client_test.go 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646
  1. // Copyright 2020 The frp Authors
  2. //
  3. // Licensed under the Apache License, Version 2.0 (the "License");
  4. // you may not use this file except in compliance with the License.
  5. // You may obtain a copy of the License at
  6. //
  7. // http://www.apache.org/licenses/LICENSE-2.0
  8. //
  9. // Unless required by applicable law or agreed to in writing, software
  10. // distributed under the License is distributed on an "AS IS" BASIS,
  11. // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. // See the License for the specific language governing permissions and
  13. // limitations under the License.
  14. package config
  15. import (
  16. "testing"
  17. "github.com/fatedier/frp/pkg/auth"
  18. "github.com/fatedier/frp/pkg/consts"
  19. "github.com/stretchr/testify/assert"
  20. )
  21. const (
  22. testUser = "test"
  23. )
  24. var (
  25. testClientBytesWithFull = []byte(`
  26. # [common] is integral section
  27. [common]
  28. server_addr = 0.0.0.9
  29. server_port = 7009
  30. http_proxy = http://user:passwd@192.168.1.128:8080
  31. log_file = ./frpc.log9
  32. log_way = file
  33. log_level = info9
  34. log_max_days = 39
  35. disable_log_color = false
  36. authenticate_heartbeats = false
  37. authenticate_new_work_conns = false
  38. token = 12345678
  39. oidc_client_id = client-id
  40. oidc_client_secret = client-secret
  41. oidc_audience = audience
  42. oidc_token_endpoint_url = endpoint_url
  43. admin_addr = 127.0.0.9
  44. admin_port = 7409
  45. admin_user = admin9
  46. admin_pwd = admin9
  47. assets_dir = ./static9
  48. pool_count = 59
  49. tcp_mux
  50. user = your_name
  51. login_fail_exit
  52. protocol = tcp
  53. tls_enable = true
  54. tls_cert_file = client.crt
  55. tls_key_file = client.key
  56. tls_trusted_ca_file = ca.crt
  57. tls_server_name = example.com
  58. dns_server = 8.8.8.9
  59. start = ssh,dns
  60. heartbeat_interval = 39
  61. heartbeat_timeout = 99
  62. meta_var1 = 123
  63. meta_var2 = 234
  64. udp_packet_size = 1509
  65. # all proxy
  66. [ssh]
  67. type = tcp
  68. local_ip = 127.0.0.9
  69. local_port = 29
  70. bandwidth_limit = 19MB
  71. use_encryption
  72. use_compression
  73. remote_port = 6009
  74. group = test_group
  75. group_key = 123456
  76. health_check_type = tcp
  77. health_check_timeout_s = 3
  78. health_check_max_failed = 3
  79. health_check_interval_s = 19
  80. meta_var1 = 123
  81. meta_var2 = 234
  82. [ssh_random]
  83. type = tcp
  84. local_ip = 127.0.0.9
  85. local_port = 29
  86. remote_port = 9
  87. [range:tcp_port]
  88. type = tcp
  89. local_ip = 127.0.0.9
  90. local_port = 6010-6011,6019
  91. remote_port = 6010-6011,6019
  92. use_encryption = false
  93. use_compression = false
  94. [dns]
  95. type = udp
  96. local_ip = 114.114.114.114
  97. local_port = 59
  98. remote_port = 6009
  99. use_encryption
  100. use_compression
  101. [range:udp_port]
  102. type = udp
