apps/openlan
1
0
Fork 0
mirror of https://github.com/luscis/openlan.git synced 2025-10-07 17:40:54 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fea: access: support match rules.

Browse Source
This commit is contained in:
Daniel Ding
2025-04-12 16:25:56 +08:00
parent 44079e8e4c
commit b6f1925053
7 changed files with 150 additions and 101 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
dist/rootfs/etc/openlan/access.yaml vendored Normal file
View File

@@ -0,0 +1,18 @@
protocol: tcp
connection: 2.2.2.1
interface:
address: 192.168.11.33/24
username: test@vxlan
password: fvph0ldhdvai
crypt:
secret: 477bb0c55edb
backends:
- server: 192.168.11.10
match:
- openai.com
- chatgpt.com
- server: 192.168.11.11
match:
- google.com
- github.com
- facebook.com

27
pkg/access/point_darwin.go
View File

@@ -1,10 +1,11 @@
package access
import (
"strings"
"github.com/luscis/openlan/pkg/config"
"github.com/luscis/openlan/pkg/libol"
"github.com/luscis/openlan/pkg/models"
"strings"
)
type Point struct {
@@ -39,16 +40,16 @@ func (p *Point) AddAddr(ipStr string) error {
ips := strings.SplitN(ipStr, "/", 2)
out, err := libol.IpAddrAdd(p.IfName(), ips[0], ips[0])
if err != nil {
p.out.Warn("Point.AddAddr: %s, %s", err, out)
p.out.Warn("Access.AddAddr: %s, %s", err, out)
return err
}
p.out.Info("Point.AddAddr: %s", ipStr)
p.out.Info("Access.AddAddr: %s", ipStr)
// add directly route.
out, err = libol.IpRouteAdd(p.IfName(), ipStr, "")
if err != nil {
p.out.Warn("Point.AddAddr: %s, %s", err, out)
p.out.Warn("Access.AddAddr: %s, %s", err, out)
}
p.out.Info("Point.AddAddr: route %s via %s", ipStr, p.IfName())
p.out.Info("Access.AddAddr: route %s via %s", ipStr, p.IfName())
p.addr = ipStr
return nil
}
@@ -57,17 +58,17 @@ func (p *Point) DelAddr(ipStr string) error {
// delete directly route.
out, err := libol.IpRouteDel(p.IfName(), ipStr, "")
if err != nil {
p.out.Warn("Point.DelAddr: %s, %s", err, out)
p.out.Warn("Access.DelAddr: %s, %s", err, out)
}
p.out.Info("Point.DelAddr: route %s via %s", ipStr, p.IfName())
p.out.Info("Access.DelAddr: route %s via %s", ipStr, p.IfName())
// delete point-to-point
ip4 := strings.SplitN(ipStr, "/", 2)[0]
out, err = libol.IpAddrDel(p.IfName(), ip4)
if err != nil {
p.out.Warn("Point.DelAddr: %s, %s", err, out)
p.out.Warn("Access.DelAddr: %s, %s", err, out)
return err
}
p.out.Info("Point.DelAddr: %s", ip4)
p.out.Info("Access.DelAddr: %s", ip4)
p.addr = ""
return nil
}
@@ -79,10 +80,10 @@ func (p *Point) AddRoutes(routes []*models.Route) error {
for _, route := range routes {
out, err := libol.IpRouteAdd(p.IfName(), route.Prefix, "")
if err != nil {
p.out.Warn("Point.AddRoutes: %s %s", route.Prefix, out)
p.out.Warn("Access.AddRoutes: %s %s", route.Prefix, out)
continue
}
p.out.Info("Point.AddRoutes: route %s via %s", route.Prefix, p.IfName())
p.out.Info("Access.AddRoutes: route %s via %s", route.Prefix, p.IfName())
}
p.routes = routes
return nil
@@ -92,10 +93,10 @@ func (p *Point) DelRoutes(routes []*models.Route) error {
for _, route := range routes {
out, err := libol.IpRouteDel(p.IfName(), route.Prefix, "")
if err != nil {
p.out.Warn("Point.DelRoutes: %s %s", route.Prefix, out)
p.out.Warn("Access.DelRoutes: %s %s", route.Prefix, out)
continue
}
p.out.Info("Point.DelRoutes: route %s via %s", route.Prefix, p.IfName())
p.out.Info("Access.DelRoutes: route %s via %s", route.Prefix, p.IfName())
}
p.routes = nil
return nil

