700 lines
22 KiB
Bash
Executable File
700 lines
22 KiB
Bash
Executable File
#!/bin/sh /etc/rc.common
|
|
#
|
|
# Copyright (C) 2017 openwrt-ssr
|
|
# Copyright (C) 2017 yushi studio <ywb94@qq.com>
|
|
# Copyright (C) 2018 lean <coolsnowwolf@gmail.com>
|
|
#
|
|
# This is free software, licensed under the GNU General Public License v3.
|
|
# See /LICENSE for more information.
|
|
#
|
|
|
|
START=99
|
|
STOP=15
|
|
|
|
SERVICE_DAEMONIZE=1
|
|
NAME=vssr
|
|
EXTRA_COMMANDS=rules
|
|
|
|
#定义配置文件名称
|
|
CONFIG_FILE=/var/etc/${NAME}_t.json
|
|
CONFIG_UDP_FILE=/var/etc/${NAME}_u.json
|
|
CONFIG_SOCK5_FILE=/var/etc/${NAME}_s.json
|
|
CRON_FILE=/etc/crontabs/root
|
|
|
|
LOCK_FILE=/var/lock/vssr.lock
|
|
|
|
#定义可执行文件路径
|
|
VSSR_RULES_BIN=/usr/bin/vssr-rules
|
|
|
|
#初始化配置
|
|
server_count=0
|
|
redir_tcp=0
|
|
redir_udp=0
|
|
tunnel_enable=0
|
|
local_enable=0
|
|
kcp_enable_flag=0
|
|
kcp_flag=0
|
|
pdnsd_enable_flag=0
|
|
switch_enable=0
|
|
shunt_enable=0
|
|
switch_server=$1
|
|
MAXFD=32768
|
|
threads=1
|
|
|
|
set_lock() {
|
|
exec 1000>"$LOCK_FILE"
|
|
flock -xn 1000
|
|
}
|
|
|
|
unset_lock() {
|
|
flock -u 1000
|
|
rm -rf "$LOCK_FILE"
|
|
}
|
|
|
|
unlock() {
|
|
failcount=1
|
|
while [ "$failcount" -le 10 ]; do
|
|
if [ -f "$LOCK_FILE" ]; then
|
|
echo "$(date "+%Y-%m-%d %H:%M:%S") wait for file unlock: $failcount count" >> /tmp/vssr.log
|
|
let "failcount++"
|
|
sleep 1s
|
|
[ "$failcount" -ge 10 ] && unset_lock
|
|
else
|
|
break
|
|
fi
|
|
done
|
|
}
|
|
|
|
|
|
#读取 uci 数据
|
|
uci_get_by_name() {
|
|
local ret=$(uci get $NAME.$1.$2 2>/dev/null)
|
|
echo ${ret:=$3}
|
|
}
|
|
|
|
uci_get_by_type() {
|
|
local ret=$(uci get $NAME.@$1[0].$2 2>/dev/null)
|
|
echo ${ret:=$3}
|
|
}
|
|
|
|
run_mode=$(uci_get_by_type global run_mode)
|
|
is_xray=$(uci_get_by_type global use_xray)
|
|
|
|
#查找可执行文件
|
|
find_bin() {
|
|
case "$1" in
|
|
ss) ret="ss-redir" ;;
|
|
ss-local) ret="ss-local" ;;
|
|
ssr) ret="ssr-redir" ;;
|
|
ssr-local) ret="ssr-local" ;;
|
|
ssr-server) ret="ssr-server" ;;
|
|
v2ray | vless) ret="xray" ;;
|
|
trojan) ret="trojan" ;;
|
|
esac
|
|
echo $(find /usr -perm /+x -type f -name $ret)
|
|
}
|
|
|
|
#添加定时执行脚本
|
|
add_cron() {
|
|
sed -i '/vssr.log/d' $CRON_FILE && echo '0 1 * * * echo "" > /tmp/vssr.log' >>$CRON_FILE
|
|
[ $(uci_get_by_type server_subscribe auto_update 0) -eq 1 ] && echo "0 $(uci_get_by_type server_subscribe auto_update_time) * * * /usr/bin/lua /usr/share/vssr/subscribe.lua" >>$CRON_FILE
|
|
