519 lines
12 KiB
Lua
519 lines
12 KiB
Lua
-- Copyright (C) 2017 yushi studio <ywb94@qq.com> github.com/ywb94
|
||
-- Licensed to the public under the GNU General Public License v3.
|
||
local m, s, o, kcp_enable
|
||
local vssr = 'vssr'
|
||
local uci = luci.model.uci.cursor()
|
||
|
||
local fs = require 'nixio.fs'
|
||
local sys = require 'luci.sys'
|
||
local sid = arg[1]
|
||
local uuid = luci.sys.exec('cat /proc/sys/kernel/random/uuid')
|
||
|
||
local function isKcptun(file)
|
||
if not fs.access(file, 'rwx', 'rx', 'rx') then
|
||
fs.chmod(file, 755)
|
||
end
|
||
|
||
local str = sys.exec(file .. " -v | awk '{printf $1}'")
|
||
return (str:lower() == 'kcptun')
|
||
end
|
||
|
||
local server_table = {}
|
||
local encrypt_methods = {
|
||
'none',
|
||
'table',
|
||
'rc4',
|
||
'rc4-md5-6',
|
||
'rc4-md5',
|
||
'aes-128-cfb',
|
||
'aes-192-cfb',
|
||
'aes-256-cfb',
|
||
'aes-128-ctr',
|
||
'aes-192-ctr',
|
||
'aes-256-ctr',
|
||
'bf-cfb',
|
||
'camellia-128-cfb',
|
||
'camellia-192-cfb',
|
||
'camellia-256-cfb',
|
||
'cast5-cfb',
|
||
'des-cfb',
|
||
'idea-cfb',
|
||
'rc2-cfb',
|
||
'seed-cfb',
|
||
'salsa20',
|
||
'chacha20',
|
||
'chacha20-ietf'
|
||
}
|
||
|
||
local encrypt_methods_ss = {
|
||
-- aead
|
||
'aes-128-gcm',
|
||
'aes-192-gcm',
|
||
'aes-256-gcm',
|
||
'chacha20-ietf-poly1305',
|
||
'xchacha20-ietf-poly1305', -- stream
|
||
'table',
|
||
'rc4',
|
||
'rc4-md5',
|
||
'aes-128-cfb',
|
||
'aes-192-cfb',
|
||
'aes-256-cfb',
|
||
'aes-128-ctr',
|
||
'aes-192-ctr',
|
||
'aes-256-ctr',
|
||
'bf-cfb',
|
||
'camellia-128-cfb',
|
||
'camellia-192-cfb',
|
||
'camellia-256-cfb',
|
||
'salsa20',
|
||
'chacha20',
|
||
'chacha20-ietf'
|
||
}
|
||
|
||
local protocol = {
|
||
'origin',
|
||
'verify_deflate',
|
||
'auth_sha1_v4',
|
||
'auth_aes128_sha1',
|
||
'auth_aes128_md5',
|
||
'auth_chain_a',
|
||
'auth_chain_b',
|
||
'auth_chain_c',
|
||
'auth_chain_d',
|
||
'auth_chain_e',
|
||
'auth_chain_f'
|
||
}
|
||
|
||
obfs = {
|
||
'plain',
|
||
'http_simple',
|
||
'http_post',
|
||
'random_head',
|
||
'tls1.2_ticket_auth'
|
||
}
|
||
local securitys = {
|
||
'auto',
|
||
'none',
|
||
'aes-128-gcm',
|
||
'chacha20-poly1305'
|
||
}
|
||
|
||
local flows = {
|
||
'xtls-rprx-origin',
|
||
'xtls-rprx-origin-udp443',
|
||
'xtls-rprx-direct',
|
||
'xtls-rprx-direct-udp443',
|
||
'xtls-rprx-splice',
|
||
'xtls-rprx-splice-udp443'
|
||
}
|
||
|
||
m = Map(vssr, translate('Edit vssr Server'))
|
||
m.redirect = luci.dispatcher.build_url('admin/services/vssr/servers')
|
||
if m.uci:get(vssr, sid) ~= 'servers' then
|
||
luci.http.redirect(m.redirect)
|
||
return
|
||
end
|
||
|
||
-- [[ Servers Setting ]]--
|
||
s = m:section(NamedSection, sid, 'servers')
|
||
s.anonymous = true
|
||
s.addremove = false
|
||
|
||
o = s:option(DummyValue, 'ssr_url', translate('Configuration Url'))
|
||
o.rawhtml = true
|
||
o.template = 'vssr/ssrurl'
|
||
o.value = sid
|
||
|
||
o = s:option(ListValue, 'type', translate('Server Node Type'))
