mirror of
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake.git
synced 2025-10-13 20:11:19 -04:00
244 lines
7 KiB
Go
244 lines
7 KiB
Go
/*
|
|
Broker acts as the HTTP signaling channel.
|
|
It matches clients and snowflake proxies by passing corresponding
|
|
SessionDescriptions in order to negotiate a WebRTC connection.
|
|
|
|
TODO(serene): This code is currently the absolute minimum required to
|
|
cause a successful negotiation.
|
|
It's otherwise very unsafe and problematic, and needs quite some work...
|
|
*/
|
|
package snowflake_broker
|
|
|
|
import (
|
|
"container/heap"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"log"
|
|
"net"
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
const (
|
|
ClientTimeout = 10
|
|
ProxyTimeout = 10
|
|
)
|
|
|
|
type BrokerContext struct {
|
|
snowflakes *SnowflakeHeap
|
|
// Map keeping track of snowflakeIDs required to match SDP answers from
|
|
// the second http POST.
|
|
snowflakeMap map[string]*Snowflake
|
|
proxyPolls chan *ProxyPoll
|
|
}
|
|
|
|
func NewBrokerContext() *BrokerContext {
|
|
snowflakes := new(SnowflakeHeap)
|
|
heap.Init(snowflakes)
|
|
return &BrokerContext{
|
|
snowflakes: snowflakes,
|
|
snowflakeMap: make(map[string]*Snowflake),
|
|
proxyPolls: make(chan *ProxyPoll),
|
|
}
|
|
}
|
|
|
|
type SnowflakeHandler struct {
|
|
*BrokerContext
|
|
h func(*BrokerContext, http.ResponseWriter, *http.Request)
|
|
}
|
|
|
|
func (sh SnowflakeHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
|
|
sh.h(sh.BrokerContext, w, r)
|
|
}
|
|
|
|
// Proxies may poll for client offers concurrently.
|
|
type ProxyPoll struct {
|
|
id string
|
|
offerChannel chan []byte
|
|
}
|
|
|
|
// Registers a Snowflake and waits for some Client to send an offer,
|
|
// as part of the polling logic of the proxy handler.
|
|
func (ctx *BrokerContext) RequestOffer(id string) []byte {
|
|
request := new(ProxyPoll)
|
|
request.id = id
|
|
request.offerChannel = make(chan []byte)
|
|
ctx.proxyPolls <- request
|
|
// Block until an offer is available...
|
|
offer := <-request.offerChannel
|
|
return offer
|
|
}
|
|
|
|
// goroutine which match proxies to clients.
|
|
// Safely processes proxy requests, responding to them with either an available
|
|
// client offer or nil on timeout / none are available.
|
|
func (ctx *BrokerContext) Broker() {
|
|
for request := range ctx.proxyPolls {
|
|
snowflake := ctx.AddSnowflake(request.id)
|
|
// Wait for a client to avail an offer to the snowflake.
|
|
go func(request *ProxyPoll) {
|
|
select {
|
|
case offer := <-snowflake.offerChannel:
|
|
log.Println("Passing client offer to snowflake proxy.")
|
|
request.offerChannel <- offer
|
|
case <-time.After(time.Second * ProxyTimeout):
|
|
// This snowflake is no longer available to serve clients.
|
|
heap.Remove(ctx.snowflakes, snowflake.index)
|
|
delete(ctx.snowflakeMap, snowflake.id)
|
|
request.offerChannel <- nil
|
|
}
|
|
}(request)
|
|
}
|
|
}
|
|
|
|
// Create and add a Snowflake to the heap.
|
|
func (ctx *BrokerContext) AddSnowflake(id string) *Snowflake {
|
|
snowflake := new(Snowflake)
|
|
snowflake.id = id
|
|
snowflake.clients = 0
|
|
snowflake.offerChannel = make(chan []byte)
|
|
snowflake.answerChannel = make(chan []byte)
|
|
heap.Push(ctx.snowflakes, snowflake)
|
|
ctx.snowflakeMap[id] = snowflake
|
|
return snowflake
|
|
}
|
|
|
|
func robotsTxtHandler(w http.ResponseWriter, r *http.Request) {
|
|
w.Header().Set("Content-Type", "text/plain; charset=utf-8")
|
|
w.Write([]byte("User-agent: *\nDisallow:\n"))
|
|
}
|
|
|
|
func ipHandler(w http.ResponseWriter, r *http.Request) {
|
|
remoteAddr := r.RemoteAddr
|
|
if net.ParseIP(remoteAddr).To4() == nil {
|
|
remoteAddr = "[" + remoteAddr + "]"
|
|
}
|
|
w.Header().Set("Content-Type", "text/plain; charset=utf-8")
|
|
w.Write([]byte(remoteAddr))
|
|
}
|
|
|
|
// Return early if it's CORS preflight.
|
|
func isPreflight(w http.ResponseWriter, r *http.Request) bool {
|
|
w.Header().Set("Access-Control-Allow-Origin", "*")
|
|
w.Header().Set("Access-Control-Allow-Headers", "Origin, X-Session-ID")
|
|
if "OPTIONS" == r.Method {
|
|
return true
|
|
}
|
|
return false
|
|
}
|
|
|
|
/*
|
|
Expects a WebRTC SDP offer in the Request to give to an assigned
|
|
snowflake proxy, which responds with the SDP answer to be sent in
|
|
the HTTP response back to the client.
|
|
*/
|
|
func clientHandler(ctx *BrokerContext, w http.ResponseWriter, r *http.Request) {
|
|
offer, err := ioutil.ReadAll(r.Body)
|
|
if nil != err {
|
|
log.Println("Invalid data.")