[ $(uci_get_by_type server_subscribe auto_update 0) -eq 1 ] && echo "0 $(uci_get_by_type server_subscribe auto_update_time) * * * /usr/bin/lua /usr/share/vssr/update.lua" >>$CRON_FILE
|
|
crontab $CRON_FILE
|
|
}
|
|
|
|
#删除定时执行脚本
|
|
del_cron() {
|
|
sed -i '/vssr/d' $CRON_FILE
|
|
sed -i '/vssr.log/d' $CRON_FILE
|
|
/etc/init.d/cron restart
|
|
}
|
|
|
|
#计算分流数量
|
|
count_shunt() {
|
|
snum=0
|
|
eval shunt_array1="youtube"
|
|
eval shunt_array2="tw_video"
|
|
eval shunt_array3="netflix"
|
|
eval shunt_array4="disney"
|
|
eval shunt_array5="prime"
|
|
eval shunt_array6="tvb"
|
|
eval shunt_array7="custom"
|
|
for i in 1 2 3 4 5 6 7; do
|
|
a=$(eval echo "\$shunt_array$i")
|
|
local server_index=$(uci_get_by_type global ${a}_server)
|
|
local server_type=$(uci_get_by_name $server_index type)
|
|
if [ "$server_type" != "" ]; then
|
|
snum=$(($snum + 1))
|
|
fi
|
|
done
|
|
echo $snum
|
|
}
|
|
|
|
|
|
#创建配置文件
|
|
gen_config_file() {
|
|
local hostip=$(uci_get_by_name $1 server)
|
|
[ $2 = "0" -a $kcp_flag = "1" ] && hostip="127.0.0.1"
|
|
|
|
if [ $2 = "0" ]; then
|
|
re_type="tcp"
|
|
config_file=$CONFIG_FILE
|
|
server_obj=$GLOBAL_SERVER
|
|
elif [ $2 = "1" ]; then
|
|
re_type="udp"
|
|
config_file=$CONFIG_UDP_FILE
|
|
server_obj=$UDP_RELAY_SERVER
|
|
fi
|
|
[[ $(uci_get_by_name $1 fast_open 0) = "1" ]] && fastopen="true" || fastopen="false"
|
|
|
|
local stype=$(uci_get_by_name $1 type)
|
|
local port=$(uci_get_by_name $1 local_port)
|
|
[[ "$stype" == "vless" ]] && stype="v2ray"
|
|
|
|
if [ "$stype" == "trojan" ]; then
|
|
if [ "$re_type" == "udp" ]; then
|
|
re_type="client"
|
|
port="10801"
|
|
else
|
|
re_type="nat"
|
|
fi
|
|
fi
|
|
|
|
local mport=0
|
|
if [ $3 = "1" ]; then
|
|
stype="v2ray"
|
|
mport=1090
|
|
re_type="tcp"
|
|
fi
|
|
|
|
lua /usr/share/vssr/genconfig_${stype}.lua ${server_obj} ${re_type} ${port} ${hostip} ${mport} >${config_file}
|
|
sed -i 's/\\//g' $config_file
|
|
}
|
|
|
|
#获取arg输出
|
|
get_arg_out() {
|
|
case "$(uci_get_by_type access_control router_proxy 1)" in
|
|
1) echo "-o" ;;
|
|
2) echo "-O" ;;
|
|
esac
|
|
}
|
|
|
|
#启动规则
|
|
start_rules() {
|
|
local server=$(uci_get_by_name $GLOBAL_SERVER server)
|
|
#resolve name
|
|
if echo $server | grep -E "^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$" >/dev/null; then
|
|
server=${server}
|
|
elif [ "$server" != "${server#*:[0-9a-fA-F]}" ]; then
|
|
server=${server}
|
|
else
|
|
server=$(ping ${server} -s 1 -c 1 | grep PING | cut -d'(' -f 2 | cut -d')' -f1)
|
|