118
pkg/access/point_linux.go
View File

@@ -1,12 +1,13 @@
package access
import (
"net"
"strings"
"github.com/luscis/openlan/pkg/config"
"github.com/luscis/openlan/pkg/models"
"github.com/luscis/openlan/pkg/network"
"github.com/vishvananda/netlink"
"net"
"strings"
)
type Point struct {
@@ -35,11 +36,15 @@ func NewPoint(config *config.Point) *Point {
}
func (p *Point) Initialize() {
p.worker.listener.AddAddr = p.AddAddr
p.worker.listener.DelAddr = p.DelAddr
p.worker.listener.AddRoutes = p.AddRoutes
p.worker.listener.DelRoutes = p.DelRoutes
p.worker.listener.OnTap = p.OnTap
w := p.worker
w.listener.AddAddr = p.AddAddr
w.listener.DelAddr = p.DelAddr
w.listener.AddRoutes = p.AddRoutes
w.listener.DelRoutes = p.DelRoutes
w.listener.OnTap = p.OnTap
w.listener.Forward = p.Forward
p.MixPoint.Initialize()
}
@@ -49,13 +54,13 @@ func (p *Point) DelAddr(ipStr string) error {
}
ipAddr, err := netlink.ParseAddr(ipStr)
if err != nil {
p.out.Error("Point.AddAddr.ParseCIDR %s: %s", ipStr, err)
p.out.Error("Access.AddAddr.ParseCIDR %s: %s", ipStr, err)
return err
}
if err := netlink.AddrDel(p.link, ipAddr); err != nil {
p.out.Warn("Point.DelAddr.UnsetLinkIp: %s", err)
p.out.Warn("Access.DelAddr.UnsetLinkIp: %s", err)
}
p.out.Info("Point.DelAddr: %s", ipStr)
p.out.Info("Access.DelAddr: %s", ipStr)
p.addr = ""
return nil
}
@@ -66,14 +71,14 @@ func (p *Point) AddAddr(ipStr string) error {
}
ipAddr, err := netlink.ParseAddr(ipStr)
if err != nil {
p.out.Error("Point.AddAddr.ParseCIDR %s: %s", ipStr, err)
p.out.Error("Access.AddAddr.ParseCIDR %s: %s", ipStr, err)
return err
}
if err := netlink.AddrAdd(p.link, ipAddr); err != nil {
p.out.Warn("Point.AddAddr.SetLinkIp: %s", err)
p.out.Warn("Access.AddAddr.SetLinkIp: %s", err)
return err
}
p.out.Info("Point.AddAddr: %s", ipStr)
p.out.Info("Access.AddAddr: %s", ipStr)
p.addr = ipStr
return nil
}
@@ -85,52 +90,52 @@ func (p *Point) UpBr(name string) *netlink.Bridge {
la := netlink.LinkAttrs{TxQLen: -1, Name: name}
br := &netlink.Bridge{LinkAttrs: la}
if link, err := netlink.LinkByName(name); link == nil {
p.out.Warn("Point.UpBr: %s %s", name, err)
p.out.Warn("Access.UpBr: %s %s", name, err)
err := netlink.LinkAdd(br)
if err != nil {
p.out.Warn("Point.UpBr.newBr: %s %s", name, err)
p.out.Warn("Access.UpBr.newBr: %s %s", name, err)
}
}
link, err := netlink.LinkByName(name)
if link == nil {
p.out.Error("Point.UpBr: %s %s", name, err)
p.out.Error("Access.UpBr: %s %s", name, err)
return nil
}
if err := netlink.LinkSetUp(link); err != nil {
p.out.Error("Point.UpBr.LinkUp: %s", err)
p.out.Error("Access.UpBr.LinkUp: %s", err)
}
return br
}
func (p *Point) OnTap(w *TapWorker) error {
p.out.Info("Point.OnTap")
p.out.Info("Access.OnTap")
tap := w.device
name := tap.Name()
if tap.Type() == network.ProviderVir { // virtual device
p.out.Error("Point.OnTap: not support %s", tap.Type())
p.out.Error("Access.OnTap: not support %s", tap.Type())
return nil
}
// kernel device
link, err := netlink.LinkByName(name)
if err != nil {
