net/https-dns-proxy/files/https-dns-proxy.init

   1 #!/bin/sh /etc/rc.common
   2 # Copyright 2019-2022 Stan Grishin (stangri@melmac.ca)
   3 # shellcheck disable=SC1091,SC2039,SC3043,SC3060
   4 PKG_VERSION='dev-test'
   5
   6 # shellcheck disable=SC2034
   7 START=80
   8 # shellcheck disable=SC2034
   9 USE_PROCD=1
  10
  11 if type extra_command 1>/dev/null 2>&1; then
  12         extra_command 'version' 'Show version information'
  13 else
  14 # shellcheck disable=SC2034
  15         EXTRA_COMMANDS='version'
  16 fi
  17
  18 readonly packageName='https-dns-proxy'
  19 readonly serviceName="$packageName $PKG_VERSION"
  20 readonly sharedMemoryOutput="/dev/shm/$packageName-output"
  21 readonly _OK_='\033[0;32m\xe2\x9c\x93\033[0m'
  22 readonly _FAIL_='\033[0;31m\xe2\x9c\x97\033[0m'
  23 readonly PROG=/usr/sbin/https-dns-proxy
  24 readonly DEFAULT_BOOTSTRAP='1.1.1.1,1.0.0.1,2606:4700:4700::1111,2606:4700:4700::1001,8.8.8.8,8.8.4.4,2001:4860:4860::8888,2001:4860:4860::8844'
  25 readonly canaryDomainsMozilla='use-application-dns.net'
  26 readonly canaryDomainsiCloud='mask.icloud.com mask-h2.icloud.com'
  27 readonly canaryDomains="$canaryDomainsMozilla $canaryDomainsiCloud"
  28 dnsmasqConfig=
  29 forceDNS=
  30 forceDNSPorts=
  31
  32 str_contains() { [ -n "$1" ] &&[ -n "$2" ] && [ "${1//$2}" != "$1" ]; }
  33 is_mac_address() { expr "$1" : '[0-9A-F][0-9A-F]:[0-9A-F][0-9A-F]:[0-9A-F][0-9A-F]:[0-9A-F][0-9A-F]:[0-9A-F][0-9A-F]:[0-9A-F][0-9A-F]$' >/dev/null; }
  34 is_ipv4() { expr "$1" : '[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*$' >/dev/null; }
  35 is_ipv6() { ! is_mac_address "$1" && str_contains "$1" ":"; }
  36 output() {
  37         local msg memmsg logmsg
  38         [ -t 1 ] && printf "%b" "$@"
  39         msg="${1//$serviceName /service }";
  40         if [ "$(printf "%b" "$msg" | wc -l)" -gt 0 ]; then
  41                 [ -s "$sharedMemoryOutput" ] && memmsg="$(cat "$sharedMemoryOutput")"
  42                 logmsg="$(printf "%b" "${memmsg}${msg}" | sed 's/\x1b\[[0-9;]*m//g')"
  43                 logger -t "$packageName" "$(printf "%b" "$logmsg")"
  44                 rm -f "$sharedMemoryOutput"
  45         else
  46                 printf "%b" "$msg" >> "$sharedMemoryOutput"
  47         fi
  48 }
  49 output_ok() { output "$_OK_"; }
  50 output_okn() { output "${_OK_}\\n"; }
  51 output_fail() { output "$_FAIL_"; }
  52 output_failn() { output "${_FAIL_}\\n"; }
  53 uci_add_list_if_new() {
  54         local PACKAGE="$1"
  55         local CONFIG="$2"
  56         local OPTION="$3"
  57         local VALUE="$4"
  58         local i
  59         [ -n "$PACKAGE" ] && [ -n "$CONFIG" ] && [ -n "$OPTION" ] && [ -n "$VALUE" ] || return 1
  60         for i in $(uci_get "$PACKAGE" "$CONFIG" "$OPTION"); do
  61                 [ "$i" = "$VALUE" ] && return 0
  62         done
  63         uci_add_list "$PACKAGE" "$CONFIG" "$OPTION" "$VALUE"
  64 }
  65 uci_changes() {
  66         local PACKAGE="$1"
  67         local CONFIG="$2"
  68         local OPTION="$3"
  69         /sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} changes "$PACKAGE${CONFIG:+.$CONFIG}${OPTION:+.$OPTION}"
  70 }
  71
  72 dnsmasq_restart() { [ -x /etc/init.d/dnsmasq ] || return 0; /etc/init.d/dnsmasq restart >/dev/null 2>&1; }
  73
  74 version() { echo "$PKG_VERSION"; }
  75
  76 xappend() { param="$param $1"; }
  77
  78 append_bool() {
  79         local section="$1"
  80         local option="$2"
  81         local value="$3"
  82         local default="${4:-0}"
  83         local _loctmp
  84         config_get_bool _loctmp "$section" "$option" "$default"
  85         [ "$_loctmp" -ne 0 ] && xappend "$value"
  86 }
  87
  88 append_parm() {
  89         local section="$1"
  90         local option="$2"
  91         local switch="$3"
  92         local default="$4"
  93         local _loctmp
  94         config_get _loctmp "$section" "$option" "$default"
