mirror/ tlstunnel
1
1
Fork 0
mirror of https://git.sr.ht/~emersion/tlstunnel synced 2024-05-11 17:56:05 +02:00
Code

Set PROXY protocol PP2_TYPE_AUTHORITY TLV

This commit is contained in:
Simon Ser 2020-10-09 12:21:19 +02:00
parent 79e331e8c2
commit 1f16053334
No known key found for this signature in database
GPG Key ID: 0FDE7BE0E88F5E48
1 changed files with 19 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
server.go
View File

@ -145,7 +145,7 @@ func (ln *Listener) handle(conn net.Conn) error {
return fmt.Errorf("can't find frontend for server name %q", tlsState.ServerName)
}
return fe.handle(tlsConn)
return fe.handle(tlsConn, &tlsState)
}
type Frontend struct {
@ -153,7 +153,7 @@ type Frontend struct {
Backend Backend
}
func (fe *Frontend) handle(downstream net.Conn) error {
func (fe *Frontend) handle(downstream net.Conn, tlsState *tls.ConnectionState) error {
defer downstream.Close()
be := &fe.Backend
@ -165,6 +165,15 @@ func (fe *Frontend) handle(downstream net.Conn) error {
if be.Proxy {
h := proxyproto.HeaderProxyFromAddrs(2, downstream.RemoteAddr(), downstream.LocalAddr())
var tlvs []proxyproto.TLV
if tlsState.ServerName != "" {
tlvs = append(tlvs, authorityTLV(tlsState.ServerName))
}
if err := h.SetTLVs(tlvs); err != nil {
return fmt.Errorf("failed to set PROXY protocol header TLVs: %v", err)
}
if _, err := h.WriteTo(upstream); err != nil {
return fmt.Errorf("failed to write PROXY protocol header: %v", err)
}
@ -191,3 +200,11 @@ func duplexCopy(a, b io.ReadWriter) error {
}()
return <-done
}
func authorityTLV(name string) proxyproto.TLV {
return proxyproto.TLV{
Type: proxyproto.PP2_TYPE_AUTHORITY,
Length: len(name),
Value: []byte(name),
}
}