p.out.Error("Point.OnTap: Get %s: %s", name, err)
p.out.Error("Access.OnTap: Get %s: %s", name, err)
return err
}
if err := netlink.LinkSetMTU(link, p.ipMtu); err != nil {
p.out.Error("Point.OnTap.SetMTU: %s", err)
p.out.Error("Access.OnTap.SetMTU: %s", err)
}
if br := p.UpBr(p.brName); br != nil {
if err := netlink.LinkSetMaster(link, br); err != nil {
p.out.Error("Point.OnTap.AddSlave: Switch dev %s: %s", name, err)
p.out.Error("Access.OnTap.AddSlave: Switch dev %s: %s", name, err)
}
link, err = netlink.LinkByName(p.brName)
if err != nil {
p.out.Error("Point.OnTap: Get %s: %s", p.brName, err)
p.out.Error("Access.OnTap: Get %s: %s", p.brName, err)
}
if p.config.Interface.Cost > 0 {
port := network.NewBrPort(name)
if err := port.Cost(p.config.Interface.Cost); err != nil {
p.out.Error("Point.OnTap: Cost %s: %s", p.brName, err)
p.out.Error("Access.OnTap: Cost %s: %s", p.brName, err)
}
}
}
@@ -156,7 +161,7 @@ func (p *Point) AddBypass(routes []*models.Route) {
addr, dest, _ := net.ParseCIDR(remote + "/32")
gws, err := netlink.RouteGet(addr)
if err != nil || len(gws) == 0 {
p.out.Error("Point.AddBypass: RouteGet %s: %s", addr, err)
p.out.Error("Access.AddBypass: RouteGet %s: %s", addr, err)
return
}
rt := &netlink.Route{
@@ -165,19 +170,19 @@ func (p *Point) AddBypass(routes []*models.Route) {
Gw: gws[0].Gw,
Table: 100,
}
p.out.Debug("Point.AddBypass: %s")
p.out.Debug("Access.AddBypass: %s")
if err := netlink.RouteReplace(rt); err != nil {
p.out.Warn("Point.AddBypass: %s %s", rt.Dst, err)
p.out.Warn("Access.AddBypass: %s %s", rt.Dst, err)
return
}
p.out.Info("Point.AddBypass: route %s via %s", rt.Dst, rt.Gw)
p.out.Info("Access.AddBypass: route %s via %s", rt.Dst, rt.Gw)
ru := netlink.NewRule()
ru.Table = 100
ru.Priority = 16383
if err := netlink.RuleAdd(ru); err != nil {
p.out.Warn("Point.AddBypass: %s %s", ru.Dst, err)
p.out.Warn("Access.AddBypass: %s %s", ru.Dst, err)
}
p.out.Info("Point.AddBypass: %s", ru)
p.out.Info("Access.AddBypass: %s", ru)
p.bypass = rt
for _, rt := range routes {
if rt.Prefix != "0.0.0.0/0" {
@@ -191,11 +196,11 @@ func (p *Point) AddBypass(routes []*models.Route) {
Gw: gw,
Priority: rt.Metric,
}
p.out.Debug("Point.AddBypass: %s", rt0)
p.out.Debug("Access.AddBypass: %s", rt0)
if err := netlink.RouteAdd(&rt0); err != nil {
p.out.Warn("Point.AddBypass: %s %s", rt0.Dst, err)
p.out.Warn("Access.AddBypass: %s %s", rt0.Dst, err)
}
p.out.Info("Point.AddBypass: route %s via %s", rt0.Dst, rt0.Gw)
p.out.Info("Access.AddBypass: route %s via %s", rt0.Dst, rt0.Gw)
_, dst1, _ := net.ParseCIDR("128.0.0.0/1")
rt1 := netlink.Route{
LinkIndex: p.link.Attrs().Index,
@@ -203,11 +208,24 @@ func (p *Point) AddBypass(routes []*models.Route) {
Gw: gw,
Priority: rt.Metric,
}
p.out.Debug("Point.AddBypass: %s", rt1)
p.out.Debug("Access.AddBypass: %s", rt1)
if err := netlink.RouteAdd(&rt1); err != nil {
p.out.Warn("Point.AddBypass: %s %s", rt1.Dst, err)
p.out.Warn("Access.AddBypass: %s %s", rt1.Dst, err)
}
p.out.Info("Access.AddBypass: route %s via %s", rt1.Dst, rt1.Gw)
