client.go 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405
  1. // Copyright 2020 The frp Authors
  2. //
  3. // Licensed under the Apache License, Version 2.0 (the "License");
  4. // you may not use this file except in compliance with the License.
  5. // You may obtain a copy of the License at
  6. //
  7. // http://www.apache.org/licenses/LICENSE-2.0
  8. //
  9. // Unless required by applicable law or agreed to in writing, software
  10. // distributed under the License is distributed on an "AS IS" BASIS,
  11. // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. // See the License for the specific language governing permissions and
  13. // limitations under the License.
  14. package config
  15. import (
  16. "fmt"
  17. "os"
  18. "path/filepath"
  19. "strings"
  20. "github.com/fatedier/frp/pkg/auth"
  21. "github.com/fatedier/frp/pkg/util/util"
  22. "gopkg.in/ini.v1"
  23. )
  24. // ClientCommonConf contains information for a client service. It is
  25. // recommended to use GetDefaultClientConf instead of creating this object
  26. // directly, so that all unspecified fields have reasonable default values.
  27. type ClientCommonConf struct {
  28. auth.ClientConfig `ini:",extends"`
  29. // ServerAddr specifies the address of the server to connect to. By
  30. // default, this value is "0.0.0.0".
  31. ServerAddr string `ini:"server_addr" json:"server_addr"`
  32. // ServerPort specifies the port to connect to the server on. By default,
  33. // this value is 7000.
  34. ServerPort int `ini:"server_port" json:"server_port"`
  35. // ConnectServerLocalIP specifies the address of the client bind when it connect to server.
  36. // By default, this value is empty.
  37. // this value only use in TCP/Websocket protocol. Not support in KCP protocol.
  38. ConnectServerLocalIP string `ini:"connect_server_local_ip" json:"connect_server_local_ip"`
  39. // HTTPProxy specifies a proxy address to connect to the server through. If
  40. // this value is "", the server will be connected to directly. By default,
  41. // this value is read from the "http_proxy" environment variable.
  42. HTTPProxy string `ini:"http_proxy" json:"http_proxy"`
  43. // LogFile specifies a file where logs will be written to. This value will
  44. // only be used if LogWay is set appropriately. By default, this value is
  45. // "console".
  46. LogFile string `ini:"log_file" json:"log_file"`
  47. // LogWay specifies the way logging is managed. Valid values are "console"
  48. // or "file". If "console" is used, logs will be printed to stdout. If
  49. // "file" is used, logs will be printed to LogFile. By default, this value
  50. // is "console".
  51. LogWay string `ini:"log_way" json:"log_way"`
  52. // LogLevel specifies the minimum log level. Valid values are "trace",
  53. // "debug", "info", "warn", and "error". By default, this value is "info".
  54. LogLevel string `ini:"log_level" json:"log_level"`
  55. // LogMaxDays specifies the maximum number of days to store log information
  56. // before deletion. This is only used if LogWay == "file". By default, this
  57. // value is 0.
  58. LogMaxDays int64 `ini:"log_max_days" json:"log_max_days"`
  59. // DisableLogColor disables log colors when LogWay == "console" when set to
  60. // true. By default, this value is false.
  61. DisableLogColor bool `ini:"disable_log_color" json:"disable_log_color"`
  62. // AdminAddr specifies the address that the admin server binds to. By
  63. // default, this value is "127.0.0.1".
  64. AdminAddr string `ini:"admin_addr" json:"admin_addr"`
  65. // AdminPort specifies the port for the admin server to listen on. If this
  66. // value is 0, the admin server will not be started. By default, this value
  67. // is 0.
  68. AdminPort int `ini:"admin_port" json:"admin_port"`
  69. // AdminUser specifies the username that the admin server will use for
  70. // login.
  71. AdminUser string `ini:"admin_user" json:"admin_user"`
  72. // AdminPwd specifies the password that the admin server will use for
  73. // login.
  74. AdminPwd string `ini:"admin_pwd" json:"admin_pwd"`
  75. // AssetsDir specifies the local directory that the admin server will load
  76. // resources from. If this value is "", assets will be loaded from the
  77. // bundled executable using statik. By default, this value is "".
  78. AssetsDir string `ini:"assets_dir" json:"assets_dir"`
  79. // PoolCount specifies the number of connections the client will make to
  80. // the server in advance. By default, this value is 0.