  95         [ -n "$_loctmp" ] && xappend "$switch $_loctmp"
  96 }
  97
  98 append_counter() {
  99         local section="$1"
 100         local option="$2"
 101         local switch="$3"
 102         local default="${4:-0}"
 103         local _loctmp i
 104         config_get _loctmp "$section" "$option" "$default"
 105 # shellcheck disable=SC2086,SC2154
 106         for i in $(seq 1 $_loctmp); do
 107                 xappend '-v'
 108         done
 109 }
 110
 111 append_bootstrap() {
 112         local section="$1"
 113         local option="$2"
 114         local switch="$3"
 115         local default="$4"
 116         local _old_ifs="$IFS"
 117         local _loctmp _newtmp i
 118         config_get _loctmp "$section" "$option" "$default"
 119         [ -z "$_loctmp" ] && return 0
 120         IFS=" ,"
 121         for i in $_loctmp; do
 122                 if { [ "$ipv6_resolvers_only" -eq 0 ] && is_ipv4 "$i"; } || \
 123                         { [ "$ipv6_resolvers_only" -ne 0 ] && is_ipv6 "$i"; }; then
 124                         [ -z "$_newtmp" ] && _newtmp="$i" || _newtmp="${_newtmp},${i}"
 125                 fi
 126         done
 127         IFS="$_old_ifs"
 128         [ -n "$_newtmp" ] && xappend "$switch $_newtmp"
 129         [ "$ipv6_resolvers_only" -eq 0 ] && xappend '-4'
 130 }
 131
 132 start_instance() {
 133         local cfg="$1" param listen_addr listen_port ipv6_resolvers_only p
 134         config_get_bool ipv6_resolvers_only "$cfg" 'use_ipv6_resolvers_only' '0'
 135         append_parm "$cfg" 'resolver_url' '-r'
 136         append_parm "$cfg" 'polling_interval' '-i'
 137         append_parm "$cfg" 'listen_addr' '-a' '127.0.0.1'
 138         append_parm "$cfg" 'listen_port' '-p' "$port"
 139         append_parm "$cfg" 'dscp_codepoint' '-c'
 140         append_bootstrap "$cfg" 'bootstrap_dns' '-b' "$DEFAULT_BOOTSTRAP"
 141         append_parm "$cfg" 'user' '-u' 'nobody'
 142         append_parm "$cfg" 'group' '-g' 'nogroup'
 143         append_parm "$cfg" 'proxy_server' '-t'
 144         append_parm "$cfg" 'logfile' '-l'
 145         append_bool "$cfg" 'use_http1' '-x'
 146         append_counter "$cfg" 'verbosity' '-v' '0'
 147
 148         procd_open_instance
 149 # shellcheck disable=SC2086
 150         procd_set_param command $PROG $param
 151         procd_set_param stderr 1
 152         procd_set_param stdout 1
 153         procd_set_param respawn
 154         if [ "$forceDNS" -ne 0 ]; then
 155                 procd_open_data
 156                 json_add_array firewall
 157                 for p in $forceDNSPorts; do
 158                         if netstat -tuln | grep 'LISTEN' | grep ":${p}" >/dev/null 2>&1 || [ "$p" = '53' ]; then
 159                                 json_add_object ''
 160                                 json_add_string type redirect
 161                                 json_add_string target DNAT
 162                                 json_add_string src lan
 163                                 json_add_string proto 'tcp udp'
 164                                 json_add_string src_dport "$p"
 165                                 json_add_string dest_port "$p"
 166                                 json_add_boolean reflection 0
 167                                 json_close_object
 168                         else
 169                                 json_add_object ''
 170                                 json_add_string type rule
 171                                 json_add_string src lan
 172                                 json_add_string dest '*'
 173                                 json_add_string proto 'tcp udp'
 174                                 json_add_string dest_port "$p"
 175                                 json_add_string target REJECT
 176                                 json_close_object
 177                         fi
 178                 done
 179                 json_close_array