  103. local_ip = 114.114.114.114
  104. local_port = 6000,6010-6011
  105. remote_port = 6000,6010-6011
  106. use_encryption
  107. use_compression
  108. [web01]
  109. type = http
  110. local_ip = 127.0.0.9
  111. local_port = 89
  112. use_encryption
  113. use_compression
  114. http_user = admin
  115. http_pwd = admin
  116. subdomain = web01
  117. custom_domains = web02.yourdomain.com
  118. locations = /,/pic
  119. host_header_rewrite = example.com
  120. header_X-From-Where = frp
  121. health_check_type = http
  122. health_check_url = /status
  123. health_check_interval_s = 19
  124. health_check_max_failed = 3
  125. health_check_timeout_s = 3
  126. [web02]
  127. type = https
  128. local_ip = 127.0.0.9
  129. local_port = 8009
  130. use_encryption
  131. use_compression
  132. subdomain = web01
  133. custom_domains = web02.yourdomain.com
  134. proxy_protocol_version = v2
  135. [secret_tcp]
  136. type = stcp
  137. sk = abcdefg
  138. local_ip = 127.0.0.1
  139. local_port = 22
  140. use_encryption = false
  141. use_compression = false
  142. [p2p_tcp]
  143. type = xtcp
  144. sk = abcdefg
  145. local_ip = 127.0.0.1
  146. local_port = 22
  147. use_encryption = false
  148. use_compression = false
  149. [tcpmuxhttpconnect]
  150. type = tcpmux
  151. multiplexer = httpconnect
  152. local_ip = 127.0.0.1
  153. local_port = 10701
  154. custom_domains = tunnel1
  155. [plugin_unix_domain_socket]
  156. type = tcp
  157. remote_port = 6003
  158. plugin = unix_domain_socket
  159. plugin_unix_path = /var/run/docker.sock
  160. [plugin_http_proxy]
  161. type = tcp
  162. remote_port = 6004
  163. plugin = http_proxy
  164. plugin_http_user = abc
  165. plugin_http_passwd = abc
  166. [plugin_socks5]
  167. type = tcp
  168. remote_port = 6005
  169. plugin = socks5
  170. plugin_user = abc
  171. plugin_passwd = abc
  172. [plugin_static_file]
  173. type = tcp
  174. remote_port = 6006
  175. plugin = static_file
  176. plugin_local_path = /var/www/blog
  177. plugin_strip_prefix = static
  178. plugin_http_user = abc
  179. plugin_http_passwd = abc
  180. [plugin_https2http]
  181. type = https
  182. custom_domains = test.yourdomain.com
  183. plugin = https2http
  184. plugin_local_addr = 127.0.0.1:80
  185. plugin_crt_path = ./server.crt
  186. plugin_key_path = ./server.key
  187. plugin_host_header_rewrite = 127.0.0.1
  188. plugin_header_X-From-Where = frp
  189. [plugin_http2https]
  190. type = http
  191. custom_domains = test.yourdomain.com
  192. plugin = http2https
  193. plugin_local_addr = 127.0.0.1:443
  194. plugin_host_header_rewrite = 127.0.0.1
  195. plugin_header_X-From-Where = frp
  196. # visitor
  197. [secret_tcp_visitor]
  198. role = visitor
  199. type = stcp
  200. server_name = secret_tcp
  201. sk = abcdefg
  202. bind_addr = 127.0.0.1
  203. bind_port = 9000
  204. use_encryption = false
  205. use_compression = false
  206. [p2p_tcp_visitor]
  207. role = visitor
  208. type = xtcp
  209. server_name = p2p_tcp