}
}
func (p *Point) Forward(prefix, nexthop string) {
_, dst, _ := net.ParseCIDR(prefix)
p.out.Info("Access.Forward: %s via %s", prefix, nexthop)
if err := netlink.RouteAdd(&netlink.Route{
Dst: dst,
Gw: net.ParseIP(nexthop),
}); err != nil {
if !strings.Contains(err.Error(), "file exists") {
p.out.Warn("Access.Forward: %s %s", prefix, err)
}
p.out.Info("Point.AddBypass: route %s via %s", rt1.Dst, rt1.Gw)
}
}
@@ -228,12 +246,12 @@ func (p *Point) AddRoutes(routes []*models.Route) error {
Gw: nxt,
Priority: rt.Metric,
}
p.out.Debug("Point.AddRoute: %s", rte)
p.out.Debug("Access.AddRoute: %s", rte)
if err := netlink.RouteAdd(&rte); err != nil {
p.out.Warn("Point.AddRoute: %s %s", rt.Prefix, err)
p.out.Warn("Access.AddRoute: %s %s", rt.Prefix, err)
continue
}
p.out.Info("Point.AddRoutes: route %s via %s", rt.Prefix, rt.NextHop)
p.out.Info("Access.AddRoutes: route %s via %s", rt.Prefix, rt.NextHop)
}
p.routes = routes
return nil
@@ -243,12 +261,12 @@ func (p *Point) DelBypass(routes []*models.Route) {
if !p.config.ByPass || p.bypass == nil {
return
}
p.out.Debug("Point.DelRoute: %s")
p.out.Debug("Access.DelRoute: %s")
rt := p.bypass
if err := netlink.RouteAdd(rt); err != nil {
p.out.Warn("Point.DelRoute: %s %s", rt.Dst, err)
p.out.Warn("Access.DelRoute: %s %s", rt.Dst, err)
}
p.out.Info("Point.DelBypass: route %s via %s", rt.Dst, rt.Gw)
p.out.Info("Access.DelBypass: route %s via %s", rt.Dst, rt.Gw)
p.bypass = nil
for _, rt := range routes {
if rt.Prefix != "0.0.0.0/0" {
@@ -262,11 +280,11 @@ func (p *Point) DelBypass(routes []*models.Route) {
Gw: gw,
Priority: rt.Metric,
}
p.out.Debug("Point.DelBypass: %s", rt0)
p.out.Debug("Access.DelBypass: %s", rt0)
if err := netlink.RouteDel(&rt0); err != nil {
p.out.Warn("Point.DelBypass: %s %s", rt0.Dst, err)
p.out.Warn("Access.DelBypass: %s %s", rt0.Dst, err)
}
p.out.Info("Point.DelBypass: route %s via %s", rt0.Dst, rt0.Gw)
p.out.Info("Access.DelBypass: route %s via %s", rt0.Dst, rt0.Gw)
_, dst1, _ := net.ParseCIDR("128.0.0.0/1")
rt1 := netlink.Route{
LinkIndex: p.link.Attrs().Index,
@@ -274,11 +292,11 @@ func (p *Point) DelBypass(routes []*models.Route) {
Gw: gw,
Priority: rt.Metric,
}
p.out.Debug("Point.DelBypass: %s", rt1)
p.out.Debug("Access.DelBypass: %s", rt1)
if err := netlink.RouteDel(&rt1); err != nil {
p.out.Warn("Point.DelBypass: %s %s", rt1.Dst, err)
p.out.Warn("Access.DelBypass: %s %s", rt1.Dst, err)
}
p.out.Info("Point.DelBypass: route %s via %s", rt1.Dst, rt1.Gw)
p.out.Info("Access.DelBypass: route %s via %s", rt1.Dst, rt1.Gw)
}
}
@@ -300,10 +318,10 @@ func (p *Point) DelRoutes(routes []*models.Route) error {
Priority: rt.Metric,
}
if err := netlink.RouteDel(&rte); err != nil {
p.out.Warn("Point.DelRoute: %s %s", rt.Prefix, err)
p.out.Warn("Access.DelRoute: %s %s", rt.Prefix, err)
continue
}
p.out.Info("Point.DelRoutes: route %s via %s", rt.Prefix, rt.NextHop)
p.out.Info("Access.DelRoutes: route %s via %s", rt.Prefix, rt.NextHop)
}
p.routes = nil
return nil

