shadowsocksr.lua 8.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221
  1. -- Copyright (C) 2017 yushi studio <[email protected]>
  2. -- Licensed to the public under the GNU General Public License v3.
  3. module("luci.controller.shadowsocksr", package.seeall)
  4. function index()
  5. if not nixio.fs.access("/etc/config/shadowsocksr") then
  6. call("act_reset")
  7. end
  8. local page
  9. page = entry({"admin", "services", "shadowsocksr"}, alias("admin", "services", "shadowsocksr", "client"), _("ShadowSocksR Plus+"), 10)
  10. page.dependent = true
  11. page.acl_depends = { "luci-app-ssr-plus" }
  12. entry({"admin", "services", "shadowsocksr", "client"}, cbi("shadowsocksr/client"), _("SSR Client"), 10).leaf = true
  13. entry({"admin", "services", "shadowsocksr", "servers"}, arcombine(cbi("shadowsocksr/servers", {autoapply = true}), cbi("shadowsocksr/client-config")), _("Servers Nodes"), 20).leaf = true
  14. entry({"admin", "services", "shadowsocksr", "control"}, cbi("shadowsocksr/control"), _("Access Control"), 30).leaf = true
  15. entry({"admin", "services", "shadowsocksr", "advanced"}, cbi("shadowsocksr/advanced"), _("Advanced Settings"), 50).leaf = true
  16. entry({"admin", "services", "shadowsocksr", "server"}, arcombine(cbi("shadowsocksr/server"), cbi("shadowsocksr/server-config")), _("SSR Server"), 60).leaf = true
  17. entry({"admin", "services", "shadowsocksr", "status"}, form("shadowsocksr/status"), _("Status"), 70).leaf = true
  18. entry({"admin", "services", "shadowsocksr", "check"}, call("check_status"))
  19. entry({"admin", "services", "shadowsocksr", "refresh"}, call("refresh_data"))
  20. entry({"admin", "services", "shadowsocksr", "subscribe"}, call("subscribe"))
  21. entry({"admin", "services", "shadowsocksr", "checkport"}, call("check_port"))
  22. entry({"admin", "services", "shadowsocksr", "log"}, form("shadowsocksr/log"), _("Log"), 80).leaf = true
  23. entry({"admin", "services", "shadowsocksr", "get_log"}, call("get_log")).leaf = true
  24. entry({"admin", "services", "shadowsocksr", "clear_log"}, call("clear_log")).leaf = true
  25. entry({"admin", "services", "shadowsocksr", "run"}, call("act_status"))
  26. entry({"admin", "services", "shadowsocksr", "ping"}, call("act_ping"))
  27. entry({"admin", "services", "shadowsocksr", "reset"}, call("act_reset"))
  28. entry({"admin", "services", "shadowsocksr", "restart"}, call("act_restart"))
  29. entry({"admin", "services", "shadowsocksr", "delete"}, call("act_delete"))
  30. --[[Backup]]
  31. entry({"admin", "services", "shadowsocksr", "backup"}, call("create_backup")).leaf = true
  32. end
  33. function subscribe()
  34. luci.sys.call("/usr/bin/lua /usr/share/shadowsocksr/subscribe.lua >>/var/log/ssrplus.log")
  35. luci.http.prepare_content("application/json")
  36. luci.http.write_json({ret = 1})
  37. end
  38. function act_status()
  39. local e = {}
  40. e.running = luci.sys.call("busybox ps -w | grep ssr-retcp | grep -v grep >/dev/null") == 0
  41. luci.http.prepare_content("application/json")
  42. luci.http.write_json(e)
  43. end
  44. function act_ping()
  45. local e = {}
  46. local domain = luci.http.formvalue("domain")
  47. local port = tonumber(luci.http.formvalue("port") or 0)
  48. local transport = luci.http.formvalue("transport")
  49. local wsPath = luci.http.formvalue("wsPath") or ""
  50. local tls = luci.http.formvalue("tls")
  51. e.index = luci.http.formvalue("index")
  52. local use_nft = luci.sys.call("command -v nft >/dev/null") == 0
  53. local iret = false
  54. if use_nft then
  55. iret = luci.sys.call("nft add element inet ss_spec ss_spec_wan_ac { " .. domain .. " } 2>/dev/null") == 0
  56. else
  57. iret = luci.sys.call("ipset add ss_spec_wan_ac " .. domain .. " 2>/dev/null") == 0
  58. end
  59. if transport == "ws" then
  60. local prefix = tls == '1' and "https://" or "http://"
  61. local address = prefix .. domain .. ':' .. port .. wsPath
  62. local result = luci.sys.exec(
  63. "curl --http1.1 -m 2 -ksN -o /dev/null " ..
  64. "-w 'time_connect=%{time_connect}\nhttp_code=%{http_code}' " ..
  65. "-H 'Connection: Upgrade' -H 'Upgrade: websocket' " ..
  66. "-H 'Sec-WebSocket-Key: SGVsbG8sIHdvcmxkIQ==' " ..
