1 #!/bin/sh /etc/rc.common
3 # Copyright (C) 2017 Yousong Zhou <yszhou4tech@gmail.com>
5 # This is free software, licensed under the GNU General Public License v3.
6 # See /LICENSE for more information.
12 ss_confdir
=/var
/etc
/shadowsocks-libev
18 if ss_mkjson_
"$@" >>$confjson; then
19 sed -i -e '/^\s*$/d' -e '2,$s/^/\t/' -e '$s/,$//' "$confjson"
20 echo "}" >>"$confjson"
35 ss_mkjson_server_conf
() {
38 config_get cfgserver
"$cfg" server
39 [ -n "$cfgserver" ] ||
return 1
40 eval "$(validate_server_section "$cfg" ss_validate_mklocal)"
41 validate_server_section
"$cfgserver" ||
return 1
42 [ "$disabled" = 0 ] ||
return 1
43 ss_mkjson_server_conf_
"$cfgserver"
46 ss_mkjson_server_conf_
() {
47 [ -n "$server_port" ] ||
return 1
48 password
="${password//\"/\\\"}"
50 ${server:+${q}server${q}: ${q}$server${q},}
51 "server_port": $server_port,
52 ${method:+${q}method${q}: ${q}$method${q},}
53 ${key:+${q}key${q}: ${q}$key${q},}
54 ${password:+${q}password${q}: ${q}$password${q},}
58 ss_mkjson_common_conf
() {
59 [ "$ipv6_first" = 0 ] && ipv6_first
=false || ipv6_first
=true
60 [ "$fast_open" = 0 ] && fast_open
=false || fast_open
=true
61 [ "$reuse_port" = 0 ] && reuse_port
=false || reuse_port
=true
64 "ipv6_first": $ipv6_first,
65 "fast_open": $fast_open,
66 "reuse_port": $reuse_port,
67 ${local_address:+${q}local_address${q}: ${q}$local_address${q},}
68 ${local_port:+${q}local_port${q}: $local_port,}
69 ${mode:+${q}mode${q}: ${q}$mode${q},}
70 ${mtu:+${q}mtu${q}: $mtu,}
71 ${timeout:+${q}timeout${q}: $timeout,}
72 ${user:+${q}user${q}: ${q}$user${q},}
76 ss_mkjson_ss_local_conf
() {
80 ss_mkjson_ss_redir_conf
() {
81 ss_mkjson_server_conf ||
return 1
82 [ "$disable_sni" = 0 ] && disable_sni
=false || disable_sni
=true
84 "disable_sni": $disable_sni,
88 ss_mkjson_ss_server_conf
() {
89 ss_mkjson_server_conf_
92 ss_mkjson_ss_tunnel_conf
() {
93 ss_mkjson_server_conf ||
return 1
94 [ -n "$tunnel_address" ] ||
return 1
96 ${tunnel_address:+${q}tunnel_address${q}: ${q}$tunnel_address${q},}
103 local bin
="$ss_bindir/${cfgtype/_/-}"
104 local confjson
="$ss_confdir/$cfgtype.$cfg.json"
106 [ -x "$bin" ] ||
return
107 eval "$("validate_
${cfgtype}_section
" "$cfg" ss_validate_mklocal)"
108 "validate_${cfgtype}_section" "$cfg" ||
return 1
109 [ "$disabled" = 0 ] ||
return
112 ss_mkjson_common_conf \
113 ss_mkjson_
${cfgtype}_conf \
115 procd_open_instance
"$cfgtype.$cfg"
116 procd_set_param
command "$bin" -c "$confjson"
117 [ "$verbose" = 0 ] || procd_append_param
command -v
118 [ -z "$bind_address" ] || procd_append_param
command -b "$bind_address"
119 [ -z "$manager_address" ] || procd_append_param
command --manager-address "$manager_address"
120 procd_set_param
file "$confjson"
121 procd_set_param respawn
128 local cfgserver server
130 if [ "$cfgtype" = ss_redir
]; then
131 config_get cfgserver
"$cfg" server
132 config_get server
"$cfgserver" server
133 ss_redir_servers
="$ss_redir_servers $server"
134 if [ "$mode" = tcp_only
-o "$mode" = "tcp_and_udp" ]; then
135 eval "ss_rules_redir_tcp_$cfg=$local_port"
137 if [ "$mode" = udp_only
-o "$mode" = "tcp_and_udp" ]; then
138 eval "ss_rules_redir_udp_$cfg=$local_port"
145 local bin
="$ss_bindir/ss-rules"
147 local local_port_tcp local_port_udp
150 [ -x "$bin" ] ||
return 1
151 config_get cfgtype
"$cfg" TYPE
152 [ "$cfgtype" = ss_rules
] ||
return 1
154 eval "$(validate_ss_rules_section "$cfg" ss_validate_mklocal)"
155 validate_ss_rules_section
"$cfg" ||
return 1
156 [ "$disabled" = 0 ] ||
return 1
158 eval local_port_tcp
="\$ss_rules_redir_tcp_$redir_tcp"
159 eval local_port_udp
="\$ss_rules_redir_udp_$redir_udp"
160 [ -n "$local_port_tcp" -o -n "$local_port_udp" ] ||
return 1
161 ss_redir_servers