if echo $server | grep -E "^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$" >/dev/null; then
|
|
echo $server >/etc/ssr_ip
|
|
else
|
|
server=$(cat /etc/ssr_ip)
|
|
fi
|
|
fi
|
|
|
|
kcp_server=$server
|
|
|
|
local kcp_enable=$(uci_get_by_name $GLOBAL_SERVER kcp_enable 0)
|
|
if [ $kcp_enable = "1" ]; then
|
|
kcp_flag=1
|
|
fi
|
|
|
|
local local_port=$(uci_get_by_name $GLOBAL_SERVER local_port)
|
|
local lan_ac_ips=$(uci_get_by_type access_control lan_ac_ips)
|
|
local lan_ac_mode=$(uci_get_by_type access_control lan_ac_mode)
|
|
local router_proxy=$(uci_get_by_type access_control router_proxy)
|
|
if [ "$GLOBAL_SERVER" == "$UDP_RELAY_SERVER" -a $kcp_flag == 0 ]; then
|
|
ARG_UDP="-u"
|
|
elif [ -n "$UDP_RELAY_SERVER" ]; then
|
|
ARG_UDP="-U"
|
|
local udp_server=$(uci_get_by_name $UDP_RELAY_SERVER server)
|
|
if echo $udp_server | grep -E "^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$" >/dev/null; then
|
|
udp_server=${udp_server}
|
|
elif [ "$udp_server" != "${udp_server#*:[0-9a-fA-F]}" ]; then
|
|
udp_server=${udp_server}
|
|
else
|
|
udp_server=$(ping ${udp_server} -s 1 -c 1 | grep PING | cut -d'(' -f 2 | cut -d')' -f1)
|
|
if echo $udp_server | grep -E "^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$" >/dev/null; then
|
|
echo $udp_server >/etc/ssr_ip
|
|
else
|
|
udp_server=$(cat /etc/ssr_ip)
|
|
fi
|
|
fi
|
|
local udp_local_port=$(uci_get_by_name $UDP_RELAY_SERVER local_port)
|
|
fi
|
|
|
|
if [ -n "$lan_ac_ips" ]; then
|
|
case "$lan_ac_mode" in
|
|
w | W | b | B) local ac_ips="$lan_ac_mode$lan_ac_ips" ;;
|
|
esac
|
|
fi
|
|
|
|
#deal gfw firewall rule
|
|
local gfwmode=""
|
|
case "$run_mode" in
|
|
gfw) gfwmode="-g" ;;
|
|
router) gfwmode="-r" ;;
|
|
oversea) gfwmode="-c" ;;
|
|
all) gfwmode="-z" ;;
|
|
direct) gfwmode="-d" ;;
|
|
esac
|
|
|
|
local dports=$(uci_get_by_type global dports 1)
|
|
if [ $dports = "1" ]; then
|
|
proxyport=" "
|
|
else
|
|
proxyport="-m multiport --dports 22,53,587,465,995,993,143,80,443,9418"
|
|
fi
|
|
|
|
$VSSR_RULES_BIN \
|
|
-s "$server" \
|
|
-l "$local_port" \
|
|
-S "$udp_server" \
|
|
-L "$udp_local_port" \
|
|
-a "$ac_ips" \
|
|
-i "$(uci_get_by_type access_control wan_bp_list)" \
|
|
-b "$(uci_get_by_type access_control wan_bp_ips)" \
|
|
-w "$(uci_get_by_type access_control wan_fw_ips)" \
|
|
-p "$(uci_get_by_type access_control lan_fp_ips)" \
|
|
-G "$(uci_get_by_type access_control lan_gm_ips)" \
|
|
-D "$proxyport" \
|
|
$(get_arg_out) $gfwmode $ARG_UDP
|
|
return $?