|
||
o:value('ssr', translate('ShadowsocksR'))
|
||
if nixio.fs.access('/usr/bin/ss-redir') then
|
||
o:value('ss', translate('Shadowsocks New Version'))
|
||
end
|
||
|
||
if nixio.fs.access('/usr/bin/xray') then
|
||
o:value('v2ray', translate('V2Ray'))
|
||
o:value('vless', translate('VLESS'))
|
||
end
|
||
|
||
if nixio.fs.access('/usr/sbin/trojan') then
|
||
o:value('trojan', translate('Trojan'))
|
||
end
|
||
|
||
if nixio.fs.access('/usr/bin/hysteria') then
|
||
o:value('hysteria', translate('Hysteria'))
|
||
end
|
||
|
||
o.description = translate('Using incorrect encryption mothod may causes service fail to start')
|
||
|
||
o = s:option(Value, 'alias', translate('Alias(optional)'))
|
||
|
||
o = s:option(Value, 'flag', translate('Area'))
|
||
o.description = translate('请自己指定。格式：cn us hk 等')
|
||
o.rmempty = true
|
||
|
||
o = s:option(Value, 'server', translate('Server Address'))
|
||
o.datatype = 'host'
|
||
o.rmempty = false
|
||
|
||
o = s:option(Value, 'server_port', translate('Server Port'))
|
||
o.datatype = 'port'
|
||
o.rmempty = false
|
||
|
||
o = s:option(Value, 'password', translate('Password'))
|
||
o.password = true
|
||
o.rmempty = true
|
||
o:depends('type', 'ssr')
|
||
o:depends('type', 'ss')
|
||
o:depends('type', 'trojan')
|
||
|
||
o = s:option(Value, 'peer', translate('Peer'))
|
||
o.datatype = 'host'
|
||
o.rmempty = true
|
||
o:depends('type', 'trojan')
|
||
|
||
o = s:option(ListValue, 'encrypt_method', translate('Encrypt Method'))
|
||
for _, v in ipairs(encrypt_methods) do
|
||
o:value(v)
|
||
end
|
||
o.rmempty = true
|
||
o:depends('type', 'ssr')
|
||
|
||
o = s:option(ListValue, 'encrypt_method_ss', translate('Encrypt Method'))
|
||
for _, v in ipairs(encrypt_methods_ss) do
|
||
o:value(v)
|
||
end
|
||
o.rmempty = true
|
||
o:depends('type', 'ss')
|
||
|
||
-- o:depends("type", "hysteria")
|
||
o = s:option(Value, 'h_obfs', translate('Hysteria Obfs'))
|
||
o.datatype = "minlength(1)"
|
||
o.rmempty = false
|
||
o:depends('type', 'hysteria')
|
||
|
||
-- 协议
|
||
o = s:option(ListValue, 'h_protocol', translate('Protocol'))
|
||
o:value('udp', 'UDP')
|
||
o:value('wechat-video', 'Wechat Video')
|
||
o:value('faketcp', 'Fake TCP')
|
||
o.rmempty = false
|
||
o:depends('type', 'hysteria')
|
||
|
||
-- up_mbps
|
||
o = s:option(Value, 'h_up_mbps', translate('Up Mbps'))
|
||
o.datatype = "uinteger"
|
||
o.rmempty = false
|
||
o:depends('type', 'hysteria')
|
||
|
||
-- down_mbps
|
||
o = s:option(Value, 'h_down_mbps', translate('Down Mbps'))
|
||
o.datatype = "uinteger"
|
||
o.rmempty = false
|
||
o:depends('type', 'hysteria')
|
||
|
||
o = s:option(Value, 'h_server_name', translate('Server Name'))
|
||
o.datatype = 'host'
|
||
o.rmempty = true
|
||
o:depends('type', 'hysteria')
|
||
|
||
-- Shadowsocks Plugin
|
||
o = s:option(Value, 'plugin', translate('Plugin'))
|
||
o.rmempty = true
|
||
o:depends('type', 'ss')
|
||
|
||