  81. PoolCount int `ini:"pool_count" json:"pool_count"`
  82. // TCPMux toggles TCP stream multiplexing. This allows multiple requests
  83. // from a client to share a single TCP connection. If this value is true,
  84. // the server must have TCP multiplexing enabled as well. By default, this
  85. // value is true.
  86. TCPMux bool `ini:"tcp_mux" json:"tcp_mux"`
  87. // TCPMuxKeepaliveInterval specifies the keep alive interval for TCP stream multipler.
  88. // If TCPMux is true, heartbeat of application layer is unnecessary because it can only rely on heartbeat in TCPMux.
  89. TCPMuxKeepaliveInterval int64 `ini:"tcp_mux_keepalive_interval" json:"tcp_mux_keepalive_interval"`
  90. // User specifies a prefix for proxy names to distinguish them from other
  91. // clients. If this value is not "", proxy names will automatically be
  92. // changed to "{user}.{proxy_name}". By default, this value is "".
  93. User string `ini:"user" json:"user"`
  94. // DNSServer specifies a DNS server address for FRPC to use. If this value
  95. // is "", the default DNS will be used. By default, this value is "".
  96. DNSServer string `ini:"dns_server" json:"dns_server"`
  97. // LoginFailExit controls whether or not the client should exit after a
  98. // failed login attempt. If false, the client will retry until a login
  99. // attempt succeeds. By default, this value is true.
  100. LoginFailExit bool `ini:"login_fail_exit" json:"login_fail_exit"`
  101. // Start specifies a set of enabled proxies by name. If this set is empty,
  102. // all supplied proxies are enabled. By default, this value is an empty
  103. // set.
  104. Start []string `ini:"start" json:"start"`
  105. //Start map[string]struct{} `json:"start"`
  106. // Protocol specifies the protocol to use when interacting with the server.
  107. // Valid values are "tcp", "kcp" and "websocket". By default, this value
  108. // is "tcp".
  109. Protocol string `ini:"protocol" json:"protocol"`
  110. // TLSEnable specifies whether or not TLS should be used when communicating
  111. // with the server. If "tls_cert_file" and "tls_key_file" are valid,
  112. // client will load the supplied tls configuration.
  113. TLSEnable bool `ini:"tls_enable" json:"tls_enable"`
  114. // TLSCertPath specifies the path of the cert file that client will
  115. // load. It only works when "tls_enable" is true and "tls_key_file" is valid.
  116. TLSCertFile string `ini:"tls_cert_file" json:"tls_cert_file"`
  117. // TLSKeyPath specifies the path of the secret key file that client
  118. // will load. It only works when "tls_enable" is true and "tls_cert_file"
  119. // are valid.
  120. TLSKeyFile string `ini:"tls_key_file" json:"tls_key_file"`
  121. // TLSTrustedCaFile specifies the path of the trusted ca file that will load.
  122. // It only works when "tls_enable" is valid and tls configuration of server
  123. // has been specified.
  124. TLSTrustedCaFile string `ini:"tls_trusted_ca_file" json:"tls_trusted_ca_file"`
  125. // TLSServerName specifices the custom server name of tls certificate. By
  126. // default, server name if same to ServerAddr.
  127. TLSServerName string `ini:"tls_server_name" json:"tls_server_name"`
  128. // By default, frpc will connect frps with first custom byte if tls is enabled.
  129. // If DisableCustomTLSFirstByte is true, frpc will not send that custom byte.
  130. DisableCustomTLSFirstByte bool `ini:"disable_custom_tls_first_byte" json:"disable_custom_tls_first_byte"`
  131. // HeartBeatInterval specifies at what interval heartbeats are sent to the
  132. // server, in seconds. It is not recommended to change this value. By
  133. // default, this value is 30. Set negative value to disable it.
  134. HeartbeatInterval int64 `ini:"heartbeat_interval" json:"heartbeat_interval"`
  135. // HeartBeatTimeout specifies the maximum allowed heartbeat response delay
  136. // before the connection is terminated, in seconds. It is not recommended
  137. // to change this value. By default, this value is 90. Set negative value to disable it.
  138. HeartbeatTimeout int64 `ini:"heartbeat_timeout" json:"heartbeat_timeout"`
  139. // Client meta info
  140. Metas map[string]string `ini:"-" json:"metas"`
  141. // UDPPacketSize specifies the udp packet size
  142. // By default, this value is 1500
  143. UDPPacketSize int64 `ini:"udp_packet_size" json:"udp_packet_size"`
  144. // Include other config files for proxies.
