small-package/luci-app-passwall/root/usr/share/passwall/haproxy.lua

#!/usr/bin/lua

local api = require ("luci.passwall.api")
local appname = api.appname
local fs = api.fs
local jsonc = api.jsonc
local uci = api.uci
local sys = api.sys

local log = function(...)
    api.log(...)
end

function get_ip_port_from(str)
    local result_port = sys.exec("echo -n " .. str .. " | sed -n 's/^.*[:#]\\([0-9]*\\)$/\\1/p'")
    local result_ip = sys.exec(string.format("__host=%s;__varport=%s;", str, result_port) .. "echo -n ${__host%%${__varport:+[:#]${__varport}*}}")
    return result_ip, result_port
end

local new_port
local function get_new_port()
	if new_port then
		new_port = tonumber(sys.exec(string.format("echo -n $(/usr/share/%s/app.sh get_new_port %s tcp)", appname, new_port + 1)))
	else
		new_port = tonumber(sys.exec(string.format("echo -n $(/usr/share/%s/app.sh get_new_port auto tcp)", appname)))
	end
	return new_port
end

local var = api.get_args(arg)
local haproxy_path = var["-path"]
local haproxy_conf = var["-conf"]

local health_check_type = uci:get(appname, "@global_haproxy[0]", "health_check_type") or "tcp"
local health_check_inter = uci:get(appname, "@global_haproxy[0]", "health_check_inter") or "10"
health_check_inter = tonumber(health_check_inter) * 1000

log("HAPROXY 负载均衡...")
fs.mkdir(haproxy_path)
local haproxy_file = haproxy_path .. "/" .. haproxy_conf

local f_out = io.open(haproxy_file, "a")

local haproxy_config = [[
global
    log         127.0.0.1 local2
    maxconn     60000
    stats socket  %s/haproxy.sock
%s
    daemon

defaults
    mode                    tcp
    log                     global
    option                  tcplog
    option                  dontlognull
    option http-server-close
    #option forwardfor       except 127.0.0.0/8
    option                  redispatch
    retries                 2
    timeout http-request    10s
    timeout queue           1m
    timeout connect         10s
    timeout client          1m
    timeout server          1m
    timeout http-keep-alive 10s
    timeout check           10s
    maxconn                 3000
    
resolvers mydns
    nameserver dns1 127.0.0.1:53
    resolve_retries       3
    timeout retry         3s
    hold valid           30s

]]

f_out:write(string.format(haproxy_config, haproxy_path, health_check_type == "passwall_logic" and string.format([[
    external-check
    insecure-fork-wanted
]]) or ""
))

local listens = {}

uci:foreach(appname, "haproxy_config", function(t)
    if t.enabled == "1" then
        local server_remark
        local server_address
        local server_port
        local lbss = t.lbss
        local listen_port = tonumber(t.haproxy_port) or 0
        local server_node = uci:get_all(appname, lbss)
        if server_node and server_node.address and server_node.port then
            server_remark = server_node.address .. ":" .. server_node.port
            server_address = server_node.address
            server_port = server_node.port
            if health_check_type == "passwall_logic" then
                if server_node.type ~= "Socks" then
                    local relay_port = server_node.port
                    new_port = get_new_port()
                    local config_file = string.format("haproxy_%s_%s.json", t[".name"], new_port)
                    sys.call(string.format('/usr/share/%s/app.sh run_socks "%s"> /dev/null',
                        appname,
                        string.format("flag=%s node=%s bind=%s socks_port=%s config_file=%s",
                            new_port, --flag
                            server_node[".name"], --node
                            "127.0.0.1", --bind
                            new_port, --socks port
                            config_file --config file
                            )
                        )
                    )
                    server_address = "127.0.0.1"
                    server_port = new_port
                end
            end
        else
            server_address, server_port = get_ip_port_from(lbss)
            server_remark = server_address .. ":" .. server_port
        end
        if server_address and server_port and listen_port > 0 then
            if not listens[listen_port] then
                listens[listen_port] = {}
            end
            t.server_remark = server_remark
            t.server_address = server_address
            t.server_port = server_port
            table.insert(listens[listen_port], t)
        else
            log("  - 丢弃1个明显无效的节点")
        end
    end
end)

local sortTable = {}
for i in pairs(listens) do
    if i ~= nil then
        table.insert(sortTable, i)
    end
end
table.sort(sortTable, function(a,b) return (a < b) end)

for i, port in pairs(sortTable) do
    log("  + 入口 0.0.0.0:%s..." % port)

    f_out:write(string.format([[
listen %s
    bind 0.0.0.0:%s
    mode tcp
    balance roundrobin
]], port, port))

    if health_check_type == "passwall_logic" then
        f_out:write(string.format([[
    option external-check
    external-check command "/usr/share/passwall/haproxy_check.sh"
]], port, port))
    end

    for i, o in ipairs(listens[port]) do
        local remark = o.server_remark
        local server = o.server_address .. ":" .. o.server_port
        f_out:write(string.format([[
    server %s %s weight %s check resolvers mydns inter %s rise 1 fall 3 %s
]], remark, server, o.lbweight, health_check_inter, o.backup == "1" and "backup" or ""))

        if o.export ~= "0" then
            sys.call(string.format("/usr/share/passwall/app.sh add_ip2route %s %s", o.server_address, o.export))
        end

        log(string.format("  | - 出口节点：%s:%s，权重：%s", o.server_address, o.server_port, o.lbweight))
    end
end

--控制台配置
local console_port = uci:get(appname, "@global_haproxy[0]", "console_port")
local console_user = uci:get(appname, "@global_haproxy[0]", "console_user")
local console_password = uci:get(appname, "@global_haproxy[0]", "console_password")
local str = [[
listen console
    bind 0.0.0.0:%s
    mode http
    stats refresh 30s
    stats uri /
    stats admin if TRUE
    %s
]]
f_out:write(string.format(str, console_port, (console_user and console_user ~= "" and console_password and console_password ~= "") and "stats auth " .. console_user .. ":" .. console_password or ""))
log(string.format("  * 控制台端口：%s", console_port))

f_out:close()