Configure substitution parameters.

README.md

@@ -1,24 +1,35 @@
 # AIS
-    修改自mproxy(https://github.com/examplecode/mproxy), 作为CProxy服务端. 仅代理TCP
-    支持客户端IP白名单
-    支持IPV4
-    支持IPV6
 
-# 参数
+    修改自mproxy(https://github.com/examplecode/mproxy), 作为CProxy服务端. 仅代理TCP.
+    支持客户端IP白名单.
+    支持IPV4.
+    支持IPV6.
+
+## 参数
+
     Usage:
-        -l <port number>  specifyed local listen port 
+        -l <port number>  specifyed local listen port
         -h <remote server and port> specifyed next hop server name
         -d <remote server and port> run as daemon
         -c <configure file> Specify configuration file
         -E <0-128> encode data when forwarding data
         -D <0-128> decode data when receiving data
-        
+
-# 配置文件
+## 配置文件
+
     global {
+        // 本地端口
+        local_port="127";
+        
+        // IO标志 R_C_DEC、W_S_ENC. W_S_ENC在转发数据时对数据进行编码, R_C_DEC 接收数据时解码数据
+        io_flag="R_C_DEC";
+
+        // 编码
+        encode=128;
+
         // 是否开启白名单（1开启，0关闭）
         IP_RESTRICTION = 1;
+        
         // 白名单IP段, 判断前两段IP空格隔开冒号结尾(可以写完整的IPV4和IPV6地址)
         IP_SEGMENT= 115.60 115.61 115.62 223.88 2409:8a44:336:7180:5cb7:5b71:85e2:7f14;
     }
-    
-    

ais.c

@@ -169,20 +169,36 @@ void extract_server_path(const char *header, char *output)
 
 }
 
+int isLetter(char c)            // a-z A-Z 返回1, 0-9 返回0
+{
+    return ((c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z'));
+}
+
+int isChar(char *string)        // string字符串里有字符时返回1
+{
+    int i;
+
+    for (i = 0; i < strlen(string); i++) {
+        if (isLetter(string[i])) {
+            return 1;
+        }
+    }
+    return 0;
+}
+
 int extract_host(const char *header)
 {
-    char *_p = strstr(header, "CONNECT"); /* 在 CONNECT 方法中解析 隧道主机名称及端口号 */
+    char *_p = strstr(header, "CONNECT"); // 在 CONNECT 方法中解析 隧道主机名称及端口号
     if (_p) {
-
+        if (strchr(header, '[') || strchr(header, ']')) {
-        if (strchr(header, '[') || strchr(header, ']')) {       // ipv6
             char *_p1 = strchr(header, '[');
-            //printf("%s\n", _p1+1);
-
             char *_p2 = strchr(_p1 + 1, ']');
-            //printf("%s\n", _p2);
-
             strncpy(remote_host, _p1 + 1, (int)(_p2 - _p1) - 1);
-            remote_port = 443;
+
+            char *_p3 = strchr(_p2 + 1, ' ');
+            char s_port[270];
+            strncpy(s_port, _p2 + 2, (int)(_p3 - _p2) - 1);
+            remote_port = atoi(s_port);
 
             return 0;
         }
@@ -204,36 +220,95 @@ int extract_host(const char *header)
         }
 
         return 0;
-    }
+    } else {                    // 在非 CONNECT 方法中解析主机名称及端口号
+        char *p = strstr(header, "Host:");
+        if (!p) {
+            return -1;
+        }
+        char *p1 = strchr(p, '\n');
+        if (!p1) {
+            return -1;
+        }
+        char *p2 = strchr(p + 5, ':'); // 5是指'Host:'的长度
 
-    char *p = strstr(header, "Host:");
+        int h_len = (int)(p1 - p - 6);
-    if (!p) {
+        char s_host[h_len];
-        return -1;
+        strncpy(s_host, p + 6, p1 - p - 6);
-    }
+        s_host[h_len] = '\0';
-    char *p1 = strchr(p, '\n');
-    if (!p1) {
-        return -1;
-    }
 
-    char *p2 = strchr(p + 5, ':'); /* 5是指'Host:'的长度 */
+        char *p3 = strchr(s_host, ':');
+        char *p4 = NULL;
+        if (p3)
+            p4 = strchr(p3 + 1, ':');
 