  67. "-H 'Sec-WebSocket-Version: 13' " .. address
  68. )
  69. e.socket = string.match(result,"http_code=(%d+)") == "101"
  70. local ping_time = tonumber(string.match(result, "time_connect=(%d+.%d%d%d)"))
  71. e.ping = ping_time and ping_time * 1000 or nil
  72. else
  73. -- TCP ping
  74. local socket = nixio.socket("inet", "stream")
  75. socket:setopt("socket", "rcvtimeo", 3)
  76. socket:setopt("socket", "sndtimeo", 3)
  77. e.socket = socket:connect(domain, port)
  78. socket:close()
  79. e.ping = tonumber(luci.sys.exec(string.format(
  80. "tcping -q -c 1 -i 1 -t 2 -p %d %s 2>/dev/null | grep -o 'time=[0-9]*' | awk -F '=' '{print $2}'",
  81. port, domain
  82. )))
  83. if not e.ping then
  84. e.ping = tonumber(luci.sys.exec(string.format(
  85. "ping -c 1 -W 1 %s 2>/dev/null | grep -o 'time=[0-9]*' | awk -F '=' '{print $2}'",
  86. domain
  87. )))
  88. end
  89. if not e.ping then
  90. e.ping = tonumber(luci.sys.exec(string.format(
  91. "nping --udp -c 1 -p %d %s 2>/dev/null | grep -o 'Avg rtt: [0-9.]*ms' | awk '{print $3}' | sed 's/ms//' | head -1",
  92. port, domain
  93. )))
  94. end
  95. end
  96. if iret then
  97. if use_nft then
  98. luci.sys.call("nft delete element inet ss_spec ss_spec_wan_ac { " .. domain .. " } 2>/dev/null")
  99. else
  100. luci.sys.call("ipset del ss_spec_wan_ac " .. domain .. " 2>/dev/null")
  101. end
  102. end
  103. luci.http.prepare_content("application/json")
  104. luci.http.write_json(e)
  105. end
  106. function check_status()
  107. local e = {}
  108. e.ret = luci.sys.call("/usr/bin/ssr-check www." .. luci.http.formvalue("set") .. ".com 80 3 1")
  109. luci.http.prepare_content("application/json")
  110. luci.http.write_json(e)
  111. end
  112. function refresh_data()
  113. local set = luci.http.formvalue("set")
  114. local retstring = loadstring("return " .. luci.sys.exec("/usr/bin/lua /usr/share/shadowsocksr/update.lua " .. set))()
  115. luci.http.prepare_content("application/json")
  116. luci.http.write_json(retstring)
  117. end
  118. function check_port()
  119. local retstring = "<br /><br />"
  120. local s
  121. local server_name = ""
  122. local uci = require "luci.model.uci".cursor()
  123. local use_nft = luci.sys.call("command -v nft >/dev/null") == 0
  124. uci:foreach("shadowsocksr", "servers", function(s)
  125. if s.alias then
  126. server_name = s.alias
  127. elseif s.server and s.server_port then
  128. server_name = s.server .. ":" .. s.server_port
  129. end
  130. -- 临时加入 set
  131. local iret = false
  132. if use_nft then
  133. iret = luci.sys.call("nft add element inet ss_spec ss_spec_wan_ac { " .. s.server .. " } 2>/dev/null") == 0
  134. else
  135. iret = luci.sys.call("ipset add ss_spec_wan_ac " .. s.server .. " 2>/dev/null") == 0
  136. end
  137. -- TCP 测试
  138. local socket = nixio.socket("inet", "stream")
  139. socket:setopt("socket", "rcvtimeo", 3)
  140. socket:setopt("socket", "sndtimeo", 3)
  141. local ret = socket:connect(s.server, s.server_port)
  142. socket:close()
  143. if ret then
  144. retstring = retstring .. string.format("<font><b style='color:green'>[%s] OK.</b></font><br />", server_name)
  145. else
  146. retstring = retstring .. string.format("<font><b style='color:red'>[%s] Error.</b></font><br />", server_name)
  147. end
  148. -- 删除临时 set
  149. if iret then
  150. if use_nft then
  151. luci.sys.call("nft delete element inet ss_spec ss_spec_wan_ac { " .. s.server .. " } 2>/dev/null")
  152. else
  153. luci.sys.call("ipset del ss_spec_wan_ac " .. s.server)
  154. end
  155. end
  156. end)
  157. luci.http.prepare_content("application/json")
  158. luci.http.write_json({ret = retstring})
  159. end
  160. function act_reset()
  161. luci.sys.call("/etc/init.d/shadowsocksr reset >/dev/null 2>&1")
  162. luci.http.redirect(luci.dispatcher.build_url("admin", "services", "shadowsocksr"))
  163. end
  164. function act_restart()
  165. luci.sys.call("/etc/init.d/shadowsocksr restart &")
  166. luci.http.redirect(luci.dispatcher.build_url("admin", "services", "shadowsocksr"))
  167. end
  168. function act_delete()
  169. luci.sys.call("/etc/init.d/shadowsocksr restart &")
  170. luci.http.redirect(luci.dispatcher.build_url("admin", "services", "shadowsocksr", "servers"))
  171. end
  172. function get_log()
  173. luci.http.write(luci.sys.exec("[ -f '/var/log/ssrplus.log' ] && cat /var/log/ssrplus.log"))
  174. end
  175. function clear_log()
  176. luci.sys.call("echo '' > /var/log/ssrplus.log")
  177. end
  178. function create_backup()
  179. local backup_files = {
  180. "/etc/config/shadowsocksr",
  181. "/etc/ssrplus/*"
  182. }
  183. local date = os.date("%Y-%m-%d-%H-%M-%S")
  184. local tar_file = "/tmp/shadowsocksr-" .. date .. "-backup.tar.gz"
  185. nixio.fs.remove(tar_file)
  186. local cmd = "tar -czf " .. tar_file .. " " .. table.concat(backup_files, " ")
  187. luci.sys.call(cmd)
  188. luci.http.header("Content-Disposition", "attachment; filename=shadowsocksr-" .. date .. "-backup.tar.gz")
  189. luci.http.header("X-Backup-Filename", "shadowsocksr-" .. date .. "-backup.tar.gz")
  190. luci.http.prepare_content("application/octet-stream")
  191. luci.http.write(nixio.fs.readfile(tar_file))
  192. nixio.fs.remove(tar_file)
  193. end