protector

Documentation

Overview

Package protected is used for creating "protected" connections that bypass Android's VpnService

Index

• Constants
• Variables
• func Configure(protect Protect, dnsServer string)
• func Dial(network, addr string, timeout time.Duration) (net.Conn, error)
• func DialContext(ctx context.Context, network, addr string) (net.Conn, error)
• func DialUDP(network string, laddr, raddr *net.UDPAddr) (net.PacketConn, error)
• func ListenUDP(network string, laddr *net.UDPAddr) (net.PacketConn, error)
• func Resolve(network string, addr string) (*net.TCPAddr, error)
• func SetDNSServer(server string)
• func SplitHostPort(addr string) (string, int, error)
• type DNSRecord
• type DnsResponse
  • func DnsLookup(addr string, conn net.Conn) (*DnsResponse, error)
  • func (response *DnsResponse) PickRandomIP() (net.IP, error)
  • func (response *DnsResponse) PickRecord() (*DNSRecord, error)
• type Protect
• type ProtectedConn
  • func (conn *ProtectedConn) Close() (err error)
• type ProtectedConnBase
• type ProtectedPacketConn
  • func (c *ProtectedPacketConn) Close() error
  • func (c *ProtectedPacketConn) Write(b []byte) (int, error)

Constants

const (
	SO_MARK = 0x24
)

Variables

var SocketMark int

Functions

func Configure

func Configure(protect Protect, dnsServer string)

func Dial

func Dial(network, addr string, timeout time.Duration) (net.Conn, error)

func DialContext

func DialContext(ctx context.Context, network, addr string) (net.Conn, error)

Dial creates a new protected connection, it assumes that the address has already been resolved to an IPv4 address.

• syscall API calls are used to create and bind to the specified system device (this is primarily used for Android VpnService routing functionality)

func DialUDP

func DialUDP(network string, laddr, raddr *net.UDPAddr) (net.PacketConn, error)

func ListenUDP

func ListenUDP(network string, laddr *net.UDPAddr) (net.PacketConn, error)

func Resolve

func Resolve(network string, addr string) (*net.TCPAddr, error)

Resolve resolves the given address using a DNS lookup on a UDP socket protected by the currnet Protector.

func SetDNSServer

func SetDNSServer(server string)

func SplitHostPort

func SplitHostPort(addr string) (string, int, error)

wrapper around net.SplitHostPort that also converts uses strconv to convert the port to an int

Types

type DNSRecord

type DNSRecord struct {
	IP       net.IP
	ExpireAt time.Time
}

type DnsResponse

type DnsResponse struct {
	// contains filtered or unexported fields
}

func DnsLookup

func DnsLookup(addr string, conn net.Conn) (*DnsResponse, error)

dnsLookup is used whenever we need to conduct a DNS query over a given TCP connection

func (*DnsResponse) PickRandomIP

func (response *DnsResponse) PickRandomIP() (net.IP, error)

PickRandomIP picks a random IP address from a DNS response

func (*DnsResponse) PickRecord

func (response *DnsResponse) PickRecord() (*DNSRecord, error)

type Protect

type Protect func(fileDescriptor int) error

type ProtectedConn

type ProtectedConn struct {
	net.Conn
	ProtectedConnBase
}

func (*ProtectedConn) Close

func (conn *ProtectedConn) Close() (err error)

Close is used to destroy a protected connection

type ProtectedConnBase

type ProtectedConnBase struct {
	// contains filtered or unexported fields
}

type ProtectedPacketConn

type ProtectedPacketConn struct {
	ProtectedConnBase
	net.PacketConn
	// contains filtered or unexported fields
}

func (*ProtectedPacketConn) Close

func (c *ProtectedPacketConn) Close() error

func (*ProtectedPacketConn) Write

func (c *ProtectedPacketConn) Write(b []byte) (int, error)