23
pkg/access/point_windows.go
View File

@@ -1,10 +1,11 @@
package access
import (
"strings"
"github.com/luscis/openlan/pkg/config"
"github.com/luscis/openlan/pkg/libol"
"github.com/luscis/openlan/pkg/models"
"strings"
)
type Point struct {
@@ -39,11 +40,11 @@ func (p *Point) OnTap(w *TapWorker) error {
if err := libol.UnmarshalLoad(&routes, ".routes.json"); err == nil {
for _, route := range routes {
_, _ = libol.IpRouteDel(p.IfName(), route.Prefix, route.NextHop)
p.out.Debug("Point.OnTap: clear %s via %s", route.Prefix, route.NextHop)
p.out.Debug("Access.OnTap: clear %s via %s", route.Prefix, route.NextHop)
}
}
if out, err := libol.IpMetricSet(p.IfName(), "235"); err != nil {
p.out.Warn("Point.OnTap: metricSet %s: %s", err, out)
p.out.Warn("Access.OnTap: metricSet %s: %s", err, out)
}
return nil
}
@@ -64,10 +65,10 @@ func (p *Point) AddAddr(ipStr string) error {
}
out, err := libol.IpAddrAdd(p.IfName(), ipStr)
if err != nil {
p.out.Warn("Point.AddAddr: %s, %s", err, p.Trim(out))
p.out.Warn("Access.AddAddr: %s, %s", err, p.Trim(out))
return err
}
p.out.Info("Point.AddAddr: %s", ipStr)
p.out.Info("Access.AddAddr: %s", ipStr)
p.addr = ipStr
return nil
}
@@ -76,10 +77,10 @@ func (p *Point) DelAddr(ipStr string) error {
ipv4 := strings.Split(ipStr, "/")[0]
out, err := libol.IpAddrDel(p.IfName(), ipv4)
if err != nil {
p.out.Warn("Point.DelAddr: %s, %s", err, p.Trim(out))
p.out.Warn("Access.DelAddr: %s, %s", err, p.Trim(out))
return err
}
p.out.Info("Point.DelAddr: %s", ipv4)
p.out.Info("Access.DelAddr: %s", ipv4)
p.addr = ""
return nil
}
@@ -92,10 +93,10 @@ func (p *Point) AddRoutes(routes []*models.Route) error {
for _, route := range routes {
out, err := libol.IpRouteAdd(p.IfName(), route.Prefix, route.NextHop)
if err != nil {
p.out.Warn("Point.AddRoutes: %s %s", route.Prefix, p.Trim(out))
p.out.Warn("Access.AddRoutes: %s %s", route.Prefix, p.Trim(out))
continue
}
p.out.Info("Point.AddRoutes: route %s via %s", route.Prefix, route.NextHop)
p.out.Info("Access.AddRoutes: route %s via %s", route.Prefix, route.NextHop)
}
p.routes = routes
return nil
@@ -105,10 +106,10 @@ func (p *Point) DelRoutes(routes []*models.Route) error {
for _, route := range routes {
out, err := libol.IpRouteDel(p.IfName(), route.Prefix, route.NextHop)
if err != nil {
p.out.Warn("Point.DelRoutes: %s %s", route.Prefix, p.Trim(out))
p.out.Warn("Access.DelRoutes: %s %s", route.Prefix, p.Trim(out))
continue
}
p.out.Info("Point.DelRoutes: route %s via %s", route.Prefix, route.NextHop)
p.out.Info("Access.DelRoutes: route %s via %s", route.Prefix, route.NextHop)
}
p.routes = nil
return nil

