Rewrite proxy manager

proxy/manager.go

@@ -4,328 +4,332 @@ import (
 	"fmt"
 	"io"
 	"net"
-	"strings"
 	"sync"
 	"time"
 
 	"github.com/fosrl/newt/logger"
-	"gvisor.dev/gvisor/pkg/tcpip/adapters/gonet"
-
 	"golang.zx2c4.com/wireguard/tun/netstack"
+	"gvisor.dev/gvisor/pkg/tcpip/adapters/gonet"
 )
 
+// Target represents a proxy target with its address and port
+type Target struct {
+	Address string
+	Port    int
+}
+
+// ProxyManager handles the creation and management of proxy connections
+type ProxyManager struct {
+	tnet       *netstack.Net
+	tcpTargets map[string]map[int]string // map[listenIP]map[port]targetAddress
+	udpTargets map[string]map[int]string
+	listeners  []*gonet.TCPListener
+	udpConns   []*gonet.UDPConn
+	running    bool
+	mutex      sync.RWMutex
+}
+
+// NewProxyManager creates a new proxy manager instance
 func NewProxyManager(tnet *netstack.Net) *ProxyManager {
 	return &ProxyManager{
-		tnet: tnet,
+		tnet:       tnet,
+		tcpTargets: make(map[string]map[int]string),
+		udpTargets: make(map[string]map[int]string),
+		listeners:  make([]*gonet.TCPListener, 0),
+		udpConns:   make([]*gonet.UDPConn, 0),
 	}
 }
 
-func (pm *ProxyManager) AddTarget(protocol, listen string, port int, target string) error {
+// AddTarget adds a new target for proxying
-	pm.Lock()
+func (pm *ProxyManager) AddTarget(proto, listenIP string, port int, targetAddr string) error {
-	defer pm.Unlock()
+	pm.mutex.Lock()
+	defer pm.mutex.Unlock()
 
-	logger.Info("Adding target: %s://%s:%d -> %s", protocol, listen, port, target)
+	switch proto {
-	newTarget := &ProxyTarget{
+	case "tcp":
-		Protocol: protocol,
+		if pm.tcpTargets[listenIP] == nil {
-		Listen:   listen,
+			pm.tcpTargets[listenIP] = make(map[int]string)
-		Port:     port,
+		}
-		Target:   target,
+		pm.tcpTargets[listenIP][port] = targetAddr
-		cancel:   make(chan struct{}),
+	case "udp":
-		done:     make(chan struct{}),
+		if pm.udpTargets[listenIP] == nil {
+			pm.udpTargets[listenIP] = make(map[int]string)
+		}
+		pm.udpTargets[listenIP][port] = targetAddr
+	default:
+		return fmt.Errorf("unsupported protocol: %s", proto)
 	}
 
-	pm.targets = append(pm.targets, newTarget)
+	if pm.running {
+		return pm.startTarget(proto, listenIP, port, targetAddr)
+	} else {
+		logger.Info("Not adding target because not running")
+	}
 	return nil
 }
 
-func (pm *ProxyManager) RemoveTarget(protocol, listen string, port int) error {
+func (pm *ProxyManager) RemoveTarget(proto, listenIP string, port int) error {
-	pm.Lock()
+	pm.mutex.Lock()
-	defer pm.Unlock()
+	defer pm.mutex.Unlock()
 