o = s:option(Value, 'plugin_opts', translate('Plugin Opts'))
|
||
o.rmempty = true
|
||
o:depends('type', 'ss')
|
||
|
||
o = s:option(ListValue, 'protocol', translate('Protocol'))
|
||
for _, v in ipairs(protocol) do
|
||
o:value(v)
|
||
end
|
||
o.rmempty = true
|
||
o:depends('type', 'ssr')
|
||
|
||
o = s:option(Value, 'protocol_param', translate('Protocol param(optional)'))
|
||
o:depends('type', 'ssr')
|
||
|
||
o = s:option(ListValue, 'obfs', translate('Obfs'))
|
||
for _, v in ipairs(obfs) do
|
||
o:value(v)
|
||
end
|
||
o.rmempty = true
|
||
o:depends('type', 'ssr')
|
||
|
||
o = s:option(Value, 'obfs_param', translate('Obfs param(optional)'))
|
||
o:depends('type', 'ssr')
|
||
|
||
-- AlterId
|
||
o = s:option(Value, 'alter_id', translate('AlterId'))
|
||
o.datatype = 'port'
|
||
o.default = 16
|
||
o.rmempty = true
|
||
o:depends('type', 'v2ray')
|
||
|
||
-- VmessId
|
||
o = s:option(Value, 'vmess_id', translate('VMESS/VLESS ID (UUID)'))
|
||
o.rmempty = true
|
||
o.default = uuid
|
||
o:depends('type', 'v2ray')
|
||
o:depends('type', 'vless')
|
||
o:depends('type', 'xray')
|
||
|
||
-- VLESS 加密方式
|
||
o = s:option(Value, 'vless_encryption', translate('VLESS Encryption'))
|
||
o.rmempty = true
|
||
o.default = 'none'
|
||
o:depends('type', 'vless')
|
||
o:depends('type', 'xray')
|
||
|
||
-- 加密方式
|
||
o = s:option(ListValue, 'security', translate('Encrypt Method'))
|
||
for _, v in ipairs(securitys) do
|
||
o:value(v, v:upper())
|
||
end
|
||
o.rmempty = true
|
||
o:depends('type', 'v2ray')
|
||
|
||
-- 传输协议
|
||
o = s:option(ListValue, 'transport', translate('Transport'))
|
||
o:value('tcp', 'TCP')
|
||
o:value('kcp', 'mKCP')
|
||
o:value('ws', 'WebSocket')
|
||
o:value('h2', 'HTTP/2')
|
||
o:value('quic', 'QUIC')
|
||
o.rmempty = true
|
||
o:depends('type', 'v2ray')
|
||
o:depends('type', 'vless')
|
||
o:depends('type', 'xray')
|
||
|
||
-- [[ TCP部分 ]]--
|
||
|
||
-- TCP伪装
|
||
o = s:option(ListValue, 'tcp_guise', translate('Camouflage Type'))
|
||
o:depends('transport', 'tcp')
|
||
o:value('none', translate('None'))
|
||
o:value('http', 'HTTP')
|
||
o.rmempty = true
|
||
|
||
-- HTTP域名
|
||
o = s:option(DynamicList, 'http_host', translate('HTTP Host'))
|
||
o:depends('tcp_guise', 'http')
|
||
o.rmempty = true
|
||
|
||
-- HTTP路径
|
||
o = s:option(DynamicList, 'http_path', translate('HTTP Path'))
|
||
o:depends('tcp_guise', 'http')
|
||
o.rmempty = true
|
||
|
||
-- [[ WS部分 ]]--
|
||
|
||
-- WS域名
|
||
o = s:option(Value, 'ws_host', translate('WebSocket Host'))
|
||
o:depends('transport', 'ws')
|
||
o.rmempty = true
|
||
|
||
-- WS路径
|
||
o = s:option(Value, 'ws_path', translate('WebSocket Path'))
|
||
o:depends('transport', 'ws')
|
||
o.rmempty = true
|
||
|
||
-- [[ H2部分 ]]--
|
||
|
||
-- H2域名
|
||
o = s:option(DynamicList, 'h2_host', translate('HTTP/2 Host'))
|
||
o:depends('transport', 'h2')
|
||
o.rmempty = true
|
||
|
||
-- H2路径
|
||
o = s:option(Value, 'h2_path', translate('HTTP/2 Path'))