9
pkg/access/pointer.go
View File

@@ -1,12 +1,13 @@
package access
import (
"runtime"
"github.com/luscis/openlan/pkg/access/http"
"github.com/luscis/openlan/pkg/config"
"github.com/luscis/openlan/pkg/libol"
"github.com/luscis/openlan/pkg/models"
"github.com/luscis/openlan/pkg/network"
"runtime"
)
type Pointer interface {
@@ -44,7 +45,7 @@ func NewMixPoint(config *config.Point) MixPoint {
}
func (p *MixPoint) Initialize() {
libol.Info("MixPoint.Initialize")
libol.Info("MixAccess.Initialize")
p.worker.SetUUID(p.UUID())
p.worker.Initialize()
if p.config.Http != nil {
@@ -53,7 +54,7 @@ func (p *MixPoint) Initialize() {
}
func (p *MixPoint) Start() {
p.out.Info("MixPoint.Start %s", runtime.GOOS)
p.out.Info("MixAccess.Start %s", runtime.GOOS)
if p.config.PProf != "" {
f := libol.PProf{Listen: p.config.PProf}
f.Start()
@@ -62,7 +63,7 @@ func (p *MixPoint) Start() {
}
func (p *MixPoint) Stop() {
defer libol.Catch("MixPoint.Stop")
defer libol.Catch("MixAccess.Stop")
if p.http != nil {
p.http.Shutdown()
}

13
pkg/access/worker.go
View File

@@ -72,6 +72,7 @@ type WorkerListener struct {
OnTap func(w *TapWorker) error
AddRoutes func(routes []*models.Route) error
DelRoutes func(routes []*models.Route) error
Forward func(prefix, nexthop string)
}
type PrefixRule struct {
@@ -404,6 +405,14 @@ func (w *Worker) SetUUID(v string) {
w.uuid = v
}
func (w *Worker) OnDNS(name string, addr net.IP) {
w.out.Info("Worker.OnDSN %s -> %s\n", name, addr.String())
func (w *Worker) OnDNS(domain string, addr net.IP) {
name := strings.TrimRight(domain, ".")
w.out.Debug("Worker.OnDNS %s -> %s\n", name, addr.String())
via := w.cfg.Backends.FindBackend(name)
if via != nil {
w.out.Debug("Worker.OnDNS %s via %s", name, via.Server)
if w.listener.Forward != nil {
w.listener.Forward(addr.String()+"/32", via.Server)
}
}
}

43
pkg/config/point.go
View File

@@ -19,27 +19,28 @@ type Interface struct {
}
type Point struct {
File string `json:"file,omitempty"`
Alias string `json:"alias,omitempty"`
Connection string `json:"connection"`
Timeout int `json:"timeout,omitempty"`
Username string `json:"username,omitempty"`
Network string `json:"network,omitempty"`
Password string `json:"password,omitempty"`
Protocol string `json:"protocol,omitempty"`
Interface Interface `json:"interface,omitempty"`
Log Log `json:"log,omitempty"`
Http *Http `json:"http,omitempty"`
Crypt *Crypt `json:"crypt,omitempty"`
PProf string `json:"pprof,omitempty"`
RequestAddr bool `json:"requestAddr"`
ByPass bool `json:"bypass,omitempty"`
SaveFile string `json:"-"`
Queue *Queue `json:"queue,omitempty"`
Terminal string `json:"-"`
Cert *Cert `json:"cert,omitempty"`
StatusFile string `json:"status,omitempty"`
PidFile string `json:"pid,omitempty"`
File string `json:"file,omitempty"`
Alias string `json:"alias,omitempty"`
Connection string `json:"connection"`
Timeout int `json:"timeout,omitempty"`
Username string `json:"username,omitempty"`
Network string `json:"network,omitempty"`
Password string `json:"password,omitempty"`
Protocol string `json:"protocol,omitempty"`
Interface Interface `json:"interface,omitempty"`
Log Log `json:"log,omitempty"`
Http *Http `json:"http,omitempty"`
Crypt *Crypt `json:"crypt,omitempty"`
PProf string `json:"pprof,omitempty"`
RequestAddr bool `json:"requestAddr"`
ByPass bool `json:"bypass,omitempty"`
SaveFile string `json:"-"`
Queue *Queue `json:"queue,omitempty"`
Terminal string `json:"-"`
Cert *Cert `json:"cert,omitempty"`
StatusFile string `json:"status,omitempty"`
PidFile string `json:"pid,omitempty"`
Backends HttpBackends `json:"backends,omitempty" yaml:"backends,omitempty"`
}
func (i *Interface) Correct() {