mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-10-25 07:15:01 +03:00
Emma Hermione
0b90dc2bed
A shadowsocks inbound with a TCP HTTP header was dropped from Mihomo subscriptions, although Mihomo's simple-obfs speaks the same wire format (#6735). Such a node is now emitted with plugin: obfs, mode http and the request Host header. Mihomo always requests GET /, and xray-core rejects a request whose path is not one of the header's paths, so only headers that accept / map; others stay dropped, as do non-shadowsocks protocols and the legacy Clash endpoint.
76 lines
2.5 KiB
Go
76 lines
2.5 KiB
Go
package sub
|
|
|
|
import (
|
|
"reflect"
|
|
"testing"
|
|
|
|
"github.com/mhsanaei/3x-ui/v3/internal/database/model"
|
|
)
|
|
|
|
// Clash has no shadowsocks tcp/http header, so the inbound path drops the node
|
|
// (applyTransport returns false) and the external-link path must drop it too,
|
|
// instead of handing mihomo a proxy that connects with the wrong obfuscation.
|
|
func TestClashExternalShadowsocksMatchesInboundPath(t *testing.T) {
|
|
const settings = `{"method":"aes-256-gcm","password":"inboundpw","clients":[{"password":"clientpw","email":"user"}]}`
|
|
// base64("aes-256-gcm:clientpw") — the SIP002 userinfo of the links below.
|
|
const userinfo = "YWVzLTI1Ni1nY206Y2xpZW50cHc"
|
|
|
|
tests := []struct {
|
|
name string
|
|
stream string
|
|
link string
|
|
wantDropped bool
|
|
}{
|
|
{
|
|
name: "plain tcp",
|
|
stream: `{"network":"tcp","security":"none"}`,
|
|
link: "ss://" + userinfo + "@203.0.113.1:8443?type=tcp#ss",
|
|
},
|
|
{
|
|
name: "tcp http header",
|
|
stream: `{"network":"tcp","security":"none","tcpSettings":{"header":{"type":"http","request":{"path":["/"],"headers":{"Host":["test"]}}}}}`,
|
|
link: "ss://" + userinfo + "@203.0.113.1:8443?type=tcp&headerType=http&host=test#ss",
|
|
wantDropped: false,
|
|
},
|
|
{
|
|
name: "tls",
|
|
stream: `{"network":"tcp","security":"tls","tlsSettings":{"serverName":"ss.sni"}}`,
|
|
link: "ss://" + userinfo + "@203.0.113.1:8443?type=tcp&security=tls&sni=ss.sni#ss",
|
|
},
|
|
}
|
|
|
|
svc := NewSubClashService(false, "", false, &SubService{})
|
|
client := model.Client{Password: "clientpw", Email: "user"}
|
|
|
|
for _, tc := range tests {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
inbound := &model.Inbound{
|
|
Listen: "203.0.113.1",
|
|
Port: 8443,
|
|
Protocol: model.Shadowsocks,
|
|
Remark: "ss",
|
|
Settings: settings,
|
|
StreamSettings: tc.stream,
|
|
}
|
|
|
|
fromInbound := svc.buildProxy(svc.SubService, inbound, client, svc.streamData(tc.stream), nil)
|
|
fromLink := svc.clashProxyFromExternal(tc.link, "external")
|
|
|
|
if tc.wantDropped {
|
|
if fromInbound != nil || fromLink != nil {
|
|
t.Fatalf("not representable in clash, want both dropped: inbound %#v, link %#v", fromInbound, fromLink)
|
|
}
|
|
return
|
|
}
|
|
if fromInbound == nil || fromLink == nil {
|
|
t.Fatalf("want a proxy from both paths: inbound %#v, link %#v", fromInbound, fromLink)
|
|
}
|
|
delete(fromInbound, "name")
|
|
delete(fromLink, "name")
|
|
if !reflect.DeepEqual(fromInbound, fromLink) {
|
|
t.Fatalf("inbound %#v != link %#v", fromInbound, fromLink)
|
|
}
|
|
})
|
|
}
|
|
}
|