  210. sk = abcdefg
  211. bind_addr = 127.0.0.1
  212. bind_port = 9001
  213. use_encryption = false
  214. use_compression = false
  215. `)
  216. )
  217. func Test_LoadClientCommonConf(t *testing.T) {
  218. assert := assert.New(t)
  219. expected := ClientCommonConf{
  220. ClientConfig: auth.ClientConfig{
  221. BaseConfig: auth.BaseConfig{
  222. AuthenticationMethod: "token",
  223. AuthenticateHeartBeats: false,
  224. AuthenticateNewWorkConns: false,
  225. },
  226. TokenConfig: auth.TokenConfig{
  227. Token: "12345678",
  228. },
  229. OidcClientConfig: auth.OidcClientConfig{
  230. OidcClientID: "client-id",
  231. OidcClientSecret: "client-secret",
  232. OidcAudience: "audience",
  233. OidcTokenEndpointURL: "endpoint_url",
  234. },
  235. },
  236. ServerAddr: "0.0.0.9",
  237. ServerPort: 7009,
  238. HTTPProxy: "http://user:passwd@192.168.1.128:8080",
  239. LogFile: "./frpc.log9",
  240. LogWay: "file",
  241. LogLevel: "info9",
  242. LogMaxDays: 39,
  243. DisableLogColor: false,
  244. AdminAddr: "127.0.0.9",
  245. AdminPort: 7409,
  246. AdminUser: "admin9",
  247. AdminPwd: "admin9",
  248. AssetsDir: "./static9",
  249. PoolCount: 59,
  250. TCPMux: true,
  251. TCPMuxKeepaliveInterval: 60,
  252. User: "your_name",
  253. LoginFailExit: true,
  254. Protocol: "tcp",
  255. TLSEnable: true,
  256. TLSCertFile: "client.crt",
  257. TLSKeyFile: "client.key",
  258. TLSTrustedCaFile: "ca.crt",
  259. TLSServerName: "example.com",
  260. DNSServer: "8.8.8.9",
  261. Start: []string{"ssh", "dns"},
  262. HeartbeatInterval: 39,
  263. HeartbeatTimeout: 99,
  264. Metas: map[string]string{
  265. "var1": "123",
  266. "var2": "234",
  267. },
  268. UDPPacketSize: 1509,
  269. IncludeConfigFiles: []string{},
  270. }
  271. common, err := UnmarshalClientConfFromIni(testClientBytesWithFull)
  272. assert.NoError(err)
  273. assert.EqualValues(expected, common)
  274. }
  275. func Test_LoadClientBasicConf(t *testing.T) {
  276. assert := assert.New(t)
  277. proxyExpected := map[string]ProxyConf{
  278. testUser + ".ssh": &TCPProxyConf{
  279. BaseProxyConf: BaseProxyConf{
  280. ProxyName: testUser + ".ssh",
  281. ProxyType: consts.TCPProxy,
  282. UseCompression: true,
  283. UseEncryption: true,
  284. Group: "test_group",
  285. GroupKey: "123456",
  286. BandwidthLimit: MustBandwidthQuantity("19MB"),
  287. Metas: map[string]string{
  288. "var1": "123",
  289. "var2": "234",
  290. },
  291. LocalSvrConf: LocalSvrConf{
  292. LocalIP: "127.0.0.9",
  293. LocalPort: 29,
  294. },
  295. HealthCheckConf: HealthCheckConf{
  296. HealthCheckType: consts.TCPProxy,
  297. HealthCheckTimeoutS: 3,
  298. HealthCheckMaxFailed: 3,
  299. HealthCheckIntervalS: 19,
  300. HealthCheckAddr: "127.0.0.9:29",
  301. },
  302. },
  303. RemotePort: 6009,
  304. },
  305. testUser + ".ssh_random": &TCPProxyConf{
  306. BaseProxyConf: BaseProxyConf{
  307. ProxyName: testUser + ".ssh_random",
  308. ProxyType: consts.TCPProxy,
  309. LocalSvrConf: LocalSvrConf{
  310. LocalIP: "127.0.0.9",