-	protocol = strings.ToLower(protocol)
+	switch proto {
-	if protocol != "tcp" && protocol != "udp" {
+	case "tcp":
-		return fmt.Errorf("unsupported protocol: %s", protocol)
+		if targets, ok := pm.tcpTargets[listenIP]; ok {
-	}
+			delete(targets, port)
-
+			// Remove and close the corresponding TCP listener
-	for i, target := range pm.targets {
+			for i, listener := range pm.listeners {
-		if target.Listen == listen &&
+				if addr, ok := listener.Addr().(*net.TCPAddr); ok && addr.Port == port {
-			target.Port == port &&
+					listener.Close()
-			strings.ToLower(target.Protocol) == protocol {
+					time.Sleep(50 * time.Millisecond)
-
+					// Remove from slice
-			// Signal the serving goroutine to stop
+					pm.listeners = append(pm.listeners[:i], pm.listeners[i+1:]...)
-			select {
+					break
-			case <-target.cancel:
-				// Channel is already closed
-			default:
-				close(target.cancel)
-			}
-
-			// Close the listener/connection
-			target.Lock()
-			switch protocol {
-			case "tcp":
-				if target.listener != nil {
-					target.listener.Close()
-				}
-			case "udp":
-				if target.udpConn != nil {
-					target.udpConn.Close()
 				}
 			}
-			target.Unlock()
+		} else {
-
+			return fmt.Errorf("target not found: %s:%d", listenIP, port)
-			// Wait for the target to fully stop
-			<-target.done
-
-			pm.targets = append(pm.targets[:i], pm.targets[i+1:]...)
-			return nil
 		}
+	case "udp":
+		if targets, ok := pm.udpTargets[listenIP]; ok {
+			delete(targets, port)
+			// Remove and close the corresponding UDP connection
+			for i, conn := range pm.udpConns {
+				if addr, ok := conn.LocalAddr().(*net.UDPAddr); ok && addr.Port == port {
+					conn.Close()
+					time.Sleep(50 * time.Millisecond)
+					// Remove from slice
+					pm.udpConns = append(pm.udpConns[:i], pm.udpConns[i+1:]...)
+					break
+				}
+			}
+		} else {
+			return fmt.Errorf("target not found: %s:%d", listenIP, port)
+		}
+	default:
+		return fmt.Errorf("unsupported protocol: %s", proto)
 	}
-
+	return nil
-	return fmt.Errorf("target not found for %s %s:%d", protocol, listen, port)
 }
 
+// Start begins listening for all configured proxy targets
 func (pm *ProxyManager) Start() error {
-	pm.RLock()
+	pm.mutex.Lock()
-	defer pm.RUnlock()
+	defer pm.mutex.Unlock()
 
-	for _, target := range pm.targets {
+	if pm.running {
-		target.Lock()
+		return nil
-		// If target is already running, skip it
+	}
-		if target.listener != nil || target.udpConn != nil {
-			target.Unlock()
-			continue
-		}
 
-		// Mark the target as starting by creating a nil listener/connection
+	// Start TCP targets
-		if strings.ToLower(target.Protocol) == "tcp" {
+	for listenIP, targets := range pm.tcpTargets {
-			target.listener = nil
+		for port, targetAddr := range targets {
-		} else {
+			if err := pm.startTarget("tcp", listenIP, port, targetAddr); err != nil {
-			target.udpConn = nil
+				return fmt.Errorf("failed to start TCP target: %v", err)
-		}
+			}
-		target.Unlock()
-
-		switch strings.ToLower(target.Protocol) {
-		case "tcp":
-			go pm.serveTCP(target)
-		case "udp":
-			go pm.serveUDP(target)
-		default:
-			return fmt.Errorf("unsupported protocol: %s", target.Protocol)
 		}
 	}
+
+	// Start UDP targets
+	for listenIP, targets := range pm.udpTargets {
+		for port, targetAddr := range targets {
+			if err := pm.startTarget("udp", listenIP, port, targetAddr); err != nil {
+				return fmt.Errorf("failed to start UDP target: %v", err)
+			}
+		}
+	}
+
+	pm.running = true
 	return nil
 }
 
 func (pm *ProxyManager) Stop() error {
-	pm.Lock()
+	pm.mutex.Lock()
-	defer pm.Unlock()
+	defer pm.mutex.Unlock()
 
