Commit Graph

60 Commits

Author SHA1 Message Date
klzgrad
6da81f8c25 Add OpenWRT builds 2019-12-01 11:24:57 +08:00
klzgrad
8072e5c86b build: Support OpenWRT builds 2019-12-01 11:24:57 +08:00
klzgrad
d8894ad108 dns: Support Musl 2019-12-01 11:24:57 +08:00
klzgrad
07da15711f crl_set: Support big endian 2019-12-01 11:24:57 +08:00
klzgrad
7c605f71f9 build: Add MIPS architectures 2019-12-01 11:24:57 +08:00
klzgrad
91e46025a8 libc++: Disable exceptions and RTTI 2019-12-01 11:24:56 +08:00
klzgrad
1c6691986b Support MIPS architectures
lld doesn't work with readonly .eh_frame sections on MIPS, see
https://reviews.llvm.org/D13104.
2019-11-29 00:31:27 +08:00
klzgrad
35b3c12523 Do not disable brotli
It impacts TLS signature about certificate compression.
2019-11-09 21:30:32 +08:00
btwiuse
5e33857fdb Fix linux-x86 test 2019-11-05 22:40:32 +08:00
btwiuse
edf76de13a Add linux-x86 target 2019-11-05 22:40:11 +08:00
btwiuse
3fd986c8ed Fix x86 build 2019-11-05 22:40:10 +08:00
klzgrad
24cf56c087 Improve redirect resolver
Print info.

Fail fast if connecting to naked address in resolved range.
2019-10-31 23:44:45 +08:00
klzgrad
ed41041342 Fix armhf tests 2019-10-31 23:33:31 +08:00
klzgrad
437f4c791e Fix armhf build 2019-10-31 22:41:50 +08:00
klzgrad
a132f7943e Fix unused field warning 2019-10-31 22:41:24 +08:00
klzgrad
a28a12c56c Fix arm builds 2019-10-31 22:16:56 +08:00
klzgrad
39041ee95e Update sysroot package list 2019-10-31 22:16:41 +08:00
klzgrad
c9a3d4efa4 sysroot: Fix fcntl compat in glibc 2.28 2019-10-31 22:16:02 +08:00
klzgrad
1a802cfb56
Update README.md 2019-10-26 15:24:57 +08:00
klzgrad
392032443c
Update README.md 2019-10-26 14:55:52 +08:00
klzgrad
141b812760 Redirect DNS for redir://
Run a fake stub DNS resolver at the same port with redir://.
2019-10-26 10:38:33 +08:00
klzgrad
918da20402 Document usage of --quic-version 2019-10-26 10:38:33 +08:00
klzgrad
dfe0285de4 Allow setting QUIC version manually 2019-10-26 10:38:33 +08:00
klzgrad
9f3cf4b00d Support arm64 and arm builds 2019-10-26 10:38:33 +08:00
klzgrad
62f5f98b69 Add sysroot script 2019-10-26 10:38:33 +08:00
klzgrad
9ce13a1196 Refactor build.sh 2019-10-26 10:38:33 +08:00
klzgrad
0019253bd0 Document usage of redir:// 2019-10-26 10:38:32 +08:00
klzgrad
f07623e943 Fix OnPushComplete logic
Should not Push the same thing again.
2019-10-26 10:38:32 +08:00
klzgrad
7f5b005ccd Fix Travis build on MacOS 2019-10-26 10:38:32 +08:00
klzgrad
16ffc7f50a Support TCP transparent proxying
Enable with naive --listen=redir:// and iptables ... -j REDIRECT
--to-ports 1080.
2019-10-26 10:38:32 +08:00
klzgrad
cb61d8a3e4 Add continuous integration and tests 2019-10-26 10:38:32 +08:00
klzgrad
6027aa68a6 Add README 2019-10-26 10:38:32 +08:00
klzgrad
feae861fdf Add LICENSE 2019-10-26 10:38:32 +08:00
klzgrad
435f13980e Add source import tool 2019-10-26 10:38:32 +08:00
klzgrad
e1074bc218 Add .gitignore 2019-10-26 10:38:32 +08:00
klzgrad
ffb0bae149 Add example config.json 2019-10-26 10:38:32 +08:00
klzgrad
ccfd4a1d3b Support loading config.json 2019-10-26 10:38:32 +08:00
klzgrad
a30db49219 Add QUIC client 2019-10-26 10:38:32 +08:00
klzgrad
b8b58bf8e4 Add http_proxy_socket to BUILD.gn 2019-10-26 10:38:32 +08:00
klzgrad
d3e3faa9c7 Add server implementation and tunnel padding 2019-10-26 10:38:32 +08:00
klzgrad
c3ea887de8 Add version_info to BUILD.gn 2019-10-26 10:38:32 +08:00
klzgrad
0cb7454962 Add --version flag 2019-10-26 10:38:32 +08:00
klzgrad
6ed1841ad0 Add build scripts 2019-10-26 10:38:32 +08:00
klzgrad
e793f4a5c0 Add Naive client to BUILD.gn 2019-10-26 10:38:32 +08:00
klzgrad
0bf0d53b0d Add initial implementation of Naive client 2019-10-26 10:38:32 +08:00
klzgrad
100fe2701c http: Add padding for CONNECT requests 2019-10-26 10:38:32 +08:00
klzgrad
96eec4c8f9 quic: Add support for HTTP/3 CONNECT Fast Open
SpdyProxyClientSocket uses read_callback_ for both Connect() and
Read(), and its OnIOComplete() calls read_callback_, thus its fast
connect code checks read_callback_. The code was ported to
QuicProxyClientSocket without much change.