|
|
}
|
|
|
|
#启动PDNSD
|
|
start_pdnsd() {
|
|
local usr_dns="$1"
|
|
local usr_port="$2"
|
|
|
|
local tcp_dns_list="208.67.222.222, 208.67.220.220"
|
|
[ -z "$usr_dns" ] && usr_dns="8.8.8.8"
|
|
[ -z "$usr_port" ] && usr_port="53"
|
|
|
|
[ -d /var/etc ] || mkdir -p /var/etc
|
|
|
|
if [ ! -d /var/pdnsd ]; then
|
|
mkdir -p /var/pdnsd
|
|
echo -ne "pd13\000\000\000\000" >/var/pdnsd/pdnsd.cache
|
|
chown -R nobody:nogroup /var/pdnsd
|
|
fi
|
|
|
|
cat <<-EOF >/var/etc/pdnsd.conf
|
|
global{
|
|
perm_cache=1024;
|
|
cache_dir="/var/pdnsd";
|
|
pid_file="/var/run/pdnsd.pid";
|
|
run_as="nobody";
|
|
server_ip=127.0.0.1;
|
|
server_port=5335;
|
|
status_ctl=on;
|
|
query_method=tcp_only;
|
|
min_ttl=1h;
|
|
max_ttl=1w;
|
|
timeout=10;
|
|
neg_domain_pol=on;
|
|
proc_limit=2;
|
|
procq_limit=8;
|
|
par_queries=1;
|
|
}
|
|
server{
|
|
label="ssr-usrdns";
|
|
ip=$usr_dns;
|
|
port=$usr_port;
|
|
timeout=6;
|
|
uptest=none;
|
|
interval=10m;
|
|
purge_cache=off;
|
|
}
|
|
EOF
|
|
/usr/sbin/pdnsd -c /var/etc/pdnsd.conf &
|
|
}
|
|
|
|
|
|
#开启分流
|
|
start_shunt() {
|
|
eval shunt_type1="global"
|
|
eval shunt_type2="youtube"
|
|
eval shunt_type3="tw_video"
|
|
eval shunt_type4="netflix"
|
|
eval shunt_type5="disney"
|
|
eval shunt_type6="prime"
|
|
eval shunt_type7="tvb"
|
|
eval shunt_type8="custom"
|
|
eval shunt_port1=2080
|
|
eval shunt_port2=2081
|
|
eval shunt_port3=2082
|
|
eval shunt_port4=2083
|
|
eval shunt_port5=2084
|
|
eval shunt_port6=2085
|
|
eval shunt_port7=2086
|
|
eval shunt_port8=2087
|
|
for i in 1 2 3 4 5 6 7 8; do
|
|
shunt_type=$(eval echo "\$shunt_type$i")
|
|
shunt_port=$(eval echo "\$shunt_port$i")
|
|
local server_index=$(uci_get_by_type global ${shunt_type}_server)
|
|
local server_port=${shunt_port}
|
|
local server_type=$(uci_get_by_name $server_index type)
|
|
local server_ip=$(uci_get_by_name $server_index server)
|
|
if [ "$server_type" = "vless" ]; then
|
|
server_type="v2ray"
|
|
fi
|
|
[ "$server_type" = "trojan" ] && re_type="client" || re_type="tcp"
|
|
if [ "$server_type" != "v2ray" -a "$server_type" != "" ]; then
|
|
local config_file=/var/etc/${NAME}_${shunt_type}.json
|
|
local bin=$(find_bin $server_type)
|
|
lua /usr/share/vssr/genconfig_${server_type}.lua ${server_index} ${re_type} ${server_port} ${server_ip} >${config_file}
|
|
sed -i 's/\\//g' $config_file
|
|
case "$server_type" in
|
|
ss | ssr)
|
|
bin=$(find_bin "ss-local")
|
|
[ "$server_type" == "ssr" ] && bin=$(find_bin "ssr-local")
|
|
|
|
g_threads=$threads
|
|
if [ "$shunt_type" != "global" ]; then
|
|
g_threads=1
|
|
fi
|
|
for i in $(seq 1 $g_threads); do
|
|
$bin -c $config_file $ARG_OTA -f /var/run/vssr-${shunt_type}.pid$i >/dev/null 2>&1
|
|
done
|
|
;;
|
|
trojan)
|
|
$bin --config $config_file >/dev/null 2>&1 &
|
|
;;
|
|
esac
|
|
echo "$(date "+%Y-%m-%d %H:%M:%S") ${shunt_type}: $server_type 分流服务已启动!" >>/tmp/vssr.log
|
|
fi
|
|
done
|
|
return $?
