mirror of
https://github.com/p1neappleXpress/OpenFlux.git
synced 2026-10-02 05:04:39 +08:00
Oleg NovikovandClaude Opus 5.5
96a0f95205
Renames the Go module path from openflux to github.com/p1neappleXpress/OpenFlux and updates every internal import (root module and mobile/), so the packages can be fetched and imported by other Go projects. Regenerated on main after #132, #122 and #125 (the same mechanical rename, imports sorted by gofmt). Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
52 lines
1.3 KiB
Go
52 lines
1.3 KiB
Go
package main
|
|
|
|
import (
|
|
"net"
|
|
"sync"
|
|
|
|
"github.com/p1neappleXpress/OpenFlux/transport"
|
|
"github.com/p1neappleXpress/OpenFlux/tunnel"
|
|
"github.com/p1neappleXpress/OpenFlux/utils"
|
|
)
|
|
|
|
// Local TCP ports reserved for the remote-auth side stack. They sit below
|
|
// gVisor's ephemeral range (16000+) and the usual OS ephemeral ranges, so
|
|
// they never collide with the main client path sharing the tunnel address.
|
|
const (
|
|
authProxyPortLo = 12000
|
|
authProxyPortHi = 12999
|
|
)
|
|
|
|
// remoteAuthProxy lazily starts the HTTP proxy the app uses to pass a check
|
|
// the exit reported (AuthRequired) from the exit's own address: a side TCP
|
|
// stack on the tunnel plus an HTTP proxy on loopback in front of it.
|
|
type remoteAuthProxy struct {
|
|
demux *transport.PortDemux
|
|
|
|
once sync.Once
|
|
addr string
|
|
err error
|
|
}
|
|
|
|
func (p *remoteAuthProxy) Addr() (string, error) {
|
|
p.once.Do(func() {
|
|
side, err := tunnel.NewSideTunnel(p.demux.Side(), authProxyPortLo, authProxyPortHi)
|
|
if err != nil {
|
|
p.err = err
|
|
return
|
|
}
|
|
ln, err := net.Listen("tcp", "127.0.0.1:0")
|
|
if err != nil {
|
|
side.Close()
|
|
p.err = err
|
|
return
|
|
}
|
|
p.addr = ln.Addr().String()
|
|
utils.SafeGo("remote-auth-proxy", func() {
|
|
_ = tunnel.ServeHTTPProxy(ln, side.DialTCP)
|
|
})
|
|
utils.Debugf("[AUTH] remote auth proxy on %s", p.addr)
|
|
})
|
|
return p.addr, p.err
|
|
}
|