  145. IncludeConfigFiles []string `ini:"includes" json:"includes"`
  146. }
  147. // GetDefaultClientConf returns a client configuration with default values.
  148. func GetDefaultClientConf() ClientCommonConf {
  149. return ClientCommonConf{
  150. ClientConfig: auth.GetDefaultClientConf(),
  151. ServerAddr: "0.0.0.0",
  152. ServerPort: 7000,
  153. HTTPProxy: os.Getenv("http_proxy"),
  154. LogFile: "console",
  155. LogWay: "console",
  156. LogLevel: "info",
  157. LogMaxDays: 3,
  158. DisableLogColor: false,
  159. AdminAddr: "127.0.0.1",
  160. AdminPort: 0,
  161. AdminUser: "",
  162. AdminPwd: "",
  163. AssetsDir: "",
  164. PoolCount: 1,
  165. TCPMux: true,
  166. TCPMuxKeepaliveInterval: 60,
  167. User: "",
  168. DNSServer: "",
  169. LoginFailExit: true,
  170. Start: make([]string, 0),
  171. Protocol: "tcp",
  172. TLSEnable: false,
  173. TLSCertFile: "",
  174. TLSKeyFile: "",
  175. TLSTrustedCaFile: "",
  176. HeartbeatInterval: 30,
  177. HeartbeatTimeout: 90,
  178. Metas: make(map[string]string),
  179. UDPPacketSize: 1500,
  180. IncludeConfigFiles: make([]string, 0),
  181. }
  182. }
  183. func (cfg *ClientCommonConf) Complete() {
  184. if cfg.LogFile == "console" {
  185. cfg.LogWay = "console"
  186. } else {
  187. cfg.LogWay = "file"
  188. }
  189. }
  190. func (cfg *ClientCommonConf) Validate() error {
  191. if cfg.HeartbeatTimeout > 0 && cfg.HeartbeatInterval > 0 {
  192. if cfg.HeartbeatTimeout < cfg.HeartbeatInterval {
  193. return fmt.Errorf("invalid heartbeat_timeout, heartbeat_timeout is less than heartbeat_interval")
  194. }
  195. }
  196. if cfg.TLSEnable == false {
  197. if cfg.TLSCertFile != "" {
  198. fmt.Println("WARNING! tls_cert_file is invalid when tls_enable is false")
  199. }
  200. if cfg.TLSKeyFile != "" {
  201. fmt.Println("WARNING! tls_key_file is invalid when tls_enable is false")
  202. }
  203. if cfg.TLSTrustedCaFile != "" {
  204. fmt.Println("WARNING! tls_trusted_ca_file is invalid when tls_enable is false")
  205. }
  206. }
  207. if cfg.Protocol != "tcp" && cfg.Protocol != "kcp" && cfg.Protocol != "websocket" {
  208. return fmt.Errorf("invalid protocol")
  209. }
  210. for _, f := range cfg.IncludeConfigFiles {
  211. absDir, err := filepath.Abs(filepath.Dir(f))
  212. if err != nil {
  213. return fmt.Errorf("include: parse directory of %s failed: %v", f, absDir)
  214. }
  215. if _, err := os.Stat(absDir); os.IsNotExist(err) {
  216. return fmt.Errorf("include: directory of %s not exist", f)
  217. }
  218. }
  219. return nil
  220. }
  221. // Supported sources including: string(file path), []byte, Reader interface.
  222. func UnmarshalClientConfFromIni(source interface{}) (ClientCommonConf, error) {
  223. f, err := ini.LoadSources(ini.LoadOptions{
  224. Insensitive: false,
  225. InsensitiveSections: false,
  226. InsensitiveKeys: false,
  227. IgnoreInlineComment: true,
  228. AllowBooleanKeys: true,
  229. }, source)
  230. if err != nil {
  231. return ClientCommonConf{}, err
  232. }
  233. s, err := f.GetSection("common")
  234. if err != nil {
  235. return ClientCommonConf{}, fmt.Errorf("invalid configuration file, not found [common] section")
  236. }
  237. common := GetDefaultClientConf()
  238. err = s.MapTo(&common)
  239. if err != nil {
  240. return ClientCommonConf{}, err
  241. }
  242. common.Metas = GetMapWithoutPrefix(s.KeysHash(), "meta_")
  243. return common, nil
  244. }
  245. // if len(startProxy) is 0, start all
  246. // otherwise just start proxies in startProxy map
  247. func LoadAllProxyConfsFromIni(
  248. prefix string,
  249. source interface{},
  250. start []string,
  251. ) (map[string]ProxyConf, map[string]VisitorConf, error) {
  252. f, err := ini.LoadSources(ini.LoadOptions{
  253. Insensitive: false,
  254. InsensitiveSections: false,
  255. InsensitiveKeys: false,
  256. IgnoreInlineComment: true,
  257. AllowBooleanKeys: true,
  258. }, source)
  259. if err != nil {
  260. return nil, nil, err
  261. }
  262. proxyConfs := make(map[string]ProxyConf)
  263. visitorConfs := make(map[string]VisitorConf)
  264. if prefix != "" {
  265. prefix += "."