|
|
}
|
|
|
|
start_redir() {
|
|
case "$(uci_get_by_name $GLOBAL_SERVER auth_enable)" in
|
|
1 | on | true | yes | enabled) ARG_OTA="-A" ;;
|
|
*) ARG_OTA="" ;;
|
|
esac
|
|
|
|
#deal kcp
|
|
local kcp_enable=$(uci_get_by_name $GLOBAL_SERVER kcp_enable 0)
|
|
if [ $kcp_enable = "1" ]; then
|
|
[ ! -f "/usr/bin/kcptun-client" ] && return 1
|
|
|
|
local kcp_str=$(/usr/bin/kcptun-client -v | grep kcptun | wc -l)
|
|
[ "0" = $kcp_str ] && return 1
|
|
local kcp_port=$(uci_get_by_name $GLOBAL_SERVER kcp_port)
|
|
local server_port=$(uci_get_by_name $GLOBAL_SERVER server_port)
|
|
local password=$(uci_get_by_name $GLOBAL_SERVER kcp_password)
|
|
local kcp_param=$(uci_get_by_name $GLOBAL_SERVER kcp_param)
|
|
[ "$password" != "" ] && password="--key "${password}
|
|
service_start /usr/bin/kcptun-client \
|
|
-r $kcp_server:$kcp_port \
|
|
-l :$server_port $password $kcp_param
|
|
kcp_enable_flag=1
|
|
fi
|
|
|
|
gen_config_file $GLOBAL_SERVER 0 0
|
|
local stype=$(uci_get_by_name $GLOBAL_SERVER type)
|
|
sscmd=$(find_bin $stype)
|
|
|
|
if [ "$(uci_get_by_type global threads 0)" = "0" ]; then
|
|
threads=$(cat /proc/cpuinfo | grep 'processor' | wc -l)
|
|
else
|
|
threads=$(uci_get_by_type global threads)
|
|
fi
|
|
#转发TCP
|
|
redir_tcp=1
|
|
scount=$(count_shunt)
|
|
if [ $scount == "0" ]; then
|
|
local last_config_file=$CONFIG_FILE
|
|
case "$stype" in
|
|
ss | ssr)
|
|
local pid_file="/var/run/ssr-retcp.pid"
|
|
local name="Shadowsocks"
|
|
[ "$type" == "ssr" ] && name="ShadowsocksR"
|
|
for i in $(seq 1 $threads); do
|
|
$sscmd -c $last_config_file $ARG_OTA -f /var/run/ssr-retcp_$i.pid >/dev/null 2>&1
|
|
done
|
|
echo "$(date "+%Y-%m-%d %H:%M:%S") $name $threads 线程 已启动!" >>/tmp/vssr.log
|
|
;;
|
|
v2ray | vless)
|
|
$sscmd -config $last_config_file >/dev/null 2>&1 &
|
|
echo "$(date "+%Y-%m-%d %H:%M:%S") $($sscmd -version | head -1) 已启动!" >>/tmp/vssr.log
|
|
;;
|
|
trojan)
|
|
for i in $(seq 1 $threads); do
|
|
$sscmd -c $last_config_file >/dev/null 2>&1 &
|
|
done
|
|
echo "$(date "+%Y-%m-%d %H:%M:%S") $($sscmd -V 2>&1 | head -1) $threads 线程 已启动!" >>/tmp/vssr.log
|
|
;;
|
|
esac
|
|
else
|
|
if [ $stype != "vray" ]; then
|
|
#开启 v2ray 路由服务
|
|
gen_config_file $GLOBAL_SERVER 0 1
|
|
sscmd=$(find_bin "v2ray")
|
|
local last_config_file=$CONFIG_FILE
|
|
$sscmd -config $last_config_file >/dev/null 2>&1 &
|
|
echo "$(date "+%Y-%m-%d %H:%M:%S") $($sscmd -version | head -1) 已启动!" >>/tmp/vssr.log
|
|
fi
|
|
|
|
fi
|
|
|
|
#转发UDP
|
|
if [ -n "$UDP_RELAY_SERVER" ]; then
|
|
redir_udp=1
|
|
local utype=$(uci_get_by_name $UDP_RELAY_SERVER type)
|
|
ucmd=$(find_bin $utype)
|
|
gen_config_file $UDP_RELAY_SERVER 1 0
|
|
last_config_file=$CONFIG_UDP_FILE
|
|
case "$utype" in