-	var wg sync.WaitGroup
+	if !pm.running {
-	for _, target := range pm.targets {
+		return nil
-		wg.Add(1)
-		// Create a new variable in the loop to avoid closure issues
-		t := target // Take a local copy
-		go func() {
-			defer wg.Done()
-			close(t.cancel)
-			t.Lock()
-			if t.listener != nil {
-				t.listener.Close()
-			}
-			if t.udpConn != nil {
-				t.udpConn.Close()
-			}
-			t.Unlock()
-			// Wait for the target to fully stop
-			<-t.done
-		}()
 	}
-	wg.Wait()
+
+	// Set running to false first to signal handlers to stop
+	pm.running = false
+
+	// Close TCP listeners
+	for i := len(pm.listeners) - 1; i >= 0; i-- {
+		listener := pm.listeners[i]
+		if err := listener.Close(); err != nil {
+			logger.Error("Error closing TCP listener: %v", err)
+		}
+		// Remove from slice
+		pm.listeners = append(pm.listeners[:i], pm.listeners[i+1:]...)
+	}
+
+	// Close UDP connections
+	for i := len(pm.udpConns) - 1; i >= 0; i-- {
+		conn := pm.udpConns[i]
+		if err := conn.Close(); err != nil {
+			logger.Error("Error closing UDP connection: %v", err)
+		}
+		// Remove from slice
+		pm.udpConns = append(pm.udpConns[:i], pm.udpConns[i+1:]...)
+	}
+
+	// Clear the target maps
+	for k := range pm.tcpTargets {
+		delete(pm.tcpTargets, k)
+	}
+	for k := range pm.udpTargets {
+		delete(pm.udpTargets, k)
+	}
+
+	// Give active connections a chance to close gracefully
+	time.Sleep(100 * time.Millisecond)
+
 	return nil
 }
 
-func (pm *ProxyManager) serveTCP(target *ProxyTarget) {
+func (pm *ProxyManager) startTarget(proto, listenIP string, port int, targetAddr string) error {
-	defer close(target.done) // Signal that this target is fully stopped
+	switch proto {
+	case "tcp":
+		listener, err := pm.tnet.ListenTCP(&net.TCPAddr{Port: port})
+		if err != nil {
+			return fmt.Errorf("failed to create TCP listener: %v", err)
+		}
 
-	listener, err := pm.tnet.ListenTCP(&net.TCPAddr{
+		pm.listeners = append(pm.listeners, listener)
-		IP:   net.ParseIP(target.Listen),
+		go pm.handleTCPProxy(listener, targetAddr)
-		Port: target.Port,
+
-	})
+	case "udp":
-	if err != nil {
+		addr := &net.UDPAddr{Port: port}
-		logger.Info("Failed to start TCP listener for %s:%d: %v", target.Listen, target.Port, err)
+		conn, err := pm.tnet.ListenUDP(addr)
-		return
+		if err != nil {
+			return fmt.Errorf("failed to create UDP listener: %v", err)
+		}
+
+		pm.udpConns = append(pm.udpConns, conn)
+		go pm.handleUDPProxy(conn, targetAddr)
+
+	default:
+		return fmt.Errorf("unsupported protocol: %s", proto)
 	}
 
-	target.Lock()
+	logger.Info("Started %s proxy from %s:%d to %s", proto, listenIP, port, targetAddr)
-	target.listener = listener
-	target.Unlock()
 
-	defer listener.Close()
+	return nil
-	logger.Info("TCP proxy listening on %s", listener.Addr())
+}
-
-	var activeConns sync.WaitGroup
-	acceptDone := make(chan struct{})
-
-	// Goroutine to handle shutdown signal
-	go func() {
-		<-target.cancel
-		close(acceptDone)
-		listener.Close()
-	}()
 
