using Renci.SshNet; using System; using System.Collections.Generic; using System.IO; using System.Text; using System.Windows; using Newtonsoft.Json; using Newtonsoft.Json.Linq; using ProxySU_Core.Models; namespace ProxySU_Core.Models.Developers { public class XrayProject : Project { private const string ServerLogDir = @"Templates\xray\server\00_log"; private const string ServerApiDir = @"Templates\xray\server\01_api"; private const string ServerDnsDir = @"Templates\xray\server\02_dns"; private const string ServerRoutingDir = @"Templates\xray\server\03_routing"; private const string ServerPolicyDir = @"Templates\xray\server\04_policy"; private const string ServerInboundsDir = @"Templates\xray\server\05_inbounds"; private const string ServerOutboundsDir = @"Templates\xray\server\06_outbounds"; private const string ServerTransportDir = @"Templates\xray\server\07_transport"; private const string ServerStatsDir = @"Templates\xray\server\08_stats"; private const string ServerReverseDir = @"Templates\xray\server\09_reverse"; private const string CaddyFileDir = @"Templates\xray\caddy"; public XrayProject(SshClient sshClient, XraySettings parameters, Action writeOutput) : base(sshClient, parameters, writeOutput) { } /// /// 安装Xray /// public override void Install() { try { EnsureRootAuth(); if (FileExists("/usr/local/bin/xray")) { var btnResult = MessageBox.Show("已经安装Xray,是否需要重装?", "提示", MessageBoxButton.YesNo); if (btnResult == MessageBoxResult.No) { MessageBox.Show("安装终止", "提示"); return; } } WriteOutput("检测安装系统环境..."); EnsureSystemEnv(); WriteOutput("检测安装系统环境完成"); WriteOutput("配置服务器端口..."); ConfigurePort(); WriteOutput("端口配置完成"); WriteOutput("安装必要的系统工具..."); ConfigureSoftware(); WriteOutput("系统工具安装完成"); WriteOutput("检测IP6..."); ConfigureIPv6(); WriteOutput("检测IP6完成"); WriteOutput("配置防火墙..."); ConfigureFirewall(); WriteOutput("防火墙配置完成"); WriteOutput("同步系统和本地时间..."); SyncTimeDiff(); WriteOutput("时间同步完成"); WriteOutput("检测域名是否绑定本机IP..."); ValidateDomain(); WriteOutput("域名检测完成"); WriteOutput("安装Xray-Core..."); InstallXrayWithCert(); WriteOutput("Xray-Core安装完成"); WriteOutput("安装Caddy..."); InstallCaddy(); WriteOutput("Caddy安装完成"); WriteOutput("启动BBR"); EnableBBR(); UploadCaddyFile(); WriteOutput("************"); WriteOutput("安装完成,尽情享用吧......"); WriteOutput("************"); } catch (Exception ex) { var errorLog = "安装终止," + ex.Message; WriteOutput(errorLog); MessageBox.Show(errorLog); } } public void Uninstall() { EnsureRootAuth(); WriteOutput("卸载Caddy"); UninstallCaddy(); WriteOutput("卸载Xray"); UninstallXray(); WriteOutput("卸载证书"); UninstallAcme(); WriteOutput("关闭端口"); ClosePort(Parameters.ShadowSocksPort, Parameters.VMESS_KCP_Port); WriteOutput("************ 卸载完成 ************"); } /// /// 更新xray内核 /// public void UpdateXrayCore() { EnsureRootAuth(); EnsureSystemEnv(); RunCmd("bash -c \"$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)\" @ install"); RunCmd("systemctl restart xray"); WriteOutput("************ 更新xray内核完成 ************"); } /// /// 更新xray配置 /// public void UpdateXraySettings() { EnsureRootAuth(); EnsureSystemEnv(); ConfigureFirewall(); var configJson = ConfigBuilder.BuildXrayConfig(Parameters); var stream = new MemoryStream(Encoding.UTF8.GetBytes(configJson)); RunCmd("rm -rf /usr/local/etc/xray/config.json"); UploadFile(stream, "/usr/local/etc/xray/config.json"); ConfigurePort(); UploadCaddyFile(string.IsNullOrEmpty(Parameters.MaskDomain)); RunCmd("systemctl restart xray"); WriteOutput("************ 更新Xray配置成功,更新配置不包含域名,如果域名更换请重新安装。 ************"); } /// /// 重装Caddy /// public void ReinstallCaddy() { EnsureRootAuth(); EnsureSystemEnv(); InstallCaddy(); UploadCaddyFile(); WriteOutput("************ 重装Caddy完成 ************"); } /// /// 安装证书 /// public void InstallCert() { EnsureRootAuth(); EnsureSystemEnv(); this.InstallCertToXray(); RunCmd("systemctl restart xray"); WriteOutput("************ 安装证书完成 ************"); } /// /// 上传证书 /// /// /// public void UploadCert(Stream stream) { EnsureRootAuth(); EnsureSystemEnv(); // 转移旧文件 var oldFileName = $"ssl_{DateTime.Now.Ticks}"; RunCmd($"mv /usr/local/etc/xray/ssl /usr/local/etc/xray/{oldFileName}"); // 上传新文件 RunCmd("mkdir /usr/local/etc/xray/ssl"); UploadFile(stream, "/usr/local/etc/xray/ssl/ssl.zip"); RunCmd("unzip /usr/local/etc/xray/ssl/ssl.zip -d /usr/local/etc/xray/ssl"); // 改名 var crtFiles = RunCmd("find /usr/local/etc/xray/ssl/*.crt").Split("\n".ToCharArray(), StringSplitOptions.RemoveEmptyEntries); if (crtFiles.Length > 0) { RunCmd($"mv {crtFiles[0]} /usr/local/etc/xray/ssl/xray_ssl.crt"); } else { WriteOutput("************ 上传证书失败,请联系开发者 ************"); RunCmd("rm -rf /usr/local/etc/xray/ssl"); RunCmd($"mv /usr/local/etc/xray/ssl{oldFileName} /usr/local/etc/xray/ssl"); WriteOutput("操作已回滚"); return; } var keyFiles = RunCmd("find /usr/local/etc/xray/ssl/*.key").Split("\n".ToCharArray(), StringSplitOptions.RemoveEmptyEntries); if (keyFiles.Length > 0) { RunCmd($"mv {keyFiles[0]} /usr/local/etc/xray/ssl/xray_ssl.key"); } else { WriteOutput("************ 上传证书失败,请联系开发者 ************"); RunCmd("rm -rf /usr/local/etc/xray/ssl"); RunCmd($"mv /usr/local/etc/xray/ssl{oldFileName} /usr/local/etc/xray/ssl"); WriteOutput("操作已回滚"); return; } RunCmd("systemctl restart xray"); WriteOutput("************ 上传证书完成 ************"); } /// /// 上传静态网站 /// /// public void UploadWeb(Stream stream) { EnsureRootAuth(); EnsureSystemEnv(); if (!FileExists("/usr/share/caddy")) { RunCmd("mkdir /usr/share/caddy"); } RunCmd("rm -rf /usr/share/caddy/*"); UploadFile(stream, "/usr/share/caddy/caddy.zip"); RunCmd("unzip /usr/share/caddy/caddy.zip -d /usr/share/caddy"); RunCmd("chmod -R 777 /usr/share/caddy"); UploadCaddyFile(useCustomWeb: true); WriteOutput("************ 上传网站模板完成 ************"); } private void UploadCaddyFile(bool useCustomWeb = false) { var configJson = ConfigBuilder.BuildCaddyConfig(Parameters, useCustomWeb); var stream = new MemoryStream(Encoding.UTF8.GetBytes(configJson)); RunCmd("mv /etc/caddy/Caddyfile /etc/caddy/Caddyfile.back"); UploadFile(stream, "/etc/caddy/Caddyfile"); RunCmd("systemctl restart caddy"); } private void EnableBBR() { var osVersion = RunCmd("uname -r"); var canInstallBBR = CheckKernelVersionBBR(osVersion.Split('-')[0]); var bbrInfo = RunCmd("sysctl net.ipv4.tcp_congestion_control | grep bbr"); var installed = bbrInfo.Contains("bbr"); if (canInstallBBR && !installed) { RunCmd(@"bash -c 'echo ""net.core.default_qdisc=fq"" >> /etc/sysctl.conf'"); RunCmd(@"bash -c 'echo ""net.ipv4.tcp_congestion_control=bbr"" >> /etc/sysctl.conf'"); RunCmd(@"sysctl -p"); if (OnlyIpv6) { RemoveNat64(); } WriteOutput("BBR启动成功"); } if (!canInstallBBR) { WriteOutput("****** 系统不满足启用BBR条件,启动失败。 ******"); } } private bool CheckKernelVersionBBR(string kernelVer) { string[] linuxKernelCompared = kernelVer.Split('.'); if (int.Parse(linuxKernelCompared[0]) > 4) { return true; } else if (int.Parse(linuxKernelCompared[0]) < 4) { return false; } else if (int.Parse(linuxKernelCompared[0]) == 4) { if (int.Parse(linuxKernelCompared[1]) >= 9) { return true; } else if (int.Parse(linuxKernelCompared[1]) < 9) { return false; } } return false; } private void UninstallXray() { RunCmd("bash -c \"$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)\" @ remove"); } private void UninstallAcme() { RunCmd("acme.sh --uninstall"); RunCmd("rm -r ~/.acme.sh"); } private void InstallXrayWithCert() { RunCmd("bash -c \"$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)\" @ install"); if (!FileExists("/usr/local/bin/xray")) { WriteOutput("Xray-Core安装失败,请联系开发者"); throw new Exception("Xray-Core安装失败,请联系开发者"); } RunCmd($"sed -i 's/User=nobody/User=root/g' /etc/systemd/system/xray.service"); RunCmd($"sed -i 's/CapabilityBoundingSet=/#CapabilityBoundingSet=/g' /etc/systemd/system/xray.service"); RunCmd($"sed -i 's/AmbientCapabilities=/#AmbientCapabilities=/g' /etc/systemd/system/xray.service"); RunCmd($"systemctl daemon-reload"); if (FileExists("/usr/local/etc/xray/config.json")) { RunCmd(@"mv /usr/local/etc/xray/config.json /usr/local/etc/xray/config.json.1"); } WriteOutput("安装TLS证书"); InstallCertToXray(); WriteOutput("TLS证书安装完成"); var configJson = ConfigBuilder.BuildXrayConfig(Parameters); var stream = new MemoryStream(Encoding.UTF8.GetBytes(configJson)); RunCmd("rm -rf /usr/local/etc/xray/config.json"); UploadFile(stream, "/usr/local/etc/xray/config.json"); RunCmd("systemctl restart xray"); } private void InstallCertToXray() { // 安装依赖 RunCmd(GetInstallCmd("socat")); // 解决搬瓦工CentOS缺少问题 RunCmd(GetInstallCmd("automake autoconf libtool")); // 安装Acme var result = RunCmd($"curl https://raw.githubusercontent.com/acmesh-official/acme.sh/master/acme.sh | sh -s -- --install-online -m {GetRandomEmail()}"); if (result.Contains("Install success")) { WriteOutput("安装 acme.sh 成功"); } else { WriteOutput("安装 acme.sh 失败,请联系开发者!"); throw new Exception("安装 acme.sh 失败,请联系开发者!"); } RunCmd("cd ~/.acme.sh/"); RunCmd("alias acme.sh=~/.acme.sh/acme.sh"); // 申请证书 if (OnlyIpv6) { var cmd = $"/root/.acme.sh/acme.sh --force --debug --issue --standalone -d {Parameters.Domain} --listen-v6"; result = RunCmd(cmd); } else { var cmd = $"/root/.acme.sh/acme.sh --force --debug --issue --standalone -d {Parameters.Domain}"; result = RunCmd(cmd); } if (result.Contains("success")) { WriteOutput("申请证书成功"); } else { WriteOutput("申请证书失败,如果申请次数过多请更换二级域名,或联系开发者!"); throw new Exception("申请证书失败,如果申请次数过多请更换二级域名,或联系开发者!"); } // 安装证书到xray RunCmd("mkdir -p /usr/local/etc/xray/ssl"); RunCmd($"/root/.acme.sh/acme.sh --installcert -d {Parameters.Domain} --certpath /usr/local/etc/xray/ssl/xray_ssl.crt --keypath /usr/local/etc/xray/ssl/xray_ssl.key --capath /usr/local/etc/xray/ssl/xray_ssl.crt"); result = RunCmd(@"if [ ! -f ""/usr/local/etc/xray/ssl/xray_ssl.key"" ]; then echo ""0""; else echo ""1""; fi | head -n 1"); if (result.Contains("1")) { WriteOutput("安装证书成功"); } else { WriteOutput("安装证书失败,请联系开发者!"); throw new Exception("安装证书失败,请联系开发者!"); } RunCmd(@"chmod 755 /usr/local/etc/xray/ssl"); } private string GetRandomEmail() { Random r = new Random(); var num = r.Next(200000000, 900000000); return $"{num}@qq.com"; } private int GetRandomPort() { var random = new Random(); return random.Next(10001, 60000); } private dynamic LoadJsonObj(string path) { if (File.Exists(path)) { var jsonStr = File.ReadAllText(path, Encoding.UTF8); return JsonConvert.DeserializeObject(jsonStr); } return null; } } }