|
|
ss | ssr)
|
|
case "$(uci_get_by_name $UDP_RELAY_SERVER auth_enable)" in
|
|
1 | on | true | yes | enabled) ARG_OTA="-A" ;;
|
|
*) ARG_OTA="" ;;
|
|
esac
|
|
local name="Shadowsocks"
|
|
[ "$type" == "ssr" ] && name="ShadowsocksR"
|
|
pid_file="/var/run/ssr-reudp.pid"
|
|
$ucmd -c $last_config_file $ARG_OTA -U -f /var/run/ssr-reudp.pid >/dev/null 2>&1
|
|
echo "$(date "+%Y-%m-%d %H:%M:%S") UDP TPROXY Relay: $name 已启动!" >>/tmp/vssr.log
|
|
;;
|
|
v2ray | vless)
|
|
$ucmd -config $last_config_file >/dev/null 2>&1 &
|
|
echo "$(date "+%Y-%m-%d %H:%M:%S") UDP TPROXY Relay: $($sscmd -version | head -1) 已启动!" >>/tmp/vssr.log
|
|
;;
|
|
trojan)
|
|
$ucmd --config $last_config_file >/dev/null 2>&1 &
|
|
ipt2socks -U -4 -b 0.0.0.0 -s 127.0.0.1 -p 10801 -l $(uci_get_by_name $UDP_RELAY_SERVER local_port) >/dev/null 2>&1 &
|
|
echo "$(date "+%Y-%m-%d %H:%M:%S") UDP TPROXY Relay: Trojan 已启动!" >>/tmp/vssr.log
|
|
;;
|
|
esac
|
|
fi
|
|
|
|
#deal with dns
|
|
|
|
if [ "$(uci_get_by_type global pdnsd_enable)" = "1" ]; then
|
|
local dnsstr="$(uci_get_by_type global tunnel_forward 8.8.4.4:53)"
|
|
local dnsserver=$(echo "$dnsstr" | awk -F ':' '{print $1}')
|
|
local dnsport=$(echo "$dnsstr" | awk -F ':' '{print $2}')
|
|
if [ "$run_mode" = "gfw" ]; then
|
|
ipset add gfwlist $dnsserver 2>/dev/null
|
|
elif [ "$run_mode" = "oversea" ]; then
|
|
ipset add oversea $dnsserver 2>/dev/null
|
|
else
|
|
ipset add ss_spec_wan_ac $dnsserver nomatch 2>/dev/null
|
|
fi
|
|
start_pdnsd $dnsserver $dnsport
|
|
pdnsd_enable_flag=1
|
|
fi
|
|
|
|
if [ "$(uci_get_by_type global enable_switch)" = "1" ]; then
|
|
if [ "$(uci_get_by_name $GLOBAL_SERVER switch_enable)" = "1" ]; then
|
|
if [ -z "$switch_server" ]; then
|
|
local switch_time=$(uci_get_by_type global switch_time)
|
|
local switch_timeout=$(uci_get_by_type global switch_timeout)
|
|
service_start /usr/bin/vssr-switch start $switch_time $switch_timeout
|
|
switch_enable=1
|
|
fi
|
|
fi
|
|
fi
|
|
add_cron
|
|
|
|
return $?
|
|
}
|
|
|
|
gen_service_file() {
|
|
[[ $(uci_get_by_name $1 fast_open) = "1" ]] && fastopen="true" || fastopen="false"
|
|
cat <<-EOF >$2
|
|
{
|
|
"server": "0.0.0.0",
|
|
"server_port": $(uci_get_by_name $1 server_port),
|
|
"password": "$(uci_get_by_name $1 password)",
|
|
"timeout": $(uci_get_by_name $1 timeout 60),
|
|
"method": "$(uci_get_by_name $1 encrypt_method)",
|
|
"protocol": "$(uci_get_by_name $1 protocol)",
|
|
"protocol_param": "$(uci_get_by_name $1 protocol_param)",
|
|
"obfs": "$(uci_get_by_name $1 obfs)",
|
|
"obfs_param": "$(uci_get_by_name $1 obfs_param)",
|
|
"fast_open": $fastopen
|
|
}
|
|
EOF
|
|
}
|
|
|
|
start_service() {
|
|
[ $(uci_get_by_name $1 enable) = "0" ] && return 1
|
|
