An open API service indexing awesome lists of open source software.

https://github.com/choueric/depot

Proxy program using socks5
https://github.com/choueric/depot

golang socks5-proxy tunnel

Last synced: over 1 year ago
JSON representation

Proxy program using socks5

Awesome Lists containing this project

README

          

# depot

Proxy program using socks5 to create tunnel between client application and your
internal net host. For example, it's useful for connecting the transmission
on your host NAS by transmission-remote-gui on anywhere, as shown below:

```
--- client ---+------- server -------+------- local ------------------

client <--[socks5]--> depot-server <---> depot-local <--[localhost]--> app
```

Once the socks connection is established, the reqeust of `client` must be sent to
address `127.0.0.1:port` via this connection and it will be transferred to `app`
eventually. It seems `client` is communicating with `app` directly.

# Features

* Web interface to wathch status of connections.
* Socks5 connection (username/no-username)

# Internal

## connections

- control connection
- connect server and local
- send socks request from server to local
- send alive message from local to server
- socks connection
- connect client and server
- send socks request from client to server
- for pipe
- tunnel connection
- connect server and local
- for pipe
- app connection
- connect local and app
- for pipe

## process

1. Server listens on the control port and socks port.
```
+---+
| C |
+---+
+---+
| S |
+---+
```

2. Local connects to the control port, and establish a control connection by
handshaking. Local will wait for socks request on this connection.
l->c: "hello server"
c->l: "hello local"
```
+---+
| C |
+---+
+-+ handshake +-+
|c|<------------------->|l|
+-+ [ctrlConn] +-+
+---+
| S |
+---+
```

3. Server listens on the tunnel port, and waits for socks request.
```
+---+
| C |
+---+
+-+ +-+
|c|<------------------->|l|
+-+ [ctrlConn] +-+
+---+
| S |
+---+
+---+
| T |
+---+
```

4. Client connects to the socks port and establish an socks connection after
handshaking and authenticating.
```
+---+
| C |
+---+
+-+ +-+
|c|<------------------->|l|
+-+ [ctrlConn] +-+
+---+
| S |
+---+
+-+ handshake/auth +-+
|r|<----------------->|s|
+-+ [socksConn] +-+
+---+
| T |
+---+
```

5. Client sends the socks request to server. Server validates the request and
send it to local via control connection.
```
+---+
| C |
+---+
+-+ 2.socks request +-+
|c|<------------------->|l|
+-+ [ctrlConn] +-+
+---+
| S |
+---+
+-+ 1.socks request +-+
|r|<----------------->|s|
+-+ [socksConn] +-+
+---+
| T |
+---+
```

6. Local parses the socks request and open an app connection to the target
host:port (i.e. app). After that, local sends success reply to server, and
server sends reply to client.
```
+---+
| C |
+---+
+-+ 2.reply +-+
|c|<------------------->|l|
+-+ [ctrlConn] +-+
+---+ +-+ 1.connect +-+
| S | |b|<------------->|a|
+---+ +-+ [appConn] +-+
+-+ 3.reply +-+
|r|<----------------->|s|
+-+ [socksConn] +-+
+---+
| T |
+---+
```

7. Local connects to the tunnel port of server and establishs the tunnel
connection by sending the socks request back as a handshake.
```
+---+
| C |
+---+
+-+ +-+
|c|<------------------->|l|
+-+ [ctrlConn] +-+
+---+ +-+ +-+
| S | |b|<------------->|a|
+---+ +-+ [appConn] +-+
+-+ +-+
|r|<----------------->|s|
+-+ [socksConn] +-+
+---+
| T |
+---+
+-+ connect/handshake +-+
|t|<------------------->|d|
+-+ [tunnelConn] +-+
```

8. At this time, all necessary connetions are already established. Pipe them
together (s&t, d&b) and the connection between client and app will work
well. Client can communicate with app with socket r.
```
+---+
| C |
+---+
+-+ alive +-+
|c|<------------------->|l|
+-+ [ctrlConn] +-+
+---+
| S |
+---+
+-+ +-+ +-+ +-+ +-+ +-+
|r|<----------------->|s|-|t|<----------------->|d|-|b|<-------------->|a|
+-+ [socksConn] +-+ +-+ [tunnelConn] +-+ +-+ [appConn] +-+
+---+
| T |
+---+
```

The final pipeline is:

```
socksConn <--> tunnelConn <--> appConn
```

The ctrlConn is used by local to send alive message. And once local exits, this
connection would be closed. In the other hand, once server exits, local should
close all connections and try to connect to control port of server again and
again.

# TODO

- [X] local should try to connect to server repeatly and send heartbeat message
to server after connecting.
- [X] provide methods to watch the status of server and local.
- [ ] how to handle multiple socks reqeusts?

# License

See the `LICENSE` file.