  311. LocalPort: 29,
  312. },
  313. },
  314. RemotePort: 9,
  315. },
  316. testUser + ".tcp_port_0": &TCPProxyConf{
  317. BaseProxyConf: BaseProxyConf{
  318. ProxyName: testUser + ".tcp_port_0",
  319. ProxyType: consts.TCPProxy,
  320. LocalSvrConf: LocalSvrConf{
  321. LocalIP: "127.0.0.9",
  322. LocalPort: 6010,
  323. },
  324. },
  325. RemotePort: 6010,
  326. },
  327. testUser + ".tcp_port_1": &TCPProxyConf{
  328. BaseProxyConf: BaseProxyConf{
  329. ProxyName: testUser + ".tcp_port_1",
  330. ProxyType: consts.TCPProxy,
  331. LocalSvrConf: LocalSvrConf{
  332. LocalIP: "127.0.0.9",
  333. LocalPort: 6011,
  334. },
  335. },
  336. RemotePort: 6011,
  337. },
  338. testUser + ".tcp_port_2": &TCPProxyConf{
  339. BaseProxyConf: BaseProxyConf{
  340. ProxyName: testUser + ".tcp_port_2",
  341. ProxyType: consts.TCPProxy,
  342. LocalSvrConf: LocalSvrConf{
  343. LocalIP: "127.0.0.9",
  344. LocalPort: 6019,
  345. },
  346. },
  347. RemotePort: 6019,
  348. },
  349. testUser + ".dns": &UDPProxyConf{
  350. BaseProxyConf: BaseProxyConf{
  351. ProxyName: testUser + ".dns",
  352. ProxyType: consts.UDPProxy,
  353. UseEncryption: true,
  354. UseCompression: true,
  355. LocalSvrConf: LocalSvrConf{
  356. LocalIP: "114.114.114.114",
  357. LocalPort: 59,
  358. },
  359. },
  360. RemotePort: 6009,
  361. },
  362. testUser + ".udp_port_0": &UDPProxyConf{
  363. BaseProxyConf: BaseProxyConf{
  364. ProxyName: testUser + ".udp_port_0",
  365. ProxyType: consts.UDPProxy,
  366. UseEncryption: true,
  367. UseCompression: true,
  368. LocalSvrConf: LocalSvrConf{
  369. LocalIP: "114.114.114.114",
  370. LocalPort: 6000,
  371. },
  372. },
  373. RemotePort: 6000,
  374. },
  375. testUser + ".udp_port_1": &UDPProxyConf{
  376. BaseProxyConf: BaseProxyConf{
  377. ProxyName: testUser + ".udp_port_1",
  378. ProxyType: consts.UDPProxy,
  379. UseEncryption: true,
  380. UseCompression: true,
  381. LocalSvrConf: LocalSvrConf{
  382. LocalIP: "114.114.114.114",
  383. LocalPort: 6010,
  384. },
  385. },
  386. RemotePort: 6010,
  387. },
  388. testUser + ".udp_port_2": &UDPProxyConf{
  389. BaseProxyConf: BaseProxyConf{
  390. ProxyName: testUser + ".udp_port_2",
  391. ProxyType: consts.UDPProxy,
  392. UseEncryption: true,
  393. UseCompression: true,
  394. LocalSvrConf: LocalSvrConf{
  395. LocalIP: "114.114.114.114",
  396. LocalPort: 6011,
  397. },
  398. },
  399. RemotePort: 6011,
  400. },
  401. testUser + ".web01": &HTTPProxyConf{
  402. BaseProxyConf: BaseProxyConf{
  403. ProxyName: testUser + ".web01",
  404. ProxyType: consts.HTTPProxy,
  405. UseCompression: true,
  406. UseEncryption: true,
  407. LocalSvrConf: LocalSvrConf{
  408. LocalIP: "127.0.0.9",
  409. LocalPort: 89,
  410. },
  411. HealthCheckConf: HealthCheckConf{
  412. HealthCheckType: consts.HTTPProxy,
  413. HealthCheckTimeoutS: 3,
  414. HealthCheckMaxFailed: 3,
  415. HealthCheckIntervalS: 19,
  416. HealthCheckURL: "http://127.0.0.9:89/status",
  417. },
  418. },