let server_count=server_count+1
|
|
if [ $server_count = 1 ]; then
|
|
if ! (iptables-save -t filter | grep SSR-SERVER-RULE >/dev/null); then
|
|
iptables -N SSR-SERVER-RULE && \
|
|
iptables -t filter -I INPUT -j SSR-SERVER-RULE
|
|
fi
|
|
fi
|
|
|
|
gen_service_file $1 /var/etc/${NAME}_${server_count}.json
|
|
/usr/bin/ssr-server -c /var/etc/${NAME}_${server_count}.json -u -f /var/run/ssr-server${server_count}.pid >/dev/null 2>&1
|
|
iptables -t filter -A SSR-SERVER-RULE -p tcp --dport $(uci_get_by_name $1 server_port) -j ACCEPT
|
|
iptables -t filter -A SSR-SERVER-RULE -p udp --dport $(uci_get_by_name $1 server_port) -j ACCEPT
|
|
return 0
|
|
}
|
|
|
|
gen_serv_include() {
|
|
FWI=$(uci get firewall.vssr.path 2>/dev/null)
|
|
[ -n "$FWI" ] || return 0
|
|
if [ ! -f $FWI ]; then
|
|
echo '#!/bin/sh' >$FWI
|
|
fi
|
|
extract_rules() {
|
|
echo "*filter"
|
|
iptables-save -t filter | grep SSR-SERVER-RULE | sed -e "s/^-A INPUT/-I INPUT/"
|
|
echo 'COMMIT'
|
|
}
|
|
cat <<-EOF >>$FWI
|
|
iptables-save -c | grep -v "SSR-SERVER" | iptables-restore -c
|
|
iptables-restore -n <<-EOT
|
|
$(extract_rules)
|
|
EOT
|
|
EOF
|
|
|
|
}
|
|
start_server() {
|
|
SERVER_ENABLE=$(uci_get_by_type server_global enable_server)
|
|
[ "$SERVER_ENABLE" = 0 ] && return 0
|
|
mkdir -p /var/run /var/etc
|
|
|
|
config_load $NAME
|
|
config_foreach start_service server_config
|
|
gen_serv_include
|
|
return 0
|
|
}
|
|
|
|
start_local() {
|
|
local socks_server=$(uci_get_by_type socks5_proxy enable_server)
|
|
local http_server=$(uci_get_by_type http_proxy enable_server)
|
|
|
|
if [ "$socks_server" = "0" -a "$http_server" = "0" ]; then
|
|
return 1
|
|
fi
|
|
mkdir -p /var/run /var/etc
|
|
|
|
lua /usr/share/vssr/genconfig_v2ray_s.lua >$CONFIG_SOCK5_FILE
|
|
sed -i 's/\\//g' $config_file
|
|
socksbin=$(find_bin "v2ray")
|
|
$socksbin -config $CONFIG_SOCK5_FILE >/dev/null 2>&1 &
|
|
local_enable=1
|
|
}
|
|
|
|
rules() {
|
|
[ "$GLOBAL_SERVER" = "nil" ] && return 1
|
|
mkdir -p /var/run /var/etc
|
|
UDP_RELAY_SERVER=$(uci_get_by_type global udp_relay_server)
|
|
[ "$UDP_RELAY_SERVER" = "same" ] && UDP_RELAY_SERVER=$GLOBAL_SERVER
|
|
if start_rules; then
|
|
return 0
|
|
else
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
start() {
|
|
set_lock
|
|
if [ -z "$switch_server" ]; then
|
|
GLOBAL_SERVER=$(uci_get_by_type global global_server)
|
|
else
|
|
GLOBAL_SERVER=$switch_server
|
|
switch_enable=1
|
|
fi
|
|
if rules; then
|
|
if start_redir; then
|
|
if [ -f "/tmp/dnsmasq.ssr" ]; then
|
|
rm -rf /tmp/dnsmasq.ssr
|
|
fi
|
|
if [ -f "/tmp/dnsmasq.oversea" ]; then
|
|
rm -rf /tmp/dnsmasq.oversea
|
|
fi
|
|
mkdir -p /tmp/dnsmasq.d
|
|
if [ "$run_mode" = "direct" ]; then
|
|