="$(echo "$ss_redir_servers" | tr ' ' '\n' | sort -u)"
162 [ "$dst_forward_recentrst" = 0 ] || args
="$args --dst-forward-recentrst"
165 -s "$ss_redir_servers" \
166 -l "$local_port_tcp" \
167 -L "$local_port_udp" \
168 --src-default "$src_default" \
169 --dst-default "$dst_default" \
170 --local-default "$local_default" \
171 --dst-bypass-file "$dst_ips_bypass_file" \
172 --dst-forward-file "$dst_ips_forward_file" \
173 --dst-bypass "$dst_ips_bypass" \
174 --dst-forward "$dst_ips_forward" \
175 --src-bypass "$src_ips_bypass" \
176 --src-forward "$src_ips_forward" \
177 --src-checkdst "$src_ips_checkdst" \
178 --ifnames "$ifnames" \
179 --ipt-extra "$ipt_args" \
187 mkdir
-p "$ss_confdir"
188 config_load shadowsocks-libev
189 for cfgtype
in ss_local ss_redir ss_server ss_tunnel
; do
190 config_foreach ss_xxx
"$cfgtype" "$cfgtype"
196 local bin
="$ss_bindir/ss-rules"
198 [ -x "$bin" ] && "$bin" -f
203 procd_add_reload_interface_trigger wan
204 procd_add_reload_trigger shadowsocks-libev
206 validate_server_section
207 validate_ss_local_section
208 validate_ss_redir_section
209 validate_ss_rules_section
210 validate_ss_server_section
211 validate_ss_tunnel_section
215 ss_validate_mklocal
() {
219 for tuple
in "$@"; do
220 opts
="${tuple%%:*} $opts"
222 [ -z "$opts" ] ||
echo "local $opts"
226 uci_validate_section shadowsocks-libev
"$@"
229 validate_common_server_options_
() {
230 local cfgtype
="$1"; shift
231 local cfg
="$1"; shift
232 local func
="$1"; shift
233 local stream_methods
='"table", "rc4", "rc4-md5", "aes-128-cfb", "aes-192-cfb", "aes-256-cfb", "aes-128-ctr", "aes-192-ctr", "aes-256-ctr", "bf-cfb", "camellia-128-cfb", "camellia-192-cfb", "camellia-256-cfb", "salsa20", "chacha20", "chacha20-ietf"'
234 local aead_methods
='"aes-128-gcm", "aes-192-gcm", "aes-256-gcm", "chacha20-ietf-poly1305", "xchacha20-ietf-poly1305"'
236 "${func:-ss_validate}" "$cfgtype" "$cfg" "$@" \
242 "method:or($stream_methods, $aead_methods)"
245 validate_common_client_options_
() {
246 validate_common_options_
"$@" \
247 'server:uci("shadowsocks-libev", "@server")' \
248 'local_address:host:0.0.0.0' \
252 validate_common_options_
() {
253 local cfgtype
="$1"; shift
254 local cfg
="$1"; shift
255 local func
="$1"; shift
257 "${func:-ss_validate}" "$cfgtype" "$cfg" "$@" \
260 'ipv6_first:bool:0' \
261 'reuse_port:bool:0' \
263 'mode:or("tcp_only", "udp_only", "tcp_and_udp"):tcp_only' \
269 validate_server_section
() {
270 validate_common_server_options_ server
"$1" "${2}"
273 validate_ss_local_section
() {
274 validate_common_client_options_ ss_local
"$1" "${2}"
277 validate_ss_redir_section
() {
278 validate_common_client_options_ ss_redir
"$1" \
283 validate_ss_rules_section
() {
284 "${2:-ss_validate}" ss_rules
"$1" \
286 'redir_tcp:uci("shadowsocks-libev", "@ss_redir")' \
287 'redir_udp:uci("shadowsocks-libev", "@ss_redir")' \
288 'src_ips_bypass:or(ip4addr,cidr4)' \
289 'src_ips_forward:or(ip4addr,cidr4)' \
290 'src_ips_checkdst:or(ip4addr,cidr4)' \
291 'dst_ips_bypass_file:file' \
292 'dst_ips_bypass:or(ip4addr,cidr4)' \
293 'dst_ips_forward_file:file' \
294 'dst_ips_forward:or(ip4addr,cidr4)' \
295 'src_default:or("bypass", "forward", "checkdst"):checkdst' \
296 'dst_default:or("bypass", "forward"):bypass' \
297 'local_default:or("bypass", "forward", "checkdst"):bypass' \
298 'dst_forward_recentrst:bool:0' \
299 'ifnames:maxlength(15)' \
303 validate_ss_server_section
() {
304 validate_common_server_options_ ss_server
"$1" \
305 validate_common_options_ \
307 'bind_address:ipaddr' \
308 'manager_address:host'
311 validate_ss_tunnel_section
() {
312 validate_common_client_options_ ss_tunnel
"$1" \
314 'tunnel_address:regex(".+\:[0-9]+")'