568 lines
20 KiB
PHP
568 lines
20 KiB
PHP
<?php
|
||
|
||
/**
|
||
* This file is part of https://github.com/walkor/php-socks5.
|
||
*
|
||
* Licensed under The MIT License
|
||
* For full copyright and license information, please see the MIT-LICENSE.txt
|
||
* Redistributions of files must retain the above copyright notice.
|
||
*
|
||
* @author walkor<walkor@workerman.net>
|
||
* @copyright walkor<walkor@workerman.net>
|
||
* @link http://www.workerman.net/
|
||
* @license http://www.opensource.org/licenses/mit-license.php MIT License
|
||
*/
|
||
ini_set("memory_limit", "512M");
|
||
|
||
use \Workerman\Worker;
|
||
use \Workerman\Timer;
|
||
use \Workerman\Connection\AsyncTcpConnection;
|
||
use \Workerman\Connection\AsyncUdpConnection;
|
||
|
||
// 自动加载类
|
||
require_once __DIR__ . '/vendor/autoload.php';
|
||
|
||
define('STAGE_INIT', 0);
|
||
define('STAGE_AUTH', 1);
|
||
define('STAGE_ADDR', 2);
|
||
define('STAGE_UDP_ASSOC', 3);
|
||
define('STAGE_DNS', 4);
|
||
define('STAGE_CONNECTING', 5);
|
||
define('STAGE_STREAM', 6);
|
||
define('STAGE_DESTROYED', -1);
|
||
|
||
define('CMD_CONNECT', 1);
|
||
define('CMD_BIND', 2);
|
||
define('CMD_UDP_ASSOCIATE', 3);
|
||
|
||
define('ERR_GENERAL', 1);
|
||
define('ERR_NOT_ALLOW', 2);
|
||
define('ERR_NETWORK', 3);
|
||
define('ERR_HOST', 4);
|
||
define('ERR_REFUSE', 5);
|
||
define('ERR_TTL_EXPIRED', 6);
|
||
define('ERR_UNKNOW_COMMAND', 7);
|
||
define('ERR_UNKNOW_ADDR_TYPE', 8);
|
||
define('ERR_UNKNOW', 9);
|
||
|
||
define('ADDRTYPE_IPV4', 1);
|
||
define('ADDRTYPE_IPV6', 4);
|
||
define('ADDRTYPE_HOST', 3);
|
||
|
||
define('METHOD_NO_AUTH', 0);
|
||
define('METHOD_GSSAPI', 1);
|
||
define('METHOD_USER_PASS', 2);
|
||
|
||
require_once __DIR__ . '/config.php';
|
||
|
||
if (count($config['auth']) == 0) {
|
||
$config['auth'] = [METHOD_NO_AUTH => true];
|
||
}
|
||
|
||
$worker = new Worker('tcp://0.0.0.0:' . $config['tcp_port']);
|
||
$worker->onConnect = function ($connection) {
|
||
$connection->stage = STAGE_INIT;
|
||
$connection->auth_type = NULL;
|
||
};
|
||
$worker->onMessage = function ($connection, $buffer) {
|
||
global $config;
|
||
logger(LOG_DEBUG, "recv:" . bin2hex($buffer));
|
||
switch ($connection->stage) {
|
||
// 初始化环节
|
||
case STAGE_INIT:
|
||
$request = [];
|
||
// 当前偏移量
|
||
$offset = 0;
|
||
|
||
// 检测buffer长度
|
||
if (strlen($buffer) < 2) {
|
||
logger(LOG_ERR, "init socks5 failed. buffer too short.");
|
||
$connection->send("\x05\xff");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
$connection->close();
|
||
return;
|
||
}
|
||
|
||
// Socks5 版本
|
||
$request['ver'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
// 认证方法数量
|
||
$request['method_count'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
if (strlen($buffer) < 2 + $request['method_count']) {
|
||
logger(LOG_ERR, "init authentic failed. buffer too short.");
|
||
$connection->send("\x05\xff");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
$connection->close();
|
||
return;
|
||
}
|
||
|
||
// 客户端支持的认证方法
|
||
$request['methods'] = [];
|
||
for ($i = 1; $i <= $request['method_count']; $i++) {
|
||
$request['methods'][] = ord($buffer[$offset]);
|
||
$offset++;
|
||
}
|
||
|
||
foreach ($config['auth'] as $k => $v) {
|
||
if (in_array($k, $request['methods'])) {
|
||
|
||
logger(LOG_INFO, "auth client via method $k");
|
||
logger(LOG_DEBUG, "send:" . bin2hex("\x05" . chr($k)));
|
||
|
||
