109 lines
2.3 KiB
Go
109 lines
2.3 KiB
Go
package handler
|
|
|
|
import (
|
|
"github.com/bjdgyc/anylink/dbdata"
|
|
"github.com/bjdgyc/anylink/sessdata"
|
|
"github.com/songgao/water/waterutil"
|
|
)
|
|
|
|
func payloadIn(cSess *sessdata.ConnSession, lType sessdata.LType, pType byte, data []byte) bool {
|
|
pl := getPayload()
|
|
pl.LType = lType
|
|
pl.PType = pType
|
|
pl.Data = append(pl.Data, data...)
|
|
|
|
return payloadInData(cSess, pl)
|
|
}
|
|
|
|
func payloadInData(cSess *sessdata.ConnSession, payload *sessdata.Payload) bool {
|
|
// 进行Acl规则判断
|
|
check := checkLinkAcl(cSess.Group, payload)
|
|
if !check {
|
|
// 校验不通过直接丢弃
|
|
return false
|
|
}
|
|
|
|
closed := false
|
|
select {
|
|
case cSess.PayloadIn <- payload:
|
|
case <-cSess.CloseChan:
|
|
closed = true
|
|
}
|
|
|
|
return closed
|
|
}
|
|
|
|
func payloadOut(cSess *sessdata.ConnSession, lType sessdata.LType, pType byte, data []byte) bool {
|
|
dSess := cSess.GetDtlsSession()
|
|
if dSess == nil {
|
|
return payloadOutCstp(cSess, lType, pType, data)
|
|
} else {
|
|
return payloadOutDtls(cSess, dSess, lType, pType, data)
|
|
}
|
|
}
|
|
|
|
func payloadOutCstp(cSess *sessdata.ConnSession, lType sessdata.LType, pType byte, data []byte) bool {
|
|
pl := getPayload()
|
|
pl.LType = lType
|
|
pl.PType = pType
|
|
pl.Data = append(pl.Data, data...)
|
|
|
|
closed := false
|
|
|
|
select {
|
|
case cSess.PayloadOutCstp <- pl:
|
|
case <-cSess.CloseChan:
|
|
closed = true
|
|
}
|
|
|
|
return closed
|
|
}
|
|
|
|
func payloadOutDtls(cSess *sessdata.ConnSession, dSess *sessdata.DtlsSession, lType sessdata.LType, pType byte, data []byte) bool {
|
|
pl := getPayload()
|
|
pl.LType = lType
|
|
pl.PType = pType
|
|
pl.Data = append(pl.Data, data...)
|
|
|
|
select {
|
|
case cSess.PayloadOutDtls <- pl:
|
|
case <-dSess.CloseChan:
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// Acl规则校验
|
|
func checkLinkAcl(group *dbdata.Group, payload *sessdata.Payload) bool {
|
|
if payload.LType == sessdata.LTypeIPData && payload.PType == 0x00 && len(group.LinkAcl) > 0 {
|
|
} else {
|
|
return true
|
|
}
|
|
|
|
ip_dst := waterutil.IPv4Destination(payload.Data)
|
|
ip_port := waterutil.IPv4DestinationPort(payload.Data)
|
|
// fmt.Println("sent:", ip_dst, ip_port)
|
|
|
|
// 优先放行dns端口
|
|
for _, v := range group.ClientDns {
|
|
if v.Val == ip_dst.String() && ip_port == 53 {
|
|
return true
|
|
}
|
|
}
|
|
|
|
for _, v := range group.LinkAcl {
|
|
// 循环判断ip和端口
|
|
if v.IpNet.Contains(ip_dst) {
|
|
if v.Port == ip_port || v.Port == 0 {
|
|
if v.Action == dbdata.Allow {
|
|
return true
|
|
} else {
|
|
return false
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|