+func (pm *ProxyManager) handleTCPProxy(listener net.Listener, targetAddr string) {
 	for {
 		conn, err := listener.Accept()
 		if err != nil {
-			select {
+			// Check if we're shutting down or the listener was closed
-			case <-target.cancel:
+			if !pm.running {
-				// Wait for active connections to finish
-				activeConns.Wait()
 				return
-			default:
-				logger.Info("Failed to accept TCP connection: %v", err)
-				// Don't return here, try to accept new connections
-				time.Sleep(time.Second)
-				continue
 			}
+
+			// Check for specific network errors that indicate the listener is closed
+			if ne, ok := err.(net.Error); ok && !ne.Temporary() {
+				logger.Info("TCP listener closed, stopping proxy handler for %v", listener.Addr())
+				return
+			}
+
+			logger.Error("Error accepting TCP connection: %v", err)
+			// Don't hammer the CPU if we hit a temporary error
+			time.Sleep(100 * time.Millisecond)
+			continue
 		}
 
-		activeConns.Add(1)
 		go func() {
-			defer activeConns.Done()
+			target, err := net.Dial("tcp", targetAddr)
-			pm.handleTCPConnection(conn, target.Target, acceptDone)
+			if err != nil {
+				logger.Error("Error connecting to target: %v", err)
+				conn.Close()
+				return
+			}
+
+			// Create a WaitGroup to ensure both copy operations complete
+			var wg sync.WaitGroup
+			wg.Add(2)
+
+			go func() {
+				defer wg.Done()
+				io.Copy(target, conn)
+				target.Close()
+			}()
+
+			go func() {
+				defer wg.Done()
+				io.Copy(conn, target)
+				conn.Close()
+			}()
+
+			// Wait for both copies to complete
+			wg.Wait()
 		}()
 	}
 }
 
-func (pm *ProxyManager) handleTCPConnection(clientConn net.Conn, target string, done chan struct{}) {
+func (pm *ProxyManager) handleUDPProxy(conn *gonet.UDPConn, targetAddr string) {
-	defer clientConn.Close()
+	buffer := make([]byte, 65507) // Max UDP packet size
-
+	clientConns := make(map[string]*net.UDPConn)
-	serverConn, err := net.Dial("tcp", target)
+	var clientsMutex sync.RWMutex
-	if err != nil {
-		logger.Info("Failed to connect to target %s: %v", target, err)
-		return
-	}
-	defer serverConn.Close()
-
-	// Create error channels for both copy operations
-	errc1 := make(chan error, 1)
-	errc2 := make(chan error, 1)
-
-	// Copy from client to server
-	go func() {
-		_, err := io.Copy(serverConn, clientConn)
-		errc1 <- err
-	}()
-
-	// Copy from server to client
-	go func() {
-		_, err := io.Copy(clientConn, serverConn)
-		errc2 <- err
-	}()
-
-	// Wait for either copy to finish or done signal
-	select {
-	case <-done:
-		// Gracefully close connections without type assertions
-		if closer, ok := clientConn.(interface{ CloseRead() error }); ok {
-			closer.CloseRead()
-		}
-		if closer, ok := serverConn.(*gonet.TCPConn); ok {
-			closer.CloseRead()
-		}
-	case err := <-errc1:
-		if err != nil {
-			logger.Info("Error copying client->server: %v", err)
-		}
-	case err := <-errc2:
-		if err != nil {
-			logger.Info("Error copying server->client: %v", err)
-		}
-	}
-}
-
-func (pm *ProxyManager) serveUDP(target *ProxyTarget) {
-	defer close(target.done) // Signal that this target is fully stopped
-
-	addr := &net.UDPAddr{
-		IP:   net.ParseIP(target.Listen),
-		Port: target.Port,
-	}
-
-	conn, err := pm.tnet.ListenUDP(addr)
-	if err != nil {
-		logger.Info("Failed to start UDP listener for %s:%d: %v", target.Listen, target.Port, err)
-		return
-	}
-
-	target.Lock()
-	target.udpConn = conn
-	target.Unlock()
-
-	defer conn.Close()
-	logger.Info("UDP proxy listening on %s", conn.LocalAddr())
-
-	buffer := make([]byte, 65535)
-	var activeConns sync.WaitGroup
 