 180                 procd_close_data
 181         fi
 182         procd_close_instance
 183
 184         if [ "$?" ]; then
 185                 config_get listen_addr "$cfg" 'listen_addr' '127.0.0.1'
 186                 config_get listen_port "$cfg" 'listen_port' "$port"
 187                 if [ "$dnsmasqConfig" = '*' ]; then
 188                         config_load 'dhcp'
 189                         config_foreach dnsmasq_doh_server 'dnsmasq' 'add' "${listen_addr}" "${listen_port}"
 190                 elif [ -n "$dnsmasqConfig" ]; then
 191                         for i in $dnsmasqConfig; do
 192                                 if [ -n "$(uci_get 'dhcp' "@dnsmasq[$i]")" ]; then
 193                                         dnsmasq_doh_server "@dnsmasq[$i]" 'add' "${listen_addr}" "${listen_port}"
 194                                 elif [ -n "$(uci_get 'dhcp' "$i")" ]; then
 195                                         dnsmasq_doh_server "${i}" 'add' "${listen_addr}" "${listen_port}"
 196                                 fi
 197                         done
 198                 fi
 199                 output_ok
 200                 port="$((port+1))"
 201                 forceDNS=0
 202         else
 203                 output_fail
 204         fi
 205 }
 206
 207 start_service() {
 208         local port=5053
 209         output "Starting $serviceName "
 210         config_load "$packageName"
 211         config_get dnsmasqConfig        'config' 'update_dnsmasq_config' '*'
 212         config_get_bool forceDNS        'config' 'force_dns' '1'
 213         config_get forceDNSPorts        'config' 'force_dns_port' '53 853'
 214         dhcp_backup 'create'
 215         config_load "$packageName"
 216         config_foreach start_instance "$packageName"
 217         if [ -n "$(uci_changes dhcp)" ]; then
 218                 uci_commit 'dhcp'
 219                 dnsmasq_restart
 220         fi
 221         output "\\n"
 222 }
 223
 224 stop_service() {
 225         local s=0
 226         output "Stopping $serviceName "
 227         config_load "$packageName"
 228         config_get dnsmasqConfig 'config' 'update_dnsmasq_config' '*'
 229         dhcp_backup 'restore'
 230         if [ -n "$(uci_changes dhcp)" ]; then
 231                 uci_commit 'dhcp'
 232                 dnsmasq_restart || s=1
 233         fi
 234 # shellcheck disable=SC2015
 235         [ "$s" -eq 0 ] && output_okn || output_failn
 236 }
 237
 238 # shellcheck disable=SC1091
 239 service_triggers() {
 240         local iface
 241         . /lib/functions/network.sh
 242         network_flush_cache
 243         network_find_wan iface
 244         iface="${iface:-wan}"
 245         if [ -n "$iface" ]; then
 246                 procd_add_interface_trigger "interface.*" "$iface" "/etc/init.d/${packageName}" restart
 247         fi
 248         procd_add_config_trigger "config.change" "$packageName" "/etc/init.d/${packageName}" restart
 249 }
 250
 251 service_started() { procd_set_config_changed firewall; }
 252 service_stopped() { procd_set_config_changed firewall; }
 253
 254 dnsmasq_doh_server() {
 255         local cfg="$1" param="$2" address="${3:-127.0.0.1}" port="$4" i
 256         case "$param" in
 257                 add)
 258                         if [ "$forceDNS" -ne 0 ]; then
 259                                 for i in $canaryDomains; do
 260                                         uci_add_list 'dhcp' "$cfg" 'server' "/${i}/"
 261                                 done
 262                         fi
 263                         case $address in
 264                                 0.0.0.0|::ffff:0.0.0.0) address='127.0.0.1';;
 265                                 ::) address='::1';;
 266                         esac
 267                         uci_add_list_if_new 'dhcp' "$cfg" 'server' "${address}#${port}"
 268                 ;;
 269                 remove)