-    if (p2 && p2 < p1) {
+        if (p4 != NULL) {       // IPV6
-        int p_len = (int)(p1 - p2 - 1);
+            char *p5 = NULL;
-        char s_port[p_len];
+            char *p6 = NULL;
-        strncpy(s_port, p2 + 1, p_len);
+            p5 = strchr(header, ' ');
-        s_port[p_len] = '\0';
+            if (p5)
-        remote_port = atoi(s_port);
+                p6 = strchr(p5 + 1, ' ');
 
-        int h_len = (int)(p2 - p - 5 - 1);
+            char url[p6 - p5 - 1];
-        strncpy(remote_host, p + 5 + 1, h_len); //Host:
+            memset(url, 0, p6 - p5 - 1);
-        //assert h_len < 128;
+            strncpy(url, p5 + 1, p6 - p5 - 1);
-        remote_host[h_len] = '\0';
+            url[p6 - p5 - 1] = '\0';
-    } else {
+            if (strstr(url, "http") != NULL) {
-        int h_len = (int)(p1 - p - 5 - 1 - 1);
+                memcpy(url, url + 7, strlen(url) - 7); // 去除 'http://'
-        strncpy(remote_host, p + 5 + 1, h_len);
+                url[strlen(url) - 7] = '\0';
-        //assert h_len < 128;
+                char *p7 = strchr(url, '/');
-        remote_host[h_len] = '\0';
+                if (p7) {           // 去除 uri
-        remote_port = 80;
+                    url[p7 - url] = '\0';
+                }
+                printf("url: %s\n", url);
+                char *p8 = strchr(url, ']');
+                if (p8) {
+                    remote_port = atoi(p8 + 2);
+                    strncpy(remote_host, url + 1, strlen(url) - strlen(p8) - 1);
+
+                    if (strlen(p8) < 3) {           // 如果p8为 ']' 时, 长度为1
+                        remote_port = 80;
+                        strncpy(remote_host, url + 1, strlen(url) - strlen(p8) - 1);
+                    }
+                } else {                    // 不包含'['、']'时
+                    remote_port = 80;
+                    strcpy(remote_host, url);
+                }
+
+                return 0;
+            } else {                                   // 头为不规范的url时处理Host
+                char *_p1 = strchr(s_host, '[');
+                char *_p2 = strchr(_p1+1, ']');
+                if (_p1 && _p2) {
+                    strncpy(remote_host, _p1+1, _p2 - _p1 -1);
+                    remote_port = atoi(_p2+2);
+                    if (strlen(_p2) < 3) {
+                        remote_port = 80;
+                        strncpy(remote_host, s_host+1, strlen(s_host)-strlen(_p2)-1);
+                    }
+                }
+                
+                return 0;
+            }
+
+            return -1;
+        }
+
+        if (p2 && p2 < p1) {
+            int p_len = (int)(p1 - p2 - 1);
+            char s_port[p_len];
+            strncpy(s_port, p2 + 1, p_len);
+            s_port[p_len] = '\0';
+            remote_port = atoi(s_port);
+
+            int h_len = (int)(p2 - p - 5 - 1);
+            strncpy(remote_host, p + 5 + 1, h_len);
+            remote_host[h_len] = '\0';
+        } else {
+            int h_len = (int)(p1 - p - 5 - 1 - 1);
+            strncpy(remote_host, p + 5 + 1, h_len);
+            remote_host[h_len] = '\0';
+            remote_port = 80;
+        }
     }
     return 0;
 }
@@ -257,6 +332,7 @@ void hand_mproxy_info_req(int sock, char *header)
 {
     char server_path[255];
     char response[8192];
+    int w;
     extract_server_path(header, server_path);
 
     LOG("server path:%s\n", server_path);
@@ -268,7 +344,9 @@ void hand_mproxy_info_req(int sock, char *header)
                      <pre>%s</pre>\
                      </body></html>\n", info_buf);
 
-    write(sock, response, strlen(response));
+    if (-1 == (w = write(sock, response, strlen(response)))) {
+        perror("write");
+    }
 }
 
 /* 获取运行的基本信息输出到指定的缓冲区 */
@@ -358,9 +436,12 @@ void handle_client(int client_sock, struct sockaddr_in client_addr)
     }
     // 打印HTTP header
     printf("%s", header_buffer);
+    //printf("%s\n", remote_host);
+    //printf("%d\n", remote_port);
 
     if ((remote_sock = create_connection6(remote_host, remote_port)) < 0) {
         LOG("Cannot connect to host [%s:%d]\n", remote_host, remote_port);
+
         return;
     }
 
