Commit Graph

60 Commits

Author SHA1 Message Date
Xuxin He
52e47fb5c6 Remove the naked IP logic description in document usage
which discusses in #38.
2020-03-28 16:54:39 +08:00
klzgrad
8ba5562f00 Handle payload data immediately after HTTP headers
In HttpProxySocket there can be data immediately after HTTP headers,
as in the case of fast HTTP CONNECT.

Instead of reporting an error, handle this case by returning
the data after HTTP headers in the next Read() call.
2020-03-07 18:14:51 +08:00
klzgrad
5f4dd0e680 Update OpenWrt builds to 19.07.2 2020-03-07 15:57:52 +08:00
klzgrad
65ed718a56 Fix Travis Mac build 2020-03-07 15:21:40 +08:00
klzgrad
0b3ef999a8 Add OpenWrt arm64 build 2020-03-07 14:30:00 +08:00
Abreto FU
e571fc95be Add curl and unzip to prerequisites
If git is necessary to be listed, so are curl and unzip.
2020-03-01 13:57:19 +08:00
fbion
e53dd24ebd Update README.md 2020-03-01 13:56:15 +08:00
klzgrad
5d84bf9f18 Remove logic replacing naked IP address to domain
Makes testing easier.
2020-02-11 16:57:07 +08:00
klzgrad
f7ce953587 Add OpenWrt x86_64 build 2020-02-06 05:23:53 +08:00
klzgrad
1973c0d880 Remove sysroot pipewire workaround 2020-02-06 05:20:46 +08:00
klzgrad
d27e63a103 Add OpenWrt mipsel_24kc build 2020-02-06 05:20:46 +08:00
btwiuse
0257085279 Add linux-x86 build 2020-02-06 05:20:46 +08:00
klzgrad
832a733894 Improve redirect resolver
Print info.

Fail fast if connecting to naked address in resolved range.
2020-02-06 05:20:46 +08:00
klzgrad
89cfa3fafa Document usage of redir:// 2020-02-06 05:20:46 +08:00
klzgrad
d025974cce Redirect DNS for redir://
Run a fake stub DNS resolver at the same port with redir://.
2020-02-06 05:20:46 +08:00
klzgrad
3a099e503b Support arm64 and arm builds 2020-02-06 05:20:46 +08:00
klzgrad
53c10dc0ae Add sysroot script 2020-02-06 05:20:46 +08:00
klzgrad
05ba837aaa Fix OnPushComplete logic
Should not Push the same thing again.
2020-02-06 05:20:02 +08:00
klzgrad
835bb66f3e Support TCP transparent proxying
Enable with naive --listen=redir:// and iptables ... -j REDIRECT
--to-ports 1080.
2020-02-06 05:20:02 +08:00
klzgrad
bd0005ebb9 Add continuous integration and tests 2020-02-06 05:20:02 +08:00
klzgrad
e8b26c216c Add README 2020-02-06 05:20:02 +08:00
klzgrad
f3705c634c Add LICENSE 2020-02-06 05:20:02 +08:00
klzgrad
1b682d10c0 Add source import tool 2020-02-06 05:20:02 +08:00
klzgrad
7ce20c3d7a Add .gitignore 2020-02-06 05:20:02 +08:00
klzgrad
04295aa07d Add example config.json 2020-02-06 05:20:02 +08:00
klzgrad
65289b2a86 Support loading config.json 2020-02-06 05:20:02 +08:00
klzgrad
03b2b4817e Add QUIC client 2020-02-06 05:20:01 +08:00
klzgrad
082d59ff0d Add http_proxy_socket to BUILD.gn 2020-02-06 05:20:01 +08:00
klzgrad
b21f2fccb6 Add server implementation and tunnel padding 2020-02-06 05:20:01 +08:00
klzgrad
0e10747e12 Add build scripts 2020-02-06 05:20:01 +08:00
klzgrad
b1eb10a766 Add Naive client to BUILD.gn 2020-02-06 05:20:00 +08:00
klzgrad
45f088e27a Add initial implementation of Naive client 2020-02-06 05:19:39 +08:00
klzgrad
3d0e43fe4d build: Pass extra flags to gcc toolchains 2020-02-06 03:22:52 +08:00
klzgrad
349b4e4531 build: Add OpenWrt toolchain definitions 2020-02-06 03:22:52 +08:00
klzgrad
44a71ac4aa build: Support MIPS -mtune= flag 2020-02-06 03:22:52 +08:00
klzgrad
83d2f59b4b build: Don't use target_sysroot for host_toolchain
protoc should be built with the host toolchain, usually not needing
the sysroot.
2020-02-06 03:22:13 +08:00
klzgrad
77bd30282c build: Support non-standard ldso in executables 2020-02-06 03:22:13 +08:00
klzgrad
3a6a75a8d1 allocator: Improve MIPS coverage of spinlocks 2020-02-06 03:22:13 +08:00
klzgrad
d2b2207ccb debug: Fix obsolete max check 2020-02-06 03:22:13 +08:00
klzgrad
e9852d555c debug: Fix uClibc macro condition 2020-02-06 03:22:12 +08:00
klzgrad
e71831202b process: Remove use of mallinfo under Musl 2020-02-06 03:22:12 +08:00
klzgrad
c2872fb89c trace_event: Remove use of mallinfo under Musl 2020-02-06 03:22:12 +08:00
klzgrad
6a550e008a udp: Fix mmsghdr struct initializer
On OpenWrt x64 there are paddings fields in the struct, making
the initializer list not work.
2020-02-06 03:22:12 +08:00
klzgrad
6df69949e9 dns: Support Musl 2020-02-05 22:06:50 +08:00
klzgrad
91b03e30d9 libc++: Disable exceptions and RTTI 2020-02-05 22:06:50 +08:00
klzgrad
25854fe1fa http: Add padding for CONNECT requests 2020-02-05 22:06:50 +08:00
klzgrad
40966d2c36 quic: Add support for HTTP/3 CONNECT Fast Open
SpdyProxyClientSocket uses read_callback_ for both Connect() and
Read(), and its OnIOComplete() calls read_callback_, thus its fast
connect code checks read_callback_. The code was ported to
QuicProxyClientSocket without much change.