  419. DomainConf: DomainConf{
  420. CustomDomains: []string{"web02.yourdomain.com"},
  421. SubDomain: "web01",
  422. },
  423. Locations: []string{"/", "/pic"},
  424. HTTPUser: "admin",
  425. HTTPPwd: "admin",
  426. HostHeaderRewrite: "example.com",
  427. Headers: map[string]string{
  428. "X-From-Where": "frp",
  429. },
  430. },
  431. testUser + ".web02": &HTTPSProxyConf{
  432. BaseProxyConf: BaseProxyConf{
  433. ProxyName: testUser + ".web02",
  434. ProxyType: consts.HTTPSProxy,
  435. UseCompression: true,
  436. UseEncryption: true,
  437. LocalSvrConf: LocalSvrConf{
  438. LocalIP: "127.0.0.9",
  439. LocalPort: 8009,
  440. },
  441. ProxyProtocolVersion: "v2",
  442. },
  443. DomainConf: DomainConf{
  444. CustomDomains: []string{"web02.yourdomain.com"},
  445. SubDomain: "web01",
  446. },
  447. },
  448. testUser + ".secret_tcp": &STCPProxyConf{
  449. BaseProxyConf: BaseProxyConf{
  450. ProxyName: testUser + ".secret_tcp",
  451. ProxyType: consts.STCPProxy,
  452. LocalSvrConf: LocalSvrConf{
  453. LocalIP: "127.0.0.1",
  454. LocalPort: 22,
  455. },
  456. },
  457. Role: "server",
  458. Sk: "abcdefg",
  459. },
  460. testUser + ".p2p_tcp": &XTCPProxyConf{
  461. BaseProxyConf: BaseProxyConf{
  462. ProxyName: testUser + ".p2p_tcp",
  463. ProxyType: consts.XTCPProxy,
  464. LocalSvrConf: LocalSvrConf{
  465. LocalIP: "127.0.0.1",
  466. LocalPort: 22,
  467. },
  468. },
  469. Role: "server",
  470. Sk: "abcdefg",
  471. },
  472. testUser + ".tcpmuxhttpconnect": &TCPMuxProxyConf{
  473. BaseProxyConf: BaseProxyConf{
  474. ProxyName: testUser + ".tcpmuxhttpconnect",
  475. ProxyType: consts.TCPMuxProxy,
  476. LocalSvrConf: LocalSvrConf{
  477. LocalIP: "127.0.0.1",
  478. LocalPort: 10701,
  479. },
  480. },
  481. DomainConf: DomainConf{
  482. CustomDomains: []string{"tunnel1"},
  483. SubDomain: "",
  484. },
  485. Multiplexer: "httpconnect",
  486. },
  487. testUser + ".plugin_unix_domain_socket": &TCPProxyConf{
  488. BaseProxyConf: BaseProxyConf{
  489. ProxyName: testUser + ".plugin_unix_domain_socket",
  490. ProxyType: consts.TCPProxy,
  491. LocalSvrConf: LocalSvrConf{
  492. LocalIP: "127.0.0.1",
  493. Plugin: "unix_domain_socket",
  494. PluginParams: map[string]string{
  495. "plugin_unix_path": "/var/run/docker.sock",
  496. },
  497. },
  498. },
  499. RemotePort: 6003,
  500. },
  501. testUser + ".plugin_http_proxy": &TCPProxyConf{
  502. BaseProxyConf: BaseProxyConf{
  503. ProxyName: testUser + ".plugin_http_proxy",
  504. ProxyType: consts.TCPProxy,
  505. LocalSvrConf: LocalSvrConf{
  506. LocalIP: "127.0.0.1",
  507. Plugin: "http_proxy",
  508. PluginParams: map[string]string{
  509. "plugin_http_user": "abc",
  510. "plugin_http_passwd": "abc",
  511. },
  512. },
  513. },
  514. RemotePort: 6004,
  515. },
  516. testUser + ".plugin_socks5": &TCPProxyConf{
  517. BaseProxyConf: BaseProxyConf{
  518. ProxyName: testUser + ".plugin_socks5",
  519. ProxyType: consts.TCPProxy,
  520. LocalSvrConf: LocalSvrConf{