@@ -535,7 +616,7 @@ void sigchld_handler(int signal)
 int whitelist(char *client_ip, char (*whitelist_ip)[WHITELIST_IP_NUM])
 {
     int i;
-    
+
     for (i = 1; i < WHITELIST_IP_NUM - 1; i++) {
         if (strcmp(whitelist_ip[i], "\0") == 0) { //  如果字符串为空就跳出循环
             break;
@@ -562,7 +643,7 @@ void server_loop(int signal, char *conffile)
     conf *configure = (struct CONF *)malloc(sizeof(struct CONF));
     read_conf(conffile, configure);
     printf("%s\n", configure->IP_SEGMENT);
-    
+
     split_string(configure->IP_SEGMENT, " ", whitelist_ip);
 
     for (i = 1; i <= WHITELIST_IP_NUM - 1; i++) {
@@ -590,7 +671,7 @@ void server_loop(int signal, char *conffile)
                     exit(0);
                 }
             }
-            //close(client_sock);
+            close(client_sock); // 关闭父进程 client_sock
         }
 
         if (signal == 6) {
@@ -612,7 +693,7 @@ void server_loop(int signal, char *conffile)
                     exit(0);
                 }
             }
-            //close(client_sock6);
+            close(client_sock6); // 关闭父进程 client_sock6
         }
     }
 
@@ -708,8 +789,6 @@ void start_server(int SIGNAL, char *conffile)
     //初始化全局变量
     header_buffer = (char *)malloc(MAX_HEADER_SIZE);
 
-    signal(SIGCHLD, sigchld_handler); // 防止子进程变成僵尸进程
-
     if (SIGNAL == 4) {
         if ((server_sock = create_server_socket(local_port)) < 0) { // start server
             LOG("Cannot run server on %d\n", local_port);
@@ -729,6 +808,8 @@ void start_server(int SIGNAL, char *conffile)
 
 int _main(int argc, char *argv[])
 {
+    signal(SIGCHLD, sigchld_handler); // 防止子进程变成僵尸进程
+
     local_port = DEFAULT_LOCAL_PORT;
     io_flag = FLG_NONE;
     sslEncodeCode = 1;
@@ -739,6 +820,14 @@ int _main(int argc, char *argv[])
     char *p = NULL;
 
     char *conffile = "./ais.conf";
+    conf *configure = (struct CONF *)malloc(sizeof(struct CONF));
+    read_conf(conffile, configure);
+    printf("%d\n", configure->local_port);
+    printf("%s\n", configure->io_flag);
+    printf("%d\n", configure->encode);
+    printf("%d\n", configure->IP_RESTRICTION);
+    printf("%s\n", configure->IP_SEGMENT);
+    //exit(0);
 
     while (-1 != (opt = getopt(argc, argv, optstrs))) {
         switch (opt) {
@@ -747,14 +836,19 @@ int _main(int argc, char *argv[])
             break;
         case 'f':
             p = strchr(optarg, ':');
-            if (p) {
+            if (p) {            // IPV4
                 strncpy(remote_host, optarg, p - optarg);
                 remote_port = atoi(p + 1);
             } else {
                 strncpy(remote_host, optarg, strlen(remote_host));
             }
-            strcpy(remote_host, "2001:19f0:7001:3bcb:5400:3ff:fe03:860e");
+
-            remote_port = 127;
+            p = strchr(p + 1, ':');
+            if (p) {            // IPV6
+                p = strrchr(optarg, ':');
+                strncpy(remote_host, optarg, p - optarg);
+                remote_port = atoi(p + 1);
+            }
             break;
         case 'd':
             DAEMON = 1;
@@ -782,8 +876,17 @@ int _main(int argc, char *argv[])
         }
     }
 
+    local_port = configure->local_port;
+    if (strcasecmp(configure->io_flag, "W_S_ENC") == 0) {
+        io_flag = W_S_ENC;
+    }
+    if (strcasecmp(configure->io_flag, "R_C_DEC") == 0) {
+        io_flag = R_C_DEC;
+    }
+    sslEncodeCode = configure->encode;
+
     if (DAEMON == 1) {          // 守护进程
-        if(daemon(1, 1)) {
+        if (daemon(1, 1)) {
             perror("daemon");
             return -1;
         }
@@ -793,14 +896,15 @@ int _main(int argc, char *argv[])
     get_info(info_buf);
     LOG("%s\n", info_buf);
 
