This repository was archived by the owner on Mar 20, 2025. It is now read-only.
forked from windtf/wireproxy
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathwireproxy.go
More file actions
193 lines (158 loc) · 4.28 KB
/
Copy pathwireproxy.go
File metadata and controls
193 lines (158 loc) · 4.28 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
package wireproxy
import (
"bytes"
"encoding/base64"
"encoding/hex"
"fmt"
"net/netip"
"golang.zx2c4.com/wireguard/conn"
"golang.zx2c4.com/wireguard/device"
"golang.zx2c4.com/wireguard/tun"
"golang.zx2c4.com/wireguard/tun/netstack"
)
type PeerConfig struct {
PublicKey string
PreSharedKey string
Endpoint string
KeepAlive int
AllowedIPs []string
}
type internalPeerConfig struct {
PublicKey string
PreSharedKey string
Endpoint *string
KeepAlive int
AllowedIPs []netip.Prefix
}
type DeviceConfig struct {
SecretKey string
Endpoint []string
Peers []PeerConfig
DNS []string
MTU int
// ListenPort *int
}
func (d *DeviceConfig) convert() (*internalDeviceConfig, error) {
var err error
rd := &internalDeviceConfig{}
rd.MTU = d.MTU
rd.SecretKey, err = b64toHex(d.SecretKey)
if err != nil {
return nil, err
}
for i := range d.Endpoint {
endpoint, err := netip.ParsePrefix(d.Endpoint[i])
if err != nil {
return nil, err
}
rd.Endpoint = append(rd.Endpoint, endpoint.Addr())
}
for i := range d.DNS {
dns, err := netip.ParseAddr(d.DNS[i])
if err != nil {
return nil, err
}
rd.DNS = append(rd.DNS, dns)
}
for i := range d.Peers {
rp := internalPeerConfig{}
rp.PublicKey, err = b64toHex(d.Peers[i].PublicKey)
if err != nil {
return nil, err
}
if d.Peers[i].PreSharedKey == "" {
rp.PreSharedKey = "0000000000000000000000000000000000000000000000000000000000000000"
} else {
rp.PreSharedKey, err = b64toHex(d.Peers[i].PreSharedKey)
if err != nil {
return nil, err
}
}
if d.Peers[i].Endpoint != "" {
rp.Endpoint = &d.Peers[i].Endpoint
}
rp.KeepAlive = d.Peers[i].KeepAlive
for j := range d.Peers[i].AllowedIPs {
allowedIP, err := netip.ParsePrefix(d.Peers[i].AllowedIPs[j])
if err != nil {
return nil, err
}
rp.AllowedIPs = append(rp.AllowedIPs, allowedIP)
}
rd.Peers = append(rd.Peers, rp)
}
return rd, nil
}
type internalDeviceConfig struct {
SecretKey string
Endpoint []netip.Addr
Peers []internalPeerConfig
DNS []netip.Addr
MTU int
// ListenPort *int
}
// DeviceSetting contains the parameters for setting up a tun interface
type DeviceSetting struct {
ipcRequest string
dns []netip.Addr
deviceAddr []netip.Addr
mtu int
}
// serialize the config into an IPC request and DeviceSetting
func createIPCRequest(conf *internalDeviceConfig) (*DeviceSetting, error) {
var request bytes.Buffer
request.WriteString(fmt.Sprintf("private_key=%s\n", conf.SecretKey))
// if conf.ListenPort != nil {
// request.WriteString(fmt.Sprintf("listen_port=%d\n", *conf.ListenPort))
// }
for _, peer := range conf.Peers {
request.WriteString(fmt.Sprintf("public_key=%s\n", peer.PublicKey))
request.WriteString(fmt.Sprintf("persistent_keepalive_interval=%d\n", peer.KeepAlive))
request.WriteString(fmt.Sprintf("preshared_key=%s\n", peer.PreSharedKey))
if peer.Endpoint != nil {
request.WriteString(fmt.Sprintf("endpoint=%s\n", *peer.Endpoint))
}
if len(peer.AllowedIPs) > 0 {
for _, ip := range peer.AllowedIPs {
request.WriteString(fmt.Sprintf("allowed_ip=%s\n", ip.String()))
}
} else {
request.WriteString("allowed_ip=0.0.0.0/0\n")
request.WriteString("allowed_ip=::0/0\n")
}
}
setting := &DeviceSetting{ipcRequest: request.String(), dns: conf.DNS, deviceAddr: conf.Endpoint, mtu: conf.MTU}
return setting, nil
}
// StartWireguard creates a tun interface on netstack given a configuration
func StartWireguard(conf *DeviceConfig, logLevel int, listener ...conn.Listener) (tun.Device, *netstack.Net, error) {
internalConf, err := conf.convert()
if err != nil {
return nil, nil, err
}
setting, err := createIPCRequest(internalConf)
if err != nil {
return nil, nil, err
}
tun, tnet, err := netstack.CreateNetTUN(setting.deviceAddr, setting.dns, setting.mtu)
if err != nil {
return nil, nil, err
}
dev := device.NewDevice(tun, conn.NewDefaultBind(listener...), device.NewLogger(logLevel, ""))
err = dev.IpcSet(setting.ipcRequest)
if err != nil {
return nil, nil, err
}
err = dev.Up()
if err != nil {
return nil, nil, err
}
return tun, tnet, nil
}
func b64toHex(s string) (string, error) {
b, err := base64.StdEncoding.DecodeString(s)
if err != nil {
return "", err
}
return hex.EncodeToString(b), nil
}