But QuicProxyClientSocket uses a separate connect_callback_ apart from
read_callback_, and its OnIOComplete() calls connect_callback_, thus
when headers are received after Connect() it doesn't need to check
read_callback_ and should always avoid calling connect_callback_.
2020-02-05 22:06:50 +08:00
klzgrad
9748124624 h2: Add support for HTTP/2 CONNECT Fast Open
SpdyProxyClientSocket waits for 200 OK before returning OK for Connect.

Change that behavior to returning OK immediately after CONNECT header.

This feature is enabled by default. It should probably be turned on
through an interface but that implies passing a flag through deep
interface chains right now requiring intrusive changes to multiple
places.

Design notes:

The current approach is better than the obvious TCP Fast Open style fake
Connect().

Fast Open should not be used for preconnects as preconnects need actual
connections set up. The Naive client does not use preconnects per se
(using "...RawConnect") but the user agent will use preconnects and the
Naive client has to infer that. Hence there is a need to check the
incoming socket for available bytes right before Connect() and configure
whether a socket should be connected with Fast Open. But fake Connect()
make it difficult to check the incoming socket because it immediately
returns and there is not enough time for the first read of the incoming
socket to arrive.

To check for preconnects it is best to push the first read of the
incoming socket to as late as possible. The other (wrong) way of doing
that is to pass in an early read callback and call it immediately after
sending HEADERS and then send the available bytes right there. This way
is wrong because it does not work with late binding, which assumes
Connect() is idempotent and causes sockets opened in this way to be
potentially bound to the wrong socket requests.

The current approach is to return OK in Connect() right after sending
HEADERS before getting the reply, which is to be received later. If the
reply is received during a subsequent Read() and the reply indicates an
error, the error is returned to the callback of the Read(); otherwise
the error is ignored with the connection disconnected and subsequent
Read() and Write() should discover the disconnection.
2020-02-05 22:06:50 +08:00
klzgrad
876502c0f4 h2: Notify delegate about read EOF
So the delegate can close the socket instead of keeping sending data.

Read EOF or h2 half-closed (remote) state was introduced in
https://codereview.chromium.org/129543002. But StreamSocket doesnt
really supports a half closed state, so upon a read EOF the only sane
action is to close the socket immediately even if in theory more send
is possible.
2020-02-05 22:06:50 +08:00
klzgrad
a1d7c437fe h2: Reduce warnings about RST on invalid streams
Per RFC 7540#6.4:

  However, after sending the RST_STREAM, the sending endpoint MUST be
  prepared to receive and process additional frames sent on the stream
  that might have been sent by the peer prior to the arrival of the
  RST_STREAM.
2020-02-05 22:06:50 +08:00