  521. LocalIP: "127.0.0.1",
  522. Plugin: "socks5",
  523. PluginParams: map[string]string{
  524. "plugin_user": "abc",
  525. "plugin_passwd": "abc",
  526. },
  527. },
  528. },
  529. RemotePort: 6005,
  530. },
  531. testUser + ".plugin_static_file": &TCPProxyConf{
  532. BaseProxyConf: BaseProxyConf{
  533. ProxyName: testUser + ".plugin_static_file",
  534. ProxyType: consts.TCPProxy,
  535. LocalSvrConf: LocalSvrConf{
  536. LocalIP: "127.0.0.1",
  537. Plugin: "static_file",
  538. PluginParams: map[string]string{
  539. "plugin_local_path": "/var/www/blog",
  540. "plugin_strip_prefix": "static",
  541. "plugin_http_user": "abc",
  542. "plugin_http_passwd": "abc",
  543. },
  544. },
  545. },
  546. RemotePort: 6006,
  547. },
  548. testUser + ".plugin_https2http": &HTTPSProxyConf{
  549. BaseProxyConf: BaseProxyConf{
  550. ProxyName: testUser + ".plugin_https2http",
  551. ProxyType: consts.HTTPSProxy,
  552. LocalSvrConf: LocalSvrConf{
  553. LocalIP: "127.0.0.1",
  554. Plugin: "https2http",
  555. PluginParams: map[string]string{
  556. "plugin_local_addr": "127.0.0.1:80",
  557. "plugin_crt_path": "./server.crt",
  558. "plugin_key_path": "./server.key",
  559. "plugin_host_header_rewrite": "127.0.0.1",
  560. "plugin_header_X-From-Where": "frp",
  561. },
  562. },
  563. },
  564. DomainConf: DomainConf{
  565. CustomDomains: []string{"test.yourdomain.com"},
  566. },
  567. },
  568. testUser + ".plugin_http2https": &HTTPProxyConf{
  569. BaseProxyConf: BaseProxyConf{
  570. ProxyName: testUser + ".plugin_http2https",
  571. ProxyType: consts.HTTPProxy,
  572. LocalSvrConf: LocalSvrConf{
  573. LocalIP: "127.0.0.1",
  574. Plugin: "http2https",
  575. PluginParams: map[string]string{
  576. "plugin_local_addr": "127.0.0.1:443",
  577. "plugin_host_header_rewrite": "127.0.0.1",
  578. "plugin_header_X-From-Where": "frp",
  579. },
  580. },
  581. },
  582. DomainConf: DomainConf{
  583. CustomDomains: []string{"test.yourdomain.com"},
  584. },
  585. },
  586. }
  587. visitorExpected := map[string]VisitorConf{
  588. testUser + ".secret_tcp_visitor": &STCPVisitorConf{
  589. BaseVisitorConf: BaseVisitorConf{
  590. ProxyName: testUser + ".secret_tcp_visitor",
  591. ProxyType: consts.STCPProxy,
  592. Role: "visitor",
  593. Sk: "abcdefg",
  594. ServerName: testVisitorPrefix + "secret_tcp",
  595. BindAddr: "127.0.0.1",
  596. BindPort: 9000,
  597. },
  598. },
  599. testUser + ".p2p_tcp_visitor": &XTCPVisitorConf{
  600. BaseVisitorConf: BaseVisitorConf{
  601. ProxyName: testUser + ".p2p_tcp_visitor",
  602. ProxyType: consts.XTCPProxy,
  603. Role: "visitor",
  604. Sk: "abcdefg",
  605. ServerName: testProxyPrefix + "p2p_tcp",
  606. BindAddr: "127.0.0.1",
  607. BindPort: 9001,
  608. },
  609. },
  610. }
  611. proxyActual, visitorActual, err := LoadAllProxyConfsFromIni(testUser, testClientBytesWithFull, nil)
  612. assert.NoError(err)
  613. assert.Equal(proxyExpected, proxyActual)
  614. assert.Equal(visitorExpected, visitorActual)
  615. }