$connection->send("\x05" . chr($k));
|
||
if ($k == 0) {
|
||
$connection->stage = STAGE_ADDR;
|
||
} else {
|
||
$connection->stage = STAGE_AUTH;
|
||
}
|
||
$connection->auth_type = $k;
|
||
return;
|
||
}
|
||
}
|
||
if ($connection->stage != STAGE_AUTH) {
|
||
logger(LOG_ERR, "client has no matched auth methods");
|
||
logger(LOG_DEBUG, "send:" . bin2hex("\x05\xff"));
|
||
$connection->send("\x05\xff");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
$connection->close();
|
||
}
|
||
return;
|
||
// 认证环节
|
||
case STAGE_AUTH:
|
||
|
||
$request = [];
|
||
// 当前偏移量
|
||
$offset = 0;
|
||
|
||
if (strlen($buffer) < 5) {
|
||
logger(LOG_ERR, "auth failed. buffer too short.");
|
||
$connection->send("\x01\x01");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
$connection->close();
|
||
return;
|
||
}
|
||
|
||
// var_dump($connection->auth_type);
|
||
switch ($connection->auth_type) {
|
||
case METHOD_USER_PASS:
|
||
// 子协议 协商 版本
|
||
$request['sub_ver'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
// 用户名
|
||
$request['user_len'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
if (strlen($buffer) < 2 + $request['user_len'] + 2) {
|
||
logger(LOG_ERR, "auth username failed. buffer too short.");
|
||
$connection->send("\x01\x01");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
$connection->close();
|
||
return;
|
||
}
|
||
|
||
$request['user'] = substr($buffer, $offset, $request['user_len']);
|
||
$offset += $request['user_len'];
|
||
|
||
// 密码
|
||
$request['pass_len'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
|
||
if (strlen($buffer) < 2 + $request['user_len'] + 1 + $request['pass_len']) {
|
||
logger(LOG_ERR, "auth password failed. buffer too short.");
|
||
$connection->send("\x01\x01");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
$connection->close();
|
||
return;
|
||
}
|
||
|
||
$request['pass'] = substr($buffer, $offset, $request['pass_len']);
|
||
$offset += $request['pass_len'];
|
||
|
||
if ($config["auth"][METHOD_USER_PASS]($request)) {
|
||
logger(LOG_INFO, "auth ok");
|
||
$connection->send("\x01\x00");
|
||
$connection->stage = STAGE_ADDR;
|
||
} else {
|
||
logger(LOG_INFO, "auth failed");
|
||
$connection->send("\x01\x01");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
$connection->close();
|
||
}
|
||
break;
|
||
default:
|
||
logger(LOG_ERR, "unsupport auth type");
|
||
$connection->send("\x01\x01");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
$connection->close();
|
||
break;
|
||
}
|
||
return;
|
||
case STAGE_ADDR:
|
||
$request = [];
|
||
// 当前偏移量
|
||
$offset = 0;
|
||
|
||
if (strlen($buffer) < 4) {
|
||
logger(LOG_ERR, "connect init failed. buffer too short.");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
|
||
$response = [];
|
||
$response['ver'] = 5;
|
||
$response['rep'] = ERR_GENERAL;
|
||
$response['rsv'] = 0;
|
||
$response['addr_type'] = ADDRTYPE_IPV4;
|
||
$response['bind_addr'] = '0.0.0.0';
|
||
$response['bind_port'] = 0;
|
||
|
||
$connection->close(packResponse($response));
|
||
return;
|
||
}
|
||
|
||
// Socks 版本
|
||
$request['ver'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
// 命令
|
||
$request['command'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
// RSV
|
||
$request['rsv'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
// AddressType
|
||
$request['addr_type'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