  266. }
  267. startProxy := make(map[string]struct{})
  268. for _, s := range start {
  269. startProxy[s] = struct{}{}
  270. }
  271. startAll := true
  272. if len(startProxy) > 0 {
  273. startAll = false
  274. }
  275. // Build template sections from range section And append to ini.File.
  276. rangeSections := make([]*ini.Section, 0)
  277. for _, section := range f.Sections() {
  278. if !strings.HasPrefix(section.Name(), "range:") {
  279. continue
  280. }
  281. rangeSections = append(rangeSections, section)
  282. }
  283. for _, section := range rangeSections {
  284. err = renderRangeProxyTemplates(f, section)
  285. if err != nil {
  286. return nil, nil, fmt.Errorf("failed to render template for proxy %s: %v", section.Name(), err)
  287. }
  288. }
  289. for _, section := range f.Sections() {
  290. name := section.Name()
  291. if name == ini.DefaultSection || name == "common" || strings.HasPrefix(name, "range:") {
  292. continue
  293. }
  294. _, shouldStart := startProxy[name]
  295. if !startAll && !shouldStart {
  296. continue
  297. }
  298. roleType := section.Key("role").String()
  299. if roleType == "" {
  300. roleType = "server"
  301. }
  302. switch roleType {
  303. case "server":
  304. newConf, newErr := NewProxyConfFromIni(prefix, name, section)
  305. if newErr != nil {
  306. return nil, nil, fmt.Errorf("failed to parse proxy %s, err: %v", name, newErr)
  307. }
  308. proxyConfs[prefix+name] = newConf
  309. case "visitor":
  310. newConf, newErr := NewVisitorConfFromIni(prefix, name, section)
  311. if newErr != nil {
  312. return nil, nil, newErr
  313. }
  314. visitorConfs[prefix+name] = newConf
  315. default:
  316. return nil, nil, fmt.Errorf("proxy %s role should be 'server' or 'visitor'", name)
  317. }
  318. }
  319. return proxyConfs, visitorConfs, nil
  320. }
  321. func renderRangeProxyTemplates(f *ini.File, section *ini.Section) error {
  322. // Validation
  323. localPortStr := section.Key("local_port").String()
  324. remotePortStr := section.Key("remote_port").String()
  325. if localPortStr == "" || remotePortStr == "" {
  326. return fmt.Errorf("local_port or remote_port is empty")
  327. }
  328. localPorts, err := util.ParseRangeNumbers(localPortStr)
  329. if err != nil {
  330. return err
  331. }
  332. remotePorts, err := util.ParseRangeNumbers(remotePortStr)
  333. if err != nil {
  334. return err
  335. }
  336. if len(localPorts) != len(remotePorts) {
  337. return fmt.Errorf("local ports number should be same with remote ports number")
  338. }
  339. if len(localPorts) == 0 {
  340. return fmt.Errorf("local_port and remote_port is necessary")
  341. }
  342. // Templates
  343. prefix := strings.TrimSpace(strings.TrimPrefix(section.Name(), "range:"))
  344. for i := range localPorts {
  345. tmpname := fmt.Sprintf("%s_%d", prefix, i)
  346. tmpsection, err := f.NewSection(tmpname)
  347. if err != nil {
  348. return err
  349. }
  350. copySection(section, tmpsection)
  351. tmpsection.NewKey("local_port", fmt.Sprintf("%d", localPorts[i]))
  352. tmpsection.NewKey("remote_port", fmt.Sprintf("%d", remotePorts[i]))
  353. }
  354. return nil
  355. }
  356. func copySection(source, target *ini.Section) {
  357. for key, value := range source.KeysHash() {
  358. target.NewKey(key, value)
  359. }
  360. }