mkdir -p /tmp/dnsmasq.ssr
|
|
cp -rf /etc/vssr/ad.conf /tmp/dnsmasq.ssr/
|
|
cat >/tmp/dnsmasq.d/dnsmasq-ssr.conf <<EOF
|
|
conf-dir=/tmp/dnsmasq.ssr
|
|
EOF
|
|
elif ! [ "$run_mode" = "oversea" ]; then
|
|
mkdir -p /tmp/dnsmasq.ssr
|
|
cp -rf /etc/vssr/gfw_list.conf /tmp/dnsmasq.ssr/
|
|
cp -rf /etc/vssr/gfw_base.conf /tmp/dnsmasq.ssr/
|
|
cp -rf /etc/vssr/ad.conf /tmp/dnsmasq.ssr/
|
|
cat >/tmp/dnsmasq.d/dnsmasq-ssr.conf <<EOF
|
|
conf-dir=/tmp/dnsmasq.ssr
|
|
EOF
|
|
else
|
|
mkdir -p /tmp/dnsmasq.oversea
|
|
cp -rf /etc/vssr/oversea_list.conf /tmp/dnsmasq.oversea/
|
|
cat >/tmp/dnsmasq.d/dnsmasq-ssr.conf <<EOF
|
|
conf-dir=/tmp/dnsmasq.oversea
|
|
EOF
|
|
fi
|
|
if [ $(uci_get_by_type global adblock) = 0 ]; then
|
|
rm -f /tmp/dnsmasq.ssr/ad.conf
|
|
fi
|
|
/usr/share/vssr/gfw2ipset.sh
|
|
else
|
|
/usr/bin/ssr-rules -f
|
|
fi
|
|
fi
|
|
/etc/init.d/dnsmasq restart >/dev/null 2>&1
|
|
start_server
|
|
start_local
|
|
scount=$(count_shunt)
|
|
if [ $scount != "0" ]; then
|
|
start_shunt
|
|
fi
|
|
if [ $(uci_get_by_type global monitor_enable) = 1 ]; then
|
|
let total_count=server_count+redir_tcp+redir_udp+tunnel_enable+kcp_enable_flag+local_enable+pdnsd_enable_flag+switch_enable
|
|
if [ $total_count -gt 0 ]; then
|
|
#param:server(count) redir_tcp(0:no,1:yes) redir_udp tunnel kcp local gfw
|
|
service_start /usr/bin/vssr-monitor $server_count $redir_tcp $redir_udp $tunnel_enable $kcp_enable_flag $local_enable $pdnsd_enable_flag $switch_enable
|
|
fi
|
|
fi
|
|
|
|
unset_lock
|
|
|
|
ENABLE_SERVER=$(uci_get_by_type global global_server)
|
|
[ "$ENABLE_SERVER" = "nil" ] && return 1
|
|
}
|
|
|
|
boot() {
|
|
(/usr/share/vssr/chinaipset.sh && sleep 5 && start >/dev/null 2>&1) &
|
|
}
|
|
|
|
stop() {
|
|
unlock
|
|
set_lock
|
|
|
|
echo "stop"
|
|
/usr/bin/vssr-rules -f
|
|
srulecount=$(iptables -L | grep SSR-SERVER-RULE | wc -l)
|
|
if [ $srulecount -gt 0 ]; then
|
|
iptables -F SSR-SERVER-RULE
|
|
iptables -t filter -D INPUT -j SSR-SERVER-RULE
|
|
iptables -X SSR-SERVER-RULE 2>/dev/null
|
|
fi
|
|
if [ -z "$switch_server" ]; then
|
|
kill -9 $(busybox ps -w | grep vssr-switch | grep -v grep | awk '{print $1}') >/dev/null 2>&1
|
|
fi
|
|
if [ $(uci_get_by_type global monitor_enable) = 1 ]; then
|
|
kill -9 $(busybox ps -w | grep vssr-monitor | grep -v grep | awk '{print $1}') >/dev/null 2>&1
|
|
fi
|
|
killall -q -9 ss-redir ss-local obfs-local ssr-redir ssr-local ssr-server xray-plugin xray trojan microsocks ipt2socks dns2socks pdnsd
|
|
|
|
if [ -f "/tmp/dnsmasq.d/dnsmasq-ssr.conf" ]; then
|
|
rm -rf /tmp/dnsmasq.d/dnsmasq-ssr.conf /tmp/dnsmasq.ssr /tmp/dnsmasq.oversea
|
|
/etc/init.d/dnsmasq restart >/dev/null 2>&1
|
|
fi
|
|
del_cron
|
|
|
|
unset_lock
|
|
} |