// DestAddr
|
||
switch ($request['addr_type']) {
|
||
case ADDRTYPE_IPV4:
|
||
|
||
if (strlen($buffer) < 4 + 4) {
|
||
logger(LOG_ERR, "connect init failed.[ADDRTYPE_IPV4] buffer too short.");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
|
||
$response = [];
|
||
$response['ver'] = 5;
|
||
$response['rep'] = ERR_GENERAL;
|
||
$response['rsv'] = 0;
|
||
$response['addr_type'] = ADDRTYPE_IPV4;
|
||
$response['bind_addr'] = '0.0.0.0';
|
||
$response['bind_port'] = 0;
|
||
|
||
$connection->close(packResponse($response));
|
||
return;
|
||
}
|
||
|
||
$tmp = substr($buffer, $offset, 4);
|
||
$ip = 0;
|
||
for ($i = 0; $i < 4; $i++) {
|
||
// var_dump(ord($tmp[$i]));
|
||
$ip += ord($tmp[$i]) * pow(256, 3 - $i);
|
||
}
|
||
$request['dest_addr'] = long2ip($ip);
|
||
$offset += 4;
|
||
break;
|
||
|
||
case ADDRTYPE_HOST:
|
||
$request['host_len'] = ord($buffer[$offset]);
|
||
$offset += 1;
|
||
|
||
if (strlen($buffer) < 4 + 1 + $request['host_len']) {
|
||
logger(LOG_ERR, "connect init failed.[ADDRTYPE_HOST] buffer too short.");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
|
||
$response = [];
|
||
$response['ver'] = 5;
|
||
$response['rep'] = ERR_GENERAL;
|
||
$response['rsv'] = 0;
|
||
$response['addr_type'] = ADDRTYPE_IPV4;
|
||
$response['bind_addr'] = '0.0.0.0';
|
||
$response['bind_port'] = 0;
|
||
|
||
$connection->close(packResponse($response));
|
||
return;
|
||
}
|
||
|
||
$request['dest_addr'] = substr($buffer, $offset, $request['host_len']);
|
||
$offset += $request['host_len'];
|
||
break;
|
||
|
||
case ADDRTYPE_IPV6:
|
||
default:
|
||
logger(LOG_ERR, "unsupport ipv6. [ADDRTYPE_IPV6].");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
|
||
$response = [];
|
||
$response['ver'] = 5;
|
||
$response['rep'] = ERR_UNKNOW_ADDR_TYPE;
|
||
$response['rsv'] = 0;
|
||
$response['addr_type'] = ADDRTYPE_IPV4;
|
||
$response['bind_addr'] = '0.0.0.0';
|
||
$response['bind_port'] = 0;
|
||
|
||
$connection->close(packResponse($response));
|
||
return;
|
||
break;
|
||
}
|
||
|
||
// DestPort
|
||
|
||
if (strlen($buffer) < $offset + 2) {
|
||
logger(LOG_ERR, "connect init failed.[port] buffer too short.");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
|
||
$response = [];
|
||
$response['ver'] = 5;
|
||
$response['rep'] = ERR_GENERAL;
|
||
$response['rsv'] = 0;
|
||
$response['addr_type'] = ADDRTYPE_IPV4;
|
||
$response['bind_addr'] = '0.0.0.0';
|
||
$response['bind_port'] = 0;
|
||
|
||
$connection->close(packResponse($response));
|
||
return;
|
||
}
|
||
$portData = unpack("n", substr($buffer, $offset, 2));
|
||
$request['dest_port'] = $portData[1];
|
||
$offset += 2;
|
||
|
||
// var_dump($request);
|
||
switch ($request['command']) {
|
||
case CMD_CONNECT:
|
||
logger(LOG_DEBUG, 'tcp://' . $request['dest_addr'] . ':' . $request['dest_port']);
|
||
if ($request['addr_type'] == ADDRTYPE_HOST) {
|
||
if (!filter_var($request['dest_addr'], FILTER_VALIDATE_IP)) {
|
||
logger(LOG_DEBUG, 'resolve DNS ' . $request['dest_addr']);
|
||
$connection->stage = STAGE_DNS;
|
||
$addr = dns_get_record($request['dest_addr'], DNS_A);
|
||
$addr = $addr ? array_pop($addr) : null;
|
||
logger(LOG_DEBUG, 'DNS resolved ' . $request['dest_addr'] . ' => ' . $addr['ip']);
|
||
} else {
|
||
$addr['ip'] = $request['dest_addr'];
|
||
}
|
||
} else {
|
||
$addr['ip'] = $request['dest_addr'];
|
||
}
|
||
if ($addr) {
|
||
$connection->stage = STAGE_CONNECTING;