|
||
o:depends('transport', 'h2')
|
||
o.rmempty = true
|
||
|
||
-- [[ QUIC部分 ]]--
|
||
|
||
o = s:option(ListValue, 'quic_security', translate('QUIC Security'))
|
||
o:depends('transport', 'quic')
|
||
o.rmempty = true
|
||
o:value('none', translate('None'))
|
||
o:value('aes-128-gcm', translate('aes-128-gcm'))
|
||
o:value('chacha20-poly1305', translate('chacha20-poly1305'))
|
||
|
||
o = s:option(Value, 'quic_key', translate('QUIC Key'))
|
||
o:depends('transport', 'quic')
|
||
o.rmempty = true
|
||
|
||
o = s:option(ListValue, 'quic_guise', translate('Header'))
|
||
o:depends('transport', 'quic')
|
||
o.rmempty = true
|
||
o:value('none', translate('None'))
|
||
o:value('srtp', translate('VideoCall (SRTP)'))
|
||
o:value('utp', translate('BitTorrent (uTP)'))
|
||
o:value('wechat-video', translate('WechatVideo'))
|
||
o:value('dtls', 'DTLS 1.2')
|
||
o:value('wireguard', 'WireGuard')
|
||
-- [[ mKCP部分 ]]--
|
||
|
||
o = s:option(ListValue, 'kcp_guise', translate('Camouflage Type'))
|
||
o:depends('transport', 'kcp')
|
||
o:value('none', translate('None'))
|
||
o:value('srtp', translate('VideoCall (SRTP)'))
|
||
o:value('utp', translate('BitTorrent (uTP)'))
|
||
o:value('wechat-video', translate('WechatVideo'))
|
||
o:value('dtls', 'DTLS 1.2')
|
||
o:value('wireguard', 'WireGuard')
|
||
o.rmempty = true
|
||
|
||
o = s:option(Value, 'mtu', translate('MTU'))
|
||
o.datatype = 'uinteger'
|
||
o:depends('transport', 'kcp')
|
||
o.default = 1350
|
||
o.rmempty = true
|
||
|
||
o = s:option(Value, 'tti', translate('TTI'))
|
||
o.datatype = 'uinteger'
|
||
o:depends('transport', 'kcp')
|
||
o.default = 50
|
||
o.rmempty = true
|
||
|
||
o = s:option(Value, 'uplink_capacity', translate('Uplink Capacity'))
|
||
o.datatype = 'uinteger'
|
||
o:depends('transport', 'kcp')
|
||
o.default = 5
|
||
o.rmempty = true
|
||
|
||
o = s:option(Value, 'downlink_capacity', translate('Downlink Capacity'))
|
||
o.datatype = 'uinteger'
|
||
o:depends('transport', 'kcp')
|
||
o.default = 20
|
||
o.rmempty = true
|
||
|
||
o = s:option(Value, 'read_buffer_size', translate('Read Buffer Size'))
|
||
o.datatype = 'uinteger'
|
||
o:depends('transport', 'kcp')
|
||
o.default = 2
|
||
o.rmempty = true
|
||
|
||
o = s:option(Value, 'write_buffer_size', translate('Write Buffer Size'))
|
||
o.datatype = 'uinteger'
|
||
o:depends('transport', 'kcp')
|
||
o.default = 2
|
||
o.rmempty = true
|
||
|
||
o = s:option(Value, 'seed', translate('Seed'))
|
||
o:depends('transport', 'kcp')
|
||
o.default = ''
|
||
o.rmempty = true
|
||
|
||
o = s:option(Flag, 'congestion', translate('Congestion'))
|
||
o:depends('transport', 'kcp')
|
||
o.rmempty = true
|
||
|
||
-- [[ allowInsecure ]]--
|
||
o = s:option(Flag, 'insecure', translate('allowInsecure'))
|
||
o.rmempty = false
|
||
o:depends('type', 'v2ray')
|
||
o:depends('type', 'trojan')
|
||
o:depends('type', 'vless')
|
||
o:depends('type', 'xray')
|
||