 	for {
-		select {
+		n, remoteAddr, err := conn.ReadFrom(buffer)
-		case <-target.cancel:
+		if err != nil {
-			activeConns.Wait() // Wait for all active UDP handlers to complete
+			if !pm.running {
-			return
+				return
-		default:
-			n, remoteAddr, err := conn.ReadFrom(buffer)
-			if err != nil {
-				select {
-				case <-target.cancel:
-					activeConns.Wait()
-					return
-				default:
-					logger.Info("Failed to read UDP packet: %v", err)
-					continue
-				}
 			}
+			logger.Error("Error reading UDP packet: %v", err)
+			continue
+		}
 
-			targetAddr, err := net.ResolveUDPAddr("udp", target.Target)
+		clientKey := remoteAddr.String()
+		clientsMutex.RLock()
+		targetConn, exists := clientConns[clientKey]
+		clientsMutex.RUnlock()
+
+		if !exists {
+			targetUDPAddr, err := net.ResolveUDPAddr("udp", targetAddr)
 			if err != nil {
-				logger.Info("Failed to resolve target address %s: %v", target.Target, err)
+				logger.Error("Error resolving target address: %v", err)
 				continue
 			}
 
-			activeConns.Add(1)
+			targetConn, err = net.DialUDP("udp", nil, targetUDPAddr)
-			go func(data []byte, remote net.Addr) {
+			if err != nil {
-				defer activeConns.Done()
+				logger.Error("Error connecting to target: %v", err)
-				targetConn, err := net.DialUDP("udp", nil, targetAddr)
+				continue
-				if err != nil {
+			}
-					logger.Info("Failed to connect to target %s: %v", target.Target, err)
-					return
-				}
-				defer targetConn.Close()
 
-				select {
+			clientsMutex.Lock()
-				case <-target.cancel:
+			clientConns[clientKey] = targetConn
-					return
+			clientsMutex.Unlock()
-				default:
+
-					_, err = targetConn.Write(data)
+			go func() {
+				buffer := make([]byte, 65507)
+				for {
+					n, _, err := targetConn.ReadFromUDP(buffer)
 					if err != nil {
-						logger.Info("Failed to write to target: %v", err)
+						logger.Error("Error reading from target: %v", err)
 						return
 					}
 
-					response := make([]byte, 65535)
+					_, err = conn.WriteTo(buffer[:n], remoteAddr)
-					n, err := targetConn.Read(response)
 					if err != nil {
-						logger.Info("Failed to read response from target: %v", err)
+						logger.Error("Error writing to client: %v", err)
 						return
 					}
-
-					_, err = conn.WriteTo(response[:n], remote)
-					if err != nil {
-						logger.Info("Failed to write response to client: %v", err)
-					}
 				}
-			}(buffer[:n], remoteAddr)
+			}()
+		}
+
+		_, err = targetConn.Write(buffer[:n])
+		if err != nil {
+			logger.Error("Error writing to target: %v", err)
+			targetConn.Close()
+			clientsMutex.Lock()
+			delete(clientConns, clientKey)
+			clientsMutex.Unlock()
 		}
 	}
 }

proxy/types.go

@@ -1,29 +0,0 @@
-package proxy
-
-import (
-	"log"
-	"net"
-	"sync"
-
-	"golang.zx2c4.com/wireguard/tun/netstack"
-)
-
-type ProxyTarget struct {
-	Protocol    string
-	Listen      string
-	Port        int
-	Target      string
-	cancel      chan struct{}  // Channel to signal shutdown
-	done        chan struct{}  // Channel to signal completion
-	listener    net.Listener   // For TCP
-	udpConn     net.PacketConn // For UDP
-	sync.Mutex                 // Protect access to connection
-	activeConns sync.Map
-}
-
-type ProxyManager struct {
-	targets      []*ProxyTarget
-	tnet         *netstack.Net
-	log          *log.Logger
-	sync.RWMutex // Protect access to targets slice
-}