|
||
$remote_connection = new AsyncTcpConnection('tcp://' . $addr['ip'] . ':' . $request['dest_port']);
|
||
$remote_connection->onConnect = function ($remote_connection) use ($connection, $request) {
|
||
$connection->state = STAGE_STREAM;
|
||
$response = [];
|
||
$response['ver'] = 5;
|
||
$response['rep'] = 0;
|
||
$response['rsv'] = 0;
|
||
$response['addr_type'] = $request['addr_type'];
|
||
$response['bind_addr'] = '0.0.0.0';
|
||
$response['bind_port'] = 18512;
|
||
|
||
$connection->send(packResponse($response));
|
||
$connection->pipe($remote_connection);
|
||
$remote_connection->pipe($connection);
|
||
logger(LOG_DEBUG, 'tcp://' . $request['dest_addr'] . ':' . $request['dest_port'] . ' [OK]');
|
||
};
|
||
$remote_connection->connect();
|
||
} else {
|
||
logger(LOG_DEBUG, 'DNS resolve failed.');
|
||
$connection->stage = STAGE_DESTROYED;
|
||
|
||
$response = [];
|
||
$response['ver'] = 5;
|
||
$response['rep'] = ERR_HOST;
|
||
$response['rsv'] = 0;
|
||
$response['addr_type'] = ADDRTYPE_IPV4;
|
||
$response['bind_addr'] = '0.0.0.0';
|
||
$response['bind_port'] = 0;
|
||
|
||
$connection->close(packResponse($response));
|
||
}
|
||
break;
|
||
case CMD_UDP_ASSOCIATE:
|
||
$connection->stage = STAGE_UDP_ASSOC;
|
||
var_dump("CMD_UDP_ASSOCIATE " . $config['udp_port']);
|
||
if ($config['udp_port'] == 0) {
|
||
$connection->udpWorker = new Worker('udp://0.0.0.0:0');
|
||
$connection->udpWorker->incId = 0;
|
||
$connection->udpWorker->onMessage = function ($udp_connection, $data) use ($connection) {
|
||
udpWorkerOnMessage($udp_connection, $data, $connection->udpWorker);
|
||
};
|
||
$connection->udpWorker->listen();
|
||
$listenInfo = stream_socket_get_name($connection->udpWorker->getMainSocket(), false);
|
||
list($bind_addr, $bind_port) = explode(":", $listenInfo);
|
||
} else {
|
||
$bind_port = $config['udp_port'];
|
||
}
|
||
$bind_addr = $config['wanIP'];
|
||
|
||
$response['ver'] = 5;
|
||
$response['rep'] = 0;
|
||
$response['rsv'] = 0;
|
||
$response['addr_type'] = ADDRTYPE_IPV4;
|
||
$response['bind_addr'] = $bind_addr;
|
||
$response['bind_port'] = $bind_port;
|
||
|
||
logger(LOG_DEBUG, 'send:' . bin2hex(packResponse($response)));
|
||
$connection->send(packResponse($response));
|
||
break;
|
||
default:
|
||
logger(LOG_ERR, "connect init failed. unknow command.");
|
||
$connection->stage = STAGE_DESTROYED;
|
||
|
||
$response = [];
|
||
$response['ver'] = 5;
|
||
$response['rep'] = ERR_UNKNOW_COMMAND;
|
||
$response['rsv'] = 0;
|
||
$response['addr_type'] = ADDRTYPE_IPV4;
|
||
$response['bind_addr'] = '0.0.0.0';
|
||
$response['bind_port'] = 0;
|
||
|
||
$connection->close(packResponse($response));
|
||
return;
|
||
break;
|
||
}
|
||
}
|
||
};
|
||
$worker->onClose = function ($connection) {
|
||
logger(LOG_INFO, "client closed.");
|
||
};
|
||
|
||
function udpWorkerOnMessage($udp_connection, $data, &$worker)
|
||
{
|
||
|
||
logger(LOG_DEBUG, 'send:' . bin2hex($data));
|
||
$request = [];
|
||
$offset = 0;
|
||
|
||
$request['rsv'] = substr($data, $offset, 2);
|
||
$offset += 2;
|
||
|
||
$request['frag'] = ord($data[$offset]);
|
||
$offset += 1;
|
||
|
||
$request['addr_type'] = ord($data[$offset]);
|
||
$offset += 1;
|
||
|
||
switch ($request['addr_type']) {
|
||
case ADDRTYPE_IPV4:
|
||
$tmp = substr($data, $offset, 4);
|
||
$ip = 0;
|
||
for ($i = 0; $i < 4; $i++) {
|
||
$ip += ord($tmp[$i]) * pow(256, 3 - $i);
