
"net"
|
|
"strings"
|
|
"time"
|
|
|
|
"inet.af/tcpproxy"
|
|
"tailscale.com/client/tailscale"
|
|
"tailscale.com/net/netutil"
|
|
"tailscale.com/tsnet"
|
|
"tailscale.com/types/nettype"
|
|
)
|
|
|
|
var ports = flag.String("ports", "443", "comma-separated list of ports to proxy")
|
|
|
|
func main() {
|
|
flag.Parse()
|
|
if *ports == "" {
|
|
log.Fatal("no ports")
|
|
}
|
|
|
|
var s server
|
|
defer s.ts.Close()
|
|
|
|
lc, err := s.ts.LocalClient()
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
s.lc = lc
|
|
|
|
for _, portStr := range strings.Split(*ports, ",") {
|
|
ln, err := s.ts.Listen("tcp", ":"+portStr)
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
log.Printf("Serving on port %v ...", portStr)
|
|
go s.serve(ln)
|
|
}
|
|
|
|
ln, err := s.ts.Listen("udp", ":53")
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
go s.serveDNS(ln)
|
|
|
|
select {}
|
|
}
|
|
|
|
type server struct {
|
|
ts tsnet.Server
|
|
lc *tailscale.LocalClient
|
|
}
|
|
|
|
func (s *server) serve(ln net.Listener) {
|
|
for {
|
|
c, err := ln.Accept()
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
go s.serveConn(c)
|
|
}
|
|
}
|
|
|
|
func (s *server) serveDNS(ln net.Listener) {
|
|
for {
|
|
c, err := ln.Accept()
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
go s.serveDNSConn(c.(nettype.ConnPacketConn))
|
|
}
|
|
}
|
|
|
|
func (s *server) serveDNSConn(c nettype.ConnPacketConn) {
|
|
defer c.Close()
|
|
c.SetReadDeadline(time.Now().Add(5 * time.Second))
|
|
buf := make([]byte, 1500)
|
|
n, err := c.Read(buf)
|
|
log.Printf("got DNS packet: %q, %v", buf[:n], err)
|
|
// TODO: rest of the owl
|
|
}
|
|
|
|
func (s *server) serveConn(c net.Conn) {
|
|
addrPortStr := c.LocalAddr().String()
|
|
_, port, err := net.SplitHostPort(addrPortStr)
|
|
if err != nil {
|
|
log.Printf("bogus addrPort %q", addrPortStr)
|
|
c.Close()
|
|
return
|
|
}
|
|
|
|
var dialer net.Dialer
|
|
dialer.Timeout = 5 * time.Second
|
|
|
|
var p tcpproxy.Proxy
|
|
p.ListenFunc = func(net, laddr string) (net.Listener, error) {
|
|
return netutil.NewOneConnListener(c, nil), nil
|
|
}
|
|
p.AddSNIRouteFunc(addrPortStr, func(ctx context.Context, sniName string) (t tcpproxy.Target, ok bool) {
|
|
log.Printf("got req for %q from %v", sniName, c.RemoteAddr())
|
|
return &tcpproxy.DialProxy{
|
|
Addr: net.JoinHostPort(sniName, port),
|
|
DialContext: dialer.DialContext,
|
|
}, true
|
|
})
|
|
p.Start()
|
|
}
|