// // ======================================================================== // Copyright (c) 1995-2017 Mort Bay Consulting Pty. Ltd. // ------------------------------------------------------------------------ // All rights reserved. This program and the accompanying materials // are made available under the terms of the Eclipse Public License v1.0 // and Apache License v2.0 which accompanies this distribution. // // The Eclipse Public License is available at // http://www.eclipse.org/legal/epl-v10.html // // The Apache License v2.0 is available at // http://www.opensource.org/licenses/apache2.0.php // // You may elect to redistribute this code under either of these licenses. // ======================================================================== // package org.eclipse.jetty.client; import java.io.IOException; import java.nio.ByteBuffer; import java.nio.charset.StandardCharsets; import java.util.Map; import java.util.concurrent.Executor; import java.util.regex.Matcher; import java.util.regex.Pattern; import org.eclipse.jetty.client.api.Connection; import org.eclipse.jetty.io.AbstractConnection; import org.eclipse.jetty.io.ClientConnectionFactory; import org.eclipse.jetty.io.EndPoint; import org.eclipse.jetty.io.ssl.SslClientConnectionFactory; import org.eclipse.jetty.util.BufferUtil; import org.eclipse.jetty.util.Callback; import org.eclipse.jetty.util.Promise; import org.eclipse.jetty.util.log.Log; import org.eclipse.jetty.util.log.Logger; public class Socks4Proxy extends ProxyConfiguration.Proxy { public Socks4Proxy(String host, int port) { this(new Origin.Address(host, port), false); } public Socks4Proxy(Origin.Address address, boolean secure) { super(address, secure); } @Override public ClientConnectionFactory newClientConnectionFactory(ClientConnectionFactory connectionFactory) { return new Socks4ProxyClientConnectionFactory(connectionFactory); } public static class Socks4ProxyClientConnectionFactory implements ClientConnectionFactory { private final ClientConnectionFactory connectionFactory; public Socks4ProxyClientConnectionFactory(ClientConnectionFactory connectionFactory) { this.connectionFactory = connectionFactory; } @Override public org.eclipse.jetty.io.Connection newConnection(EndPoint endPoint, Map<String, Object> context) throws IOException { HttpDestination destination = (HttpDestination)context.get(HttpClientTransport.HTTP_DESTINATION_CONTEXT_KEY); Executor executor = destination.getHttpClient().getExecutor(); Socks4ProxyConnection connection = new Socks4ProxyConnection(endPoint, executor, connectionFactory, context); return customize(connection, context); } } private static class Socks4ProxyConnection extends AbstractConnection implements Callback { private static final Pattern IPv4_PATTERN = Pattern.compile("(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})"); private static final Logger LOG = Log.getLogger(Socks4ProxyConnection.class); private final Socks4Parser parser = new Socks4Parser(); private final ClientConnectionFactory connectionFactory; private final Map<String, Object> context; public Socks4ProxyConnection(EndPoint endPoint, Executor executor, ClientConnectionFactory connectionFactory, Map<String, Object> context) { super(endPoint, executor); this.connectionFactory = connectionFactory; this.context = context; } @Override public void onOpen() { super.onOpen(); writeSocks4Connect(); } /** * Writes the SOCKS "connect" bytes, differentiating between SOCKS 4 and 4A; * the former sends an IPv4 address, the latter the full domain name. */ private void writeSocks4Connect() { HttpDestination destination = (HttpDestination)context.get(HttpClientTransport.HTTP_DESTINATION_CONTEXT_KEY); String host = destination.getHost(); short port = (short)destination.getPort(); Matcher matcher = IPv4_PATTERN.matcher(host); if (matcher.matches()) { // SOCKS 4 ByteBuffer buffer = ByteBuffer.allocate(9); buffer.put((byte)4).put((byte)1).putShort(port); for (int i = 1; i <= 4; ++i) buffer.put((byte)Integer.parseInt(matcher.group(i))); buffer.put((byte)0); buffer.flip(); getEndPoint().write(this, buffer); } else { // SOCKS 4A byte[] hostBytes = host.getBytes(StandardCharsets.UTF_8); ByteBuffer buffer = ByteBuffer.allocate(9 + hostBytes.length + 1); buffer.put((byte)4).put((byte)1).putShort(port); buffer.put((byte)0).put((byte)0).put((byte)0).put((byte)1).put((byte)0); buffer.put(hostBytes).put((byte)0); buffer.flip(); getEndPoint().write(this, buffer); } } @Override public void succeeded() { if (LOG.isDebugEnabled()) LOG.debug("Written SOCKS4 connect request"); fillInterested(); } @Override public void failed(Throwable x) { close(); @SuppressWarnings("unchecked") Promise<Connection> promise = (Promise<Connection>)context.get(HttpClientTransport.HTTP_CONNECTION_PROMISE_CONTEXT_KEY); promise.failed(x); } @Override public void onFillable() { try { while (true) { // Avoid to read too much from the socket: ask // the parser how much left there is to read. ByteBuffer buffer = BufferUtil.allocate(parser.expected()); int filled = getEndPoint().fill(buffer); if (LOG.isDebugEnabled()) LOG.debug("Read SOCKS4 connect response, {} bytes", filled); if (filled < 0) throw new IOException("SOCKS4 tunnel failed, connection closed"); if (filled == 0) { fillInterested(); return; } if (parser.parse(buffer)) return; } } catch (Throwable x) { failed(x); } } private void onSocks4Response(int responseCode) throws IOException { if (responseCode == 0x5A) tunnel(); else throw new IOException("SOCKS4 tunnel failed with code " + responseCode); } private void tunnel() { try { HttpDestination destination = (HttpDestination)context.get(HttpClientTransport.HTTP_DESTINATION_CONTEXT_KEY); HttpClient client = destination.getHttpClient(); ClientConnectionFactory connectionFactory = this.connectionFactory; if (destination.isSecure()) connectionFactory = new SslClientConnectionFactory(client.getSslContextFactory(), client.getByteBufferPool(), client.getExecutor(), connectionFactory); org.eclipse.jetty.io.Connection newConnection = connectionFactory.newConnection(getEndPoint(), context); getEndPoint().upgrade(newConnection); if (LOG.isDebugEnabled()) LOG.debug("SOCKS4 tunnel established: {} over {}", this, newConnection); } catch (Throwable x) { failed(x); } } private class Socks4Parser { private static final int EXPECTED_LENGTH = 8; private int cursor; private int response; private boolean parse(ByteBuffer buffer) throws IOException { while (buffer.hasRemaining()) { byte current = buffer.get(); if (cursor == 1) response = current & 0xFF; ++cursor; if (cursor == EXPECTED_LENGTH) { onSocks4Response(response); return true; } } return false; } private int expected() { return EXPECTED_LENGTH - cursor; } } } }