 270                         eval "$(ubus call service list "{ 'verbose': true, 'name': '$packageName' }" | jsonfilter -F '# ' -e 'TUPLES=@[*].instances[*].command[4,6]')"
 271                         for i in $TUPLES; do
 272                                 uci_remove_list 'dhcp' "$cfg" 'server' "$i"
 273                         done
 274                         for i in $canaryDomains; do
 275                                 uci_remove_list 'dhcp' "$cfg" 'server' "/${i}/"
 276                         done
 277                 ;;
 278         esac
 279 }
 280
 281 dnsmasq_create_server_backup() {
 282         local cfg="$1" i
 283         [ -n "$(uci_get 'dhcp' "$cfg")" ] || return 1
 284         if [ -z "$(uci_get 'dhcp' "$cfg" 'doh_backup_noresolv')" ]; then
 285                 if [ -z "$(uci_get 'dhcp' "$cfg" 'noresolv')" ]; then
 286                         uci_set 'dhcp' "$cfg" 'doh_backup_noresolv' '-1'
 287                 else
 288                         uci_set 'dhcp' "$cfg" 'doh_backup_noresolv' "$(uci_get 'dhcp' "$cfg" noresolv)"
 289                 fi
 290                 uci_set 'dhcp' "$cfg" 'noresolv' 1
 291         fi
 292         if [ -z "$(uci_get 'dhcp' "$cfg" 'doh_backup_server')" ]; then
 293                 if [ -z "$(uci_get 'dhcp' "$cfg" 'server')" ]; then
 294                         uci_add_list 'dhcp' "$cfg" 'doh_backup_server' ""
 295                 fi
 296                 for i in $(uci_get 'dhcp' "$cfg" 'server'); do
 297                         uci_add_list 'dhcp' "$cfg" 'doh_backup_server' "$i"
 298                         if [ "$i" = "$(echo "$i" | tr -d /\#)" ]; then
 299                                 uci_remove_list 'dhcp' "$cfg" 'server' "$i"
 300                         fi
 301                 done
 302         fi
 303         return 0
 304 }
 305
 306 dnsmasq_restore_server_backup() {
 307         local cfg="$1" i
 308         [ -n "$(uci_get 'dhcp' "$cfg")" ] || return 0
 309         if [ -n "$(uci_get 'dhcp' "$cfg" 'doh_backup_noresolv')" ]; then
 310                 if [ "$(uci_get 'dhcp' "$cfg" 'doh_backup_noresolv')" = "-1" ]; then
 311                         uci_remove 'dhcp' "$cfg" 'noresolv'
 312                 else
 313                         uci_set 'dhcp' "$cfg" 'noresolv' "$(uci_get 'dhcp' "$cfg" 'doh_backup_noresolv')"
 314                 fi
 315                 uci_remove 'dhcp' "$cfg" 'doh_backup_noresolv'
 316         fi
 317         if [ -n "$(uci_get 'dhcp' "$cfg" 'doh_backup_server')" ]; then
 318                 dnsmasq_doh_server "$cfg" 'remove'
 319                 for i in $(uci_get 'dhcp' "$cfg" 'doh_backup_server'); do
 320                         uci_add_list_if_new 'dhcp' "$cfg" 'server' "$i"
 321                 done
 322                 uci_remove 'dhcp' "$cfg" 'doh_backup_server'
 323         fi
 324 }
 325
 326 dhcp_backup() {
 327         local i
 328         config_load 'dhcp'
 329         case "$1" in
 330                 create)
 331                         if [ "$dnsmasqConfig" = "*" ]; then
 332                                 config_foreach dnsmasq_create_server_backup 'dnsmasq'
 333                         elif [ -n "$dnsmasqConfig" ]; then
 334                                 for i in $dnsmasqConfig; do
 335                                         if [ -n "$(uci_get 'dhcp' "@dnsmasq[$i]")" ]; then
 336                                                 dnsmasq_create_server_backup "@dnsmasq[$i]"
 337                                         elif [ -n "$(uci_get 'dhcp' "$i")" ]; then
 338                                                 dnsmasq_create_server_backup "$i"
 339                                         fi
 340                                 done
 341                         fi
 342                         ;;
 343                 restore)
 344                         config_foreach dnsmasq_restore_server_backup 'dnsmasq'
 345                         ;;
 346         esac
 347 }