|
||
}
|
||
$request['dest_addr'] = long2ip($ip);
|
||
$offset += 4;
|
||
break;
|
||
|
||
case ADDRTYPE_HOST:
|
||
$request['host_len'] = ord($data[$offset]);
|
||
$offset += 1;
|
||
|
||
$request['dest_addr'] = substr($data, $offset, $request['host_len']);
|
||
$offset += $request['host_len'];
|
||
break;
|
||
|
||
case ADDRTYPE_IPV6:
|
||
if (strlen($data) < 22) {
|
||
echo "buffer too short\n";
|
||
$error = true;
|
||
break;
|
||
}
|
||
echo "todo ipv6\n";
|
||
$error = true;
|
||
default:
|
||
echo "unsupported addrtype {$request['addr_type']}\n";
|
||
$error = true;
|
||
}
|
||
|
||
$portData = unpack("n", substr($data, $offset, 2));
|
||
$request['dest_port'] = $portData[1];
|
||
$offset += 2;
|
||
// var_dump($request['dest_addr']);
|
||
if ($request['addr_type'] == ADDRTYPE_HOST) {
|
||
logger(LOG_DEBUG, '解析DNS');
|
||
$addr = dns_get_record($request['dest_addr'], DNS_A);
|
||
$addr = $addr ? array_pop($addr) : null;
|
||
logger(LOG_DEBUG, 'DNS 解析完成' . $addr['ip']);
|
||
} else {
|
||
$addr['ip'] = $request['dest_addr'];
|
||
}
|
||
// var_dump($request);
|
||
|
||
// var_dump($udp_connection);
|
||
|
||
$remote_connection = new AsyncUdpConnection('udp://' . $addr['ip'] . ':' . $request['dest_port']);
|
||
$remote_connection->id = $worker->incId++;
|
||
$remote_connection->udp_connection = $udp_connection;
|
||
$remote_connection->onConnect = function ($remote_connection) use ($data, $offset) {
|
||
$remote_connection->send(substr($data, $offset));
|
||
};
|
||
$remote_connection->onMessage = function ($remote_connection, $recv) use ($data, $offset, $udp_connection, $worker) {
|
||
$udp_connection->close(substr($data, 0, $offset) . $recv);
|
||
$remote_connection->close();
|
||
unset($worker->udpConnections[$remote_connection->id]);
|
||
};
|
||
$remote_connection->deadTime = time() + 3;
|
||
$remote_connection->connect();
|
||
$worker->udpConnections[$remote_connection->id] = $remote_connection;
|
||
}
|
||
|
||
$udpWorker = new Worker('udp://0.0.0.0:1080');
|
||
$udpWorker->incId = 0;
|
||
$udpWorker->onWorkerStart = function ($worker) {
|
||
$worker->udpConnections = [];
|
||
Timer::add(1, function () use ($worker) {
|
||
foreach ($worker->udpConnections as $id => $remote_connection) {
|
||
if ($remote_connection->deadTime < time()) {
|
||
$remote_connection->close();
|
||
$remote_connection->udp_connection->close();
|
||
unset($worker->udpConnections[$id]);
|
||
}
|
||
}
|
||
});
|
||
};
|
||
$udpWorker->onMessage = 'udpWorkerOnMessage';
|
||
|
||
function packResponse($response)
|
||
{
|
||
$data = "";
|
||
$data .= chr($response['ver']);
|
||
$data .= chr($response['rep']);
|
||
$data .= chr($response['rsv']);
|
||
$data .= chr($response['addr_type']);
|
||
|
||
switch ($response['addr_type']) {
|
||
case ADDRTYPE_IPV4:
|
||
$tmp = explode('.', $response['bind_addr']);
|
||
foreach ($tmp as $block) {
|
||
$data .= chr($block);
|
||
}
|
||
break;
|
||
case ADDRTYPE_HOST:
|
||
$host_len = strlen($response['bind_addr']);
|
||
$data .= chr($host_len);
|
||
$data .= $response['bind_addr'];
|
||
break;
|
||
}
|
||
|
||
$data .= pack("n", $response['bind_port']);
|
||
return $data;
|
||
}
|
||
|
||
function logger($level, $str)
|
||
{
|
||
global $config;
|
||
if ($config['log_level'] >= $level) {
|
||
echo $str . "\n";
|
||
}
|
||
}
|
||
// 如果不是在根目录启动，则运行runAll方法
|
||
if (!defined('GLOBAL_START')) {
|
||
Worker::runAll();
|
||
}
|