131 lines
2.9 KiB
Go
131 lines
2.9 KiB
Go
package gost
|
|
|
|
import (
|
|
"net"
|
|
|
|
glob "github.com/gobwas/glob"
|
|
)
|
|
|
|
// Matcher is a generic pattern matcher,
|
|
// it gives the match result of the given pattern for specific v.
|
|
type Matcher interface {
|
|
Match(v string) bool
|
|
}
|
|
|
|
// NewMatcher creates a Matcher for the given pattern.
|
|
// The acutal Matcher depends on the pattern:
|
|
// IP Matcher if pattern is a valid IP address.
|
|
// CIDR Matcher if pattern is a valid CIDR address.
|
|
// Domain Matcher if both of the above are not.
|
|
func NewMatcher(pattern string) Matcher {
|
|
if pattern == "" {
|
|
return nil
|
|
}
|
|
if ip := net.ParseIP(pattern); ip != nil {
|
|
return IPMatcher(ip)
|
|
}
|
|
if _, inet, err := net.ParseCIDR(pattern); err == nil {
|
|
return CIDRMatcher(inet)
|
|
}
|
|
return DomainMatcher(pattern)
|
|
}
|
|
|
|
type ipMatcher struct {
|
|
ip net.IP
|
|
}
|
|
|
|
// IPMatcher creates a Matcher for a specific IP address.
|
|
func IPMatcher(ip net.IP) Matcher {
|
|
return &ipMatcher{
|
|
ip: ip,
|
|
}
|
|
}
|
|
|
|
func (m *ipMatcher) Match(ip string) bool {
|
|
if m == nil {
|
|
return false
|
|
}
|
|
return m.ip.Equal(net.ParseIP(ip))
|
|
}
|
|
|
|
type cidrMatcher struct {
|
|
ipNet *net.IPNet
|
|
}
|
|
|
|
// CIDRMatcher creates a Matcher for a specific CIDR notation IP address.
|
|
func CIDRMatcher(inet *net.IPNet) Matcher {
|
|
return &cidrMatcher{
|
|
ipNet: inet,
|
|
}
|
|
}
|
|
|
|
func (m *cidrMatcher) Match(ip string) bool {
|
|
if m == nil || m.ipNet == nil {
|
|
return false
|
|
}
|
|
return m.ipNet.Contains(net.ParseIP(ip))
|
|
}
|
|
|
|
type domainMatcher struct {
|
|
glob glob.Glob
|
|
}
|
|
|
|
// DomainMatcher creates a Matcher for a specific domain pattern,
|
|
// the pattern can be a plain domain such as 'example.com'
|
|
// or a wildcard such as '*.exmaple.com'.
|
|
func DomainMatcher(pattern string) Matcher {
|
|
return &domainMatcher{
|
|
glob: glob.MustCompile(pattern),
|
|
}
|
|
}
|
|
|
|
func (m *domainMatcher) Match(domain string) bool {
|
|
if m == nil || m.glob == nil {
|
|
return false
|
|
}
|
|
return m.glob.Match(domain)
|
|
}
|
|
|
|
// Bypass is a filter for address (IP or domain).
|
|
// It contains a list of matchers.
|
|
type Bypass struct {
|
|
matchers []Matcher
|
|
reverse bool
|
|
}
|
|
|
|
// NewBypass creates and initializes a new Bypass using matchers as its match rules.
|
|
// The rules will be reversed if the reversed is true.
|
|
func NewBypass(matchers []Matcher, reverse bool) *Bypass {
|
|
return &Bypass{
|
|
matchers: matchers,
|
|
reverse: reverse,
|
|
}
|
|
}
|
|
|
|
// NewBypassPatterns creates and initializes a new Bypass using matcher patterns as its match rules.
|
|
// The rules will be reversed if the reverse is true.
|
|
func NewBypassPatterns(patterns []string, reverse bool) *Bypass {
|
|
var matchers []Matcher
|
|
for _, pattern := range patterns {
|
|
if pattern != "" {
|
|
matchers = append(matchers, NewMatcher(pattern))
|
|
}
|
|
}
|
|
return NewBypass(matchers, reverse)
|
|
}
|
|
|
|
// Contains reports whether the bypass includes addr.
|
|
func (bp *Bypass) Contains(addr string) bool {
|
|
for _, matcher := range bp.matchers {
|
|
if matcher == nil {
|
|
continue
|
|
}
|
|
matched := matcher.Match(addr)
|
|
if (matched && !bp.reverse) ||
|
|
(!matched && bp.reverse) {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|