-    if (fork() == 0) {      // IPV4 进程
+    if (fork() == 0) {          // IPV4 进程
         start_server(4, conffile);
     }
 
-    if(fork() == 0) {       // IPV6 进程
+    if (fork() == 0) {          // IPV6 进程
         start_server(6, conffile);
     }
 
+    free_conf(configure);
     return 0;
 }
 
@@ -808,5 +912,3 @@ int main(int argc, char *argv[])
 {
     return _main(argc, argv);
 }
-
-

ais.conf

@@ -1,4 +1,7 @@
 global {
+    local_port="127";
+    io_flag="R_C_DEC";
+    encode=128;
     IP_RESTRICTION = 0;
-    IP_SEGMENT= 223.104 223.88 2001:19f0:7001:3bcb:5400:3ff:fe03:860e 2409:8946:28f:5ab8:a96c:44fb:e0ba:63c8 fe80::5400:3ff:fe03:860e  2409:8946:28f:5ab8:74fa:521c:6bb4:7888 2409:8a44:336:7180:f187:5343:2f11:cd65 2409:8a44:336:7180:5cb7:5b71:85e2:7f14;
+    IP_SEGMENT= 127.0.0.1;
 }

conf.c

@@ -68,15 +68,32 @@ static void parse_global_module(char *content, conf * p)
     int val_begin_len;
 
     while ((lineEnd = set_var_val_lineEnd(content, &var, &val_begin, &val_end)) != NULL) {
+        if (strcasecmp(var, "local_port") == 0) {
+            p->local_port = atoi(val_begin);
+        }
+
+        if (strcasecmp(var, "io_flag") == 0) {
+            val_begin_len = strlen(val_begin) + 1;
+            p->io_flag = (char *)malloc(val_begin_len);
+            memset(p->io_flag, 0, val_begin_len);
+            memcpy(p->io_flag, val_begin, val_begin_len);
+        }
+
+        if (strcasecmp(var, "encode") == 0) {
+            p->encode = atoi(val_begin);
+        }
+
         if (strcasecmp(var, "IP_SEGMENT") == 0) {
             val_begin_len = strlen(val_begin) + 1;
             p->IP_SEGMENT = (char *)malloc(val_begin_len);
             memset(p->IP_SEGMENT, 0, val_begin_len);
             memcpy(p->IP_SEGMENT, val_begin, val_begin_len);
         }
+
         if (strcasecmp(var, "IP_RESTRICTION") == 0) {
             p->IP_RESTRICTION = atoi(val_begin);
         }
+
         content = strchr(lineEnd + 1, '\n');
     }
 }
@@ -113,6 +130,7 @@ void read_conf(char *filename, conf * configure)
     char *buff, *global_content;
     FILE *file;
     long file_size;
+    int return_val;
 
     file = fopen(filename, "r");
     if (file == NULL)
@@ -123,7 +141,8 @@ void read_conf(char *filename, conf * configure)
     if (buff == NULL)
         perror("out of memory.");
     rewind(file);
-    fread(buff, file_size, 1, file);
+    if (1 > (return_val = fread(buff, file_size, 1, file)))
+        perror("fread");
     fclose(file);
     buff[file_size] = '\0';
 
@@ -137,6 +156,7 @@ void read_conf(char *filename, conf * configure)
 void free_conf(conf * p)
 {
     free(p->IP_SEGMENT);
+    free(p->io_flag);
     return;
 }
 

conf.h

@@ -10,6 +10,9 @@
 
 // 配置文件结构
 typedef struct CONF {
+    int local_port;
+    char *io_flag;
+    int encode;
     int IP_RESTRICTION;
     char *IP_SEGMENT;
 } conf;

stript/start.sh

@@ -7,5 +7,9 @@
 SHELL_FOLDER=$(cd "$(dirname "$0")"; pwd)       #脚本所在目录
 SHELL_FOLDER=$(dirname $(readlink -f "$0"))
 
-${SHELL_FOLDER}/../ais -l 127 -D 128 -d
+NAME="ais";         #tmux 会话名字
+
+tmux new -d -s $NAME && tmux send -t $NAME 'cd ~' ENTER && tmux send -t $NAME "cd ${SHELL_FOLDER}/../; ./ais -l 127 -D 128" ENTER
+
+