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
return
|
|
}
|
|
w.Header().Set("Access-Control-Allow-Origin", "*")
|
|
w.Header().Set("Access-Control-Allow-Headers", "X-Session-ID")
|
|
|
|
// Find the most available snowflake proxy, and pass the offer to it.
|
|
// TODO: Needs improvement - maybe shouldn't immediately fail?
|
|
if ctx.snowflakes.Len() <= 0 {
|
|
log.Println("Client: No snowflake proxies available.")
|
|
w.WriteHeader(http.StatusServiceUnavailable)
|
|
return
|
|
}
|
|
snowflake := heap.Pop(ctx.snowflakes).(*Snowflake)
|
|
snowflake.offerChannel <- offer
|
|
|
|
// Wait for the answer to be returned on the channel.
|
|
select {
|
|
case answer := <-snowflake.answerChannel:
|
|
log.Println("Client: Retrieving answer")
|
|
w.Write(answer)
|
|
|
|
case <-time.After(time.Second * ClientTimeout):
|
|
log.Println("Client: Timed out.")
|
|
w.WriteHeader(http.StatusGatewayTimeout)
|
|
w.Write([]byte("timed out waiting for answer!"))
|
|
}
|
|
// Remove from the snowflake map whether answer was sent or not, because
|
|
// this client request is now over.
|
|
delete(ctx.snowflakeMap, snowflake.id)
|
|
}
|
|
|
|
/*
|
|
For snowflake proxies to request a client from the Broker.
|
|
*/
|
|
func proxyHandler(ctx *BrokerContext, w http.ResponseWriter, r *http.Request) {
|
|
if isPreflight(w, r) {
|
|
return
|
|
}
|
|
id := r.Header.Get("X-Session-ID")
|
|
body, err := ioutil.ReadAll(r.Body)
|
|
if nil != err {
|
|
log.Println("Invalid data.")
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
return
|
|
}
|
|
if string(body) != id { // Mismatched IDs!
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
}
|
|
log.Println("Received snowflake: ", id)
|
|
// Wait for a client to avail an offer to the snowflake, or timeout if nil.
|
|
offer := ctx.RequestOffer(id)
|
|
if nil == offer {
|
|
log.Println("Proxy " + id + " did not receive a Client offer.")
|
|
w.WriteHeader(http.StatusGatewayTimeout)
|
|
return
|
|
}
|
|
log.Println("Passing client offer to snowflake.")
|
|
w.Write(offer)
|
|
}
|
|
|
|
/*
|
|
Expects snowflake proxes which have previously successfully received
|
|
an offer from proxyHandler to respond with an answer in an HTTP POST,
|
|
which the broker will pass back to the original client.
|
|
*/
|
|
func answerHandler(ctx *BrokerContext, w http.ResponseWriter, r *http.Request) {
|
|
if isPreflight(w, r) {
|
|
return
|
|
}
|
|
id := r.Header.Get("X-Session-ID")
|
|
snowflake, ok := ctx.snowflakeMap[id]
|
|
if !ok || nil == snowflake {
|
|
// The snowflake took too long to respond with an answer,
|
|
// and the designated client is no longer around / recognized by the Broker.
|
|
w.WriteHeader(http.StatusGone)
|
|
return
|
|
}
|
|
body, err := ioutil.ReadAll(r.Body)
|
|
if nil != err || nil == body || len(body) <= 0 {
|
|
log.Println("Invalid data.")
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
return
|
|
}
|
|
log.Println("Received answer: ", body)
|
|
snowflake.answerChannel <- body
|
|
}
|
|
|
|
func debugHandler(ctx *BrokerContext, w http.ResponseWriter, r *http.Request) {
|
|
s := fmt.Sprintf("current: %d", ctx.snowflakes.Len())
|
|
w.Write([]byte(s))
|
|
}
|
|
|
|
func init() {
|
|
ctx := NewBrokerContext()
|
|
|
|
go ctx.Broker()
|
|
|
|
http.HandleFunc("/robots.txt", robotsTxtHandler)
|
|
http.HandleFunc("/ip", ipHandler)
|
|
|
|
http.Handle("/client", SnowflakeHandler{ctx, clientHandler})
|
|
http.Handle("/proxy", SnowflakeHandler{ctx, proxyHandler})
|
|
http.Handle("/answer", SnowflakeHandler{ctx, answerHandler})
|
|
http.Handle("/debug", SnowflakeHandler{ctx, debugHandler})
|
|
}
|