tunnel-please/server/http.go

package server

import (
	"bufio"
	"bytes"
	"errors"
	"fmt"
	"golang.org/x/net/context"
	"log"
	"net"
	"strconv"
	"strings"
	"time"
	"tunnel_pls/session"
	"tunnel_pls/utils"
)

var redirectTLS bool = false

func NewHTTPServer() error {
	listener, err := net.Listen("tcp", ":80")
	if err != nil {
		return errors.New("Error listening: " + err.Error())
	}
	if utils.Getenv("tls_enabled") == "true" && utils.Getenv("tls_redirect") == "true" {
		redirectTLS = true
	}
	go func() {
		for {
			conn, err := listener.Accept()
			if err != nil {
				if errors.Is(err, net.ErrClosed) {
					return
				}
				log.Printf("Error accepting connection: %v", err)
				continue
			}

			go Handler(conn)
		}
	}()
	return nil
}

func Handler(conn net.Conn) {
	reader := bufio.NewReader(conn)
	headers, err := peekUntilHeaders(reader, 8192)
	if err != nil {
		log.Println("Failed to peek headers:", err)
		return
	}

	host := strings.Split(parseHostFromHeader(headers), ".")
	if len(host) < 1 {
		conn.Write([]byte("HTTP/1.1 400 Bad Request\r\n\r\n"))
		log.Println("Bad Request")
		conn.Close()
		return
	}

	if len(host) < 1 {
		conn.Write([]byte("HTTP/1.1 400 Bad Request\r\n\r\n"))
		conn.Close()
		return
	}
	slug := host[0]

	if redirectTLS {
		conn.Write([]byte("HTTP/1.1 301 Moved Permanently\r\n" +
			fmt.Sprintf("Location: https://%s.%s/\r\n", slug, utils.Getenv("domain")) +
			"Content-Length: 0\r\n" +
			"Connection: close\r\n" +
			"\r\n"))
		conn.Close()
		return
	}

	sshSession, ok := session.Clients[slug]
	if !ok {
		conn.Write([]byte("HTTP/1.1 400 Bad Request\r\n\r\n"))
		conn.Close()
		return
	}
	keepalive, timeout := parseConnectionDetails(headers)
	var ctx context.Context
	var cancel context.CancelFunc
	if keepalive {
		if timeout >= 300 {
			timeout = 300
		}
		ctx, cancel = context.WithDeadline(context.Background(), time.Now().Add(time.Duration(timeout)*time.Second))
	} else {
		ctx, cancel = context.WithDeadline(context.Background(), time.Now().Add(5*time.Second))
	}

	sshSession.HandleForwardedConnection(session.UserConnection{
		Reader:  reader,
		Writer:  conn,
		Context: ctx,
		Cancel:  cancel,
	}, sshSession.Connection)
	return
}

func peekUntilHeaders(reader *bufio.Reader, maxBytes int) ([]byte, error) {
	var buf []byte
	for {
		n := len(buf) + 1
		if n > maxBytes {
			return buf, nil
		}

		peek, err := reader.Peek(n)
		if err != nil {
			return nil, err
		}
		buf = peek

		if bytes.Contains(buf, []byte("\r\n\r\n")) {
			return buf, nil
		}
	}
}

func parseHostFromHeader(data []byte) string {
	lines := strings.Split(string(data), "\r\n")
	for _, line := range lines {
		if strings.HasPrefix(strings.ToLower(line), "host:") {
			return strings.TrimSpace(strings.TrimPrefix(line, "Host:"))
		}
	}
	return ""
}

func parseConnectionDetails(data []byte) (keepAlive bool, timeout int) {
	keepAlive = false
	timeout = 30

	lines := strings.Split(string(data), "\r\n")

	for _, line := range lines {
		if strings.HasPrefix(strings.ToLower(line), "connection:") {
			value := strings.TrimSpace(strings.TrimPrefix(strings.ToLower(line), "connection:"))
			keepAlive = (value == "keep-alive")
			break
		}
	}

	if keepAlive {
		for _, line := range lines {
			if strings.HasPrefix(strings.ToLower(line), "keep-alive:") {
				value := strings.TrimSpace(strings.TrimPrefix(line, "Keep-Alive:"))

				if strings.Contains(value, "timeout=") {
					parts := strings.Split(value, ",")
					for _, part := range parts {
						part = strings.TrimSpace(part)
						if strings.HasPrefix(part, "timeout=") {
							timeoutStr := strings.TrimPrefix(part, "timeout=")
							if t, err := strconv.Atoi(timeoutStr); err == nil {
								timeout = t
							}
						}
					}
				}
				break
			}
		}
	}

	return keepAlive, timeout
}