teleport/lib/multiplexer/wrappers.go
Sasha Klizhentas f8dba76147 SSH/TLS multiplexer with Proxy protocol support
This commit aadds multiplexer library of SSH/TLS on the same
listener socket. The multiplexer detects the protocol by the first
3 bytes of the incoming connection and forwards wrapped
connection either to the SSH ot TLS listeners.

The library also supports PROXY line protocol
and wraps connection information with connection details
from the proxy line received by the server
2017-11-23 14:50:28 -08:00

101 lines
2.4 KiB
Go

/*
Copyright 2017 Gravitational, Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package multiplexer
import (
"bufio"
"context"
"net"
"github.com/gravitational/trace"
)
// Conn is a connection wrapper that supports
// communicating remote address from proxy protocol
// and replays first several bytes read during
// protocol detection
type Conn struct {
net.Conn
protocol int
proxyLine *ProxyLine
reader *bufio.Reader
}
// Read reads from connection
func (c *Conn) Read(p []byte) (int, error) {
return c.reader.Read(p)
}
// LocalAddr returns local address of the connection
func (c *Conn) LocalAddr() net.Addr {
if c.proxyLine != nil {
return &c.proxyLine.Destination
}
return c.Conn.LocalAddr()
}
// RemoteAddr returns remote address of the connection
func (c *Conn) RemoteAddr() net.Addr {
if c.proxyLine != nil {
return &c.proxyLine.Source
}
return c.Conn.RemoteAddr()
}
func newListener(parent context.Context, addr net.Addr) *Listener {
context, cancel := context.WithCancel(parent)
return &Listener{
addr: addr,
connC: make(chan *Conn),
cancel: cancel,
context: context,
}
}
// Listener is a listener that receives
// connections from multiplexer based on the connection type
type Listener struct {
addr net.Addr
connC chan *Conn
cancel context.CancelFunc
context context.Context
}
// Addr returns listener addr, the address of multiplexer listener
func (l *Listener) Addr() net.Addr {
return l.addr
}
// Accept accepts connections from parent multiplexer listener
func (l *Listener) Accept() (net.Conn, error) {
select {
case <-l.context.Done():
return nil, trace.ConnectionProblem(nil, "listener is closed")
case conn := <-l.connC:
if conn == nil {
return nil, trace.ConnectionProblem(nil, "listener is closed")
}
return conn, nil
}
}
// Close closes the listener, connections to multiplexer will hang
func (l *Listener) Close() error {
l.cancel()
return nil
}