o:depends('type', 'hysteria')
|
||
|
||
-- [[ TLS ]]--
|
||
o = s:option(Flag, 'tls', translate('TLS'))
|
||
o.rmempty = true
|
||
o.default = '0'
|
||
o:depends('type', 'v2ray')
|
||
o:depends('type', 'vless')
|
||
o:depends('type', 'xray')
|
||
|
||
o = s:option(Value, 'tls_host', translate('TLS Host'))
|
||
--o:depends("type", "trojan")
|
||
o:depends('tls', '1')
|
||
o.rmempty = true
|
||
|
||
-- XTLS
|
||
o = s:option(Flag, 'xtls', translate('XTLS'))
|
||
o.rmempty = true
|
||
o.default = '0'
|
||
o:depends({type = 'vless', tls = '1'})
|
||
o:depends({type = 'xray', tls = '1'})
|
||
|
||
-- Flow
|
||
o = s:option(ListValue, 'vless_flow', translate('Flow'))
|
||
for _, v in ipairs(flows) do
|
||
o:value(v, v)
|
||
end
|
||
o.rmempty = true
|
||
o.default = 'xtls-rprx-splice'
|
||
o:depends('xtls', '1')
|
||
|
||
-- [[ Mux ]]--
|
||
o = s:option(Flag, 'mux', translate('Mux'))
|
||
o.rmempty = true
|
||
o.default = '0'
|
||
o:depends('type', 'v2ray')
|
||
o:depends('type', 'vless')
|
||
|
||
o = s:option(Value, 'concurrency', translate('Concurrency'))
|
||
o.datatype = 'uinteger'
|
||
o.rmempty = true
|
||
o.default = '8'
|
||
o:depends('mux', '1')
|
||
|
||
-- [[NO self cert]]
|
||
|
||
o = s:option(Flag, 'fast_open', translate('TCP Fast Open'))
|
||
o.rmempty = true
|
||
o.default = '0'
|
||
o:depends('type', 'ssr')
|
||
o:depends('type', 'ss')
|
||
o:depends('type', 'trojan')
|
||
|
||
o = s:option(Flag, 'switch_enable', translate('Enable Auto Switch'))
|
||
o.rmempty = false
|
||
o.default = '1'
|
||
|
||
o = s:option(Value, 'local_port', translate('Local Port'))
|
||
o.datatype = 'port'
|
||
o.default = 1234
|
||
o.rmempty = false
|
||
|
||
if nixio.fs.access('/usr/bin/kcptun-client') then
|
||
kcp_enable = s:option(Flag, 'kcp_enable', translate('KcpTun Enable'), translate('bin:/usr/bin/kcptun-client'))
|
||
kcp_enable.rmempty = true
|
||
kcp_enable.default = '0'
|
||
kcp_enable:depends('type', 'ssr')
|
||
kcp_enable:depends('type', 'ss')
|
||
|
||
o = s:option(Value, 'kcp_port', translate('KcpTun Port'))
|
||
o.datatype = 'port'
|
||
o.default = 4000
|
||
function o.validate(self, value, section)
|
||
local kcp_file = '/usr/bin/kcptun-client'
|
||
local enable = kcp_enable:formvalue(section) or kcp_enable.disabled
|
||
if enable == kcp_enable.enabled then
|
||
if not fs.access(kcp_file) then
|
||
return nil, translate("Haven't a Kcptun executable file")
|
||
elseif not isKcptun(kcp_file) then
|
||
return nil, translate('Not a Kcptun executable file')
|
||
end
|
||
end
|
||
|
||
return value
|
||
end
|
||
o:depends('type', 'ssr')
|
||
o:depends('type', 'ss')
|
||
|
||
o = s:option(Value, 'kcp_password', translate('KcpTun Password'))
|
||
o.password = true
|
||
o:depends('type', 'ssr')
|
||
o:depends('type', 'ss')
|
||
|
||
o = s:option(Value, 'kcp_param', translate('KcpTun Param'))
|
||
o.default = '--nocomp'
|
||
o:depends('type', 'ssr')
|
||
o:depends('type', 'ss')
|
||
end
|
||
|
||
return m
|