But QuicProxyClientSocket uses a separate connect_callback_ apart from
read_callback_, and its OnIOComplete() calls connect_callback_, thus
when headers are received after Connect() it doesn't need to check
read_callback_ and should always avoid calling connect_callback_.
2019-10-26 10:38:32 +08:00
klzgrad
cc86165bfd h2: Add support for HTTP/2 CONNECT Fast Open
SpdyProxyClientSocket waits for 200 OK before returning OK for Connect.

Change that behavior to returning OK immediately after CONNECT header.

This feature is enabled by default. It should probably be turned on
through an interface but that implies passing a flag through deep
interface chains right now requiring intrusive changes to multiple
places.

Design notes:

The current approach is better than the obvious TCP Fast Open style fake
Connect().

Fast Open should not be used for preconnects as preconnects need actual
connections set up. The Naive client does not use preconnects per se
(using "...RawConnect") but the user agent will use preconnects and the
Naive client has to infer that. Hence there is a need to check the
incoming socket for available bytes right before Connect() and configure
whether a socket should be connected with Fast Open. But fake Connect()
make it difficult to check the incoming socket because it immediately
returns and there is not enough time for the first read of the incoming
socket to arrive.

To check for preconnects it is best to push the first read of the
incoming socket to as late as possible. The other (wrong) way of doing
that is to pass in an early read callback and call it immediately after
sending HEADERS and then send the available bytes right there. This way
is wrong because it does not work with late binding, which assumes
Connect() is idempotent and causes sockets opened in this way to be
potentially bound to the wrong socket requests.

The current approach is to return OK in Connect() right after sending
HEADERS before getting the reply, which is to be received later. If the
reply is received during a subsequent Read() and the reply indicates an
error, the error is returned to the callback of the Read(); otherwise
the error is ignored with the connection disconnected and subsequent
Read() and Write() should discover the disconnection.
2019-10-26 10:38:32 +08:00
klzgrad
cada30363d h2: Notify delegate about read EOF
So the delegate can close the socket instead of keeping sending data.

Read EOF or h2 half-closed (remote) state was introduced in
https://codereview.chromium.org/129543002. But StreamSocket doesnt
really supports a half closed state, so upon a read EOF the only sane
action is to close the socket immediately even if in theory more send
is possible.
2019-10-26 10:38:32 +08:00
klzgrad
75e5ff2805 h2: Reduce warnings about RST on invalid streams
Per RFC 7540#6.4:

  However, after sending the RST_STREAM, the sending endpoint MUST be
  prepared to receive and process additional frames sent on the stream
  that might have been sent by the peer prior to the arrival of the
  RST_STREAM.
2019-10-26 10:38:32 +08:00