mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-11-09 06:35:03 +03:00
MHSanaei
75f3702dd3
The panel's SOCKS5 egress for AmneziaWG outbounds bound the fixed 127.0.0.1:64900, and every generated socks bridge dialed that constant. 64900 sits inside Windows' dynamic port range, where the OS can reserve whole blocks (this host excludes 64885-64984), so on the Windows builds release.yml ships the listener could stay down and every AmneziaWG outbound with it. Listen now tries 64900 first and falls back to any free loopback port; bridges, the outbound probe and the port-conflict check use EgressPort(), the port actually held. Bridges are generated apart from the listener, so BuildSocksBridge records the port it wrote and the AmneziaWG job requests an Xray restart while the listener holds a different one. Where 64900 is free nothing changes. The job's restart request is two lines of wiring no test reaches; the staleness it acts on is pinned by TestBridgesStaleUntilRegeneratedForTheBoundPort.
82 lines
2.4 KiB
Go
82 lines
2.4 KiB
Go
package amneziawgnet
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net"
|
|
"strconv"
|
|
"testing"
|
|
)
|
|
|
|
// holdEgressBasePort occupies EgressBasePort the way another service would; a
|
|
// port the OS already refuses, such as a Windows reservation, needs no holder.
|
|
func holdEgressBasePort(t *testing.T) {
|
|
t.Helper()
|
|
ln, err := net.Listen("tcp", net.JoinHostPort("127.0.0.1", strconv.Itoa(EgressBasePort)))
|
|
if err != nil {
|
|
return
|
|
}
|
|
t.Cleanup(func() { ln.Close() })
|
|
}
|
|
|
|
// bridgePort is the port a socks bridge generated right now dials.
|
|
func bridgePort(t *testing.T) int {
|
|
t.Helper()
|
|
out, ok := BuildSocksBridge([]byte(`{"protocol":"amneziawg","tag":"awg-hop","settings":{}}`))
|
|
if !ok {
|
|
t.Fatal("bridge rejected")
|
|
}
|
|
var got struct {
|
|
Settings struct {
|
|
Port int `json:"port"`
|
|
} `json:"settings"`
|
|
}
|
|
if err := json.Unmarshal(out, &got); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
return got.Settings.Port
|
|
}
|
|
|
|
// Windows can reserve a port range covering EgressBasePort, and any host can run
|
|
// another service on it; the egress must still come up and report where.
|
|
func TestEgressListenFallsBackWhenBasePortIsTaken(t *testing.T) {
|
|
srv := GetEgressServer()
|
|
srv.Close()
|
|
t.Cleanup(srv.Close)
|
|
holdEgressBasePort(t)
|
|
|
|
if err := srv.Listen(); err != nil {
|
|
t.Fatalf("Listen with EgressBasePort taken: %v", err)
|
|
}
|
|
port := srv.Port()
|
|
if port == EgressBasePort {
|
|
t.Fatalf("Port() = %d, the taken EgressBasePort", port)
|
|
}
|
|
conn, err := net.Dial("tcp", net.JoinHostPort("127.0.0.1", strconv.Itoa(port)))
|
|
if err != nil {
|
|
t.Fatalf("egress not accepting on Port() %d: %v", port, err)
|
|
}
|
|
conn.Close()
|
|
}
|
|
|
|
// Xray's bridges are generated apart from the listener, so a listener that came
|
|
// up elsewhere must be reported until the bridges are regenerated for it.
|
|
func TestBridgesStaleUntilRegeneratedForTheBoundPort(t *testing.T) {
|
|
srv := GetEgressServer()
|
|
srv.Close()
|
|
t.Cleanup(srv.Close)
|
|
holdEgressBasePort(t)
|
|
|
|
if got := bridgePort(t); got != EgressBasePort {
|
|
t.Fatalf("bridge generated before Listen dials %d, want %d", got, EgressBasePort)
|
|
}
|
|
if err := srv.Listen(); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if !BridgesStale() {
|
|
t.Fatalf("bridges dial %d while the egress listens on %d, but BridgesStale() = false", EgressBasePort, srv.Port())
|
|
}
|
|
if got := bridgePort(t); got != srv.Port() || BridgesStale() {
|
|
t.Fatalf("regenerated bridge dials %d with BridgesStale() = %v, want %d and false", got, BridgesStale(), srv.Port())
|
|
}
|
|
}
|