If you see this page, the nginx web server is successfully installed and working. Further configuration is required.
For online documentation and support please refer to
nginx.org.
Commercial support is available at
nginx.com.
Thank you for using nginx.
`) // StartServer starts the ws server func StartServer(iface *water.Interface, config config.Config) { // server -> client go toClient(config, iface) // client -> server http.HandleFunc(config.WebSocketPath, func(w http.ResponseWriter, r *http.Request) { if !checkPermission(w, r, config) { return } wsconn, _, _, err := ws.UpgradeHTTP(r, w) if err != nil { log.Printf("[server] failed to upgrade http %v", err) return } toServer(config, wsconn, iface) }) http.HandleFunc("/", func(w http.ResponseWriter, req *http.Request) { w.WriteHeader(200) w.Header().Set("Server", "nginx/1.18.0 (Ubuntu)") w.Header().Set("Content-Type", "text/html") w.Header().Set("Content-Length", strconv.Itoa(len(_defaultPage))) w.Header().Set("Connection", " keep-alive") w.Header().Set("Accept-Ranges", "bytes") w.Write(_defaultPage) }) http.HandleFunc("/ip", func(w http.ResponseWriter, req *http.Request) { ip := req.Header.Get("X-Forwarded-For") if ip == "" { ip = strings.Split(req.RemoteAddr, ":")[0] } resp := fmt.Sprintf("%v", ip) io.WriteString(w, resp) }) http.HandleFunc("/register/pick/ip", func(w http.ResponseWriter, r *http.Request) { if !checkPermission(w, r, config) { return } ip, pl := register.PickClientIP(config.CIDR) resp := fmt.Sprintf("%v/%v", ip, pl) io.WriteString(w, resp) }) http.HandleFunc("/register/delete/ip", func(w http.ResponseWriter, r *http.Request) { if !checkPermission(w, r, config) { return } ip := r.URL.Query().Get("ip") if ip != "" { register.DeleteClientIP(ip) } io.WriteString(w, "OK") }) http.HandleFunc("/register/keepalive/ip", func(w http.ResponseWriter, r *http.Request) { if !checkPermission(w, r, config) { return } ip := r.URL.Query().Get("ip") if ip != "" { register.KeepAliveClientIP(ip) } io.WriteString(w, "OK") }) http.HandleFunc("/register/list/ip", func(w http.ResponseWriter, r *http.Request) { if !checkPermission(w, r, config) { return } io.WriteString(w, strings.Join(register.ListClientIPs(), "\r\n")) }) http.HandleFunc("/register/prefix/ipv4", func(w http.ResponseWriter, r *http.Request) { if !checkPermission(w, r, config) { return } _, ipv4Net, err := net.ParseCIDR(config.CIDR) var resp string if err != nil { resp = "error" } else { resp = ipv4Net.String() } io.WriteString(w, resp) }) http.HandleFunc("/register/prefix/ipv6", func(w http.ResponseWriter, r *http.Request) { if !checkPermission(w, r, config) { return } _, ipv6Net, err := net.ParseCIDR(config.CIDRv6) var resp string if err != nil { resp = "error" } else { resp = ipv6Net.String() } io.WriteString(w, resp) }) http.HandleFunc("/stats", func(w http.ResponseWriter, req *http.Request) { io.WriteString(w, counter.PrintBytes()) }) log.Printf("vtun websocket server started on %v", config.LocalAddr) if config.Protocol == "wss" && config.TLSCertificateFilePath != "" && config.TLSCertificateKeyFilePath != "" { http.ListenAndServeTLS(config.LocalAddr, config.TLSCertificateFilePath, config.TLSCertificateKeyFilePath, nil) } else { http.ListenAndServe(config.LocalAddr, nil) } } // checkPermission checks the permission of the request func checkPermission(w http.ResponseWriter, req *http.Request, config config.Config) bool { key := req.Header.Get("key") if key != config.Key { w.WriteHeader(http.StatusForbidden) w.Write([]byte("No permission")) return false } return true } // toClient sends data to client func toClient(config config.Config, iface *water.Interface) { packet := make([]byte, config.BufferSize) for { n, err := iface.Read(packet) if err != nil { netutil.PrintErr(err, config.Verbose) break } b := packet[:n] if key := netutil.GetDstKey(b); key != "" { if v, ok := cache.GetCache().Get(key); ok { if config.Obfs { b = cipher.XOR(b) } if config.Compress { b = snappy.Encode(nil, b) } counter.IncrWrittenBytes(n) wsutil.WriteServerBinary(v.(net.Conn), b) } } } } // toServer sends data to server func toServer(config config.Config, wsconn net.Conn, iface *water.Interface) { defer wsconn.Close() for { wsconn.SetReadDeadline(time.Now().Add(time.Duration(config.Timeout) * time.Second)) b, op, err := wsutil.ReadClientData(wsconn) if err != nil { netutil.PrintErr(err, config.Verbose) break } if op == ws.OpText { if config.Verbose { log.Println(string(b[:])) } wsutil.WriteServerMessage(wsconn, op, b) } else if op == ws.OpBinary { if config.Compress { b, _ = snappy.Decode(nil, b) } if config.Obfs { b = cipher.XOR(b) } if key := netutil.GetSrcKey(b); key != "" { cache.GetCache().Set(key, wsconn, 10*time.Minute) counter.IncrReadBytes(len(b)) iface.Write(b) } } } }