shadowsocks/server.py

#!/usr/bin/env python

# Copyright (c) 2012 clowwindy
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to deal
# in the Software without restriction, including without limitation the rights
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
# copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
# SOFTWARE.

from __future__ import with_statement
import sys
if sys.version_info < (2, 6):
    import simplejson as json
else:
    import json
import struct
import string
import hashlib
import os
import logging
import getopt
import socket


def get_table(key):
    m = hashlib.md5()
    m.update(key)
    s = m.digest()
    (a, b) = struct.unpack('<QQ', s)
    table = [c for c in string.maketrans('', '')]
    for i in xrange(1, 1024):
        table.sort(lambda x, y: int(a % (ord(x) + i) - a % (ord(y) + i)))
    return table


def encrypt(data):
    return data.translate(encrypt_table)


def decrypt(data):
    return data.translate(decrypt_table)


class RemoteHandler(object):
    def __init__(self, conn, local_handler):
        self.conn = conn
        self.local_handler = local_handler
        conn.on('connect', self.on_connect)
        conn.on('data', self.on_data)
        conn.on('close', self.on_close)
        conn.on('end', self.on_end)
        conn.connect(local_handler.remote_addr_pair)

    def on_connect(self, s):
        for piece in self.local_handler.cached_pieces:
            self.conn.write(decrypt(piece))
        # TODO write cached pieces
        self.local_handler.stage = 5

    def on_data(self, s, data):
        data = encrypt(data)
        self.local_handler.conn.write(data)

    def on_close(self, s):
        # self.local_handler.conn.end()
        pass

    def on_end(self, s):
        self.local_handler.conn.end()


class LocalHandler(object):
    def on_data(self, s, data):
        if self.stage == 5:
            data = decrypt(data)
            self.remote_handler.conn.write(data)
            return
        if self.stage == 0:
            try:
                addrtype = ord(data[0])
                # TODO check cmd == 1
                if addrtype == 1:
                    remote_addr = socket.inet_ntoa(data[1:5])
                    remote_port = data[5:7]
                    header_length = 7
                elif addrtype == 4:
                    remote_addr = socket.inet_ntop(data[1:17])
                    remote_port = data[17:19]
                    header_length = 19
                elif addrtype == 3:
                    addr_len = ord(data[1])
                    remote_addr = data[2:2 + addr_len]
                    remote_port = data[2 + addr_len:2 + addr_len + 2]
                    header_length = 2 + addr_len + 2
                else:
                    # TODO check addrtype in (1, 3, 4)
                    raise
                remote_port = struct.unpack('>H', remote_port)[0]
                self.remote_addr_pair = (remote_addr, remote_port)
                logging.info('connecting %s:%d' % self.remote_addr_pair)
                remote_conn = ssloop.Socket()
                self.remote_handler = RemoteHandler(remote_conn, self)

                if len(data) > header_length:
                    self.cached_pieces.append(data[header_length:])

                # TODO save other bytes
                self.stage = 4
                return
            except:
                import traceback
                traceback.print_exc()

        if self.stage == 4:
            self.cached_pieces.append(data)

    def on_end(self, s):
        if self.remote_handler:
            self.remote_handler.conn.end()

    def on_close(self, s):
        pass
        # self.remote_handler.conn.end()

    def __init__(self, conn):
        self.stage = 0
        self.remote = None
        self.addr_len = 0
        self.addr_to_send = ''
        self.conn = conn
        self.cached_pieces = []

        conn.on('data', self.on_data)
        conn.on('end', self.on_end)
        conn.on('close', self.on_close)


def on_connection(s, conn):
    LocalHandler(conn)

if __name__ == '__main__':
    os.chdir(os.path.dirname(__file__) or '.')
    sys.path.append('./ssloop')
    import ssloop
    print 'shadowsocks v2.0'

    with open('config.json', 'rb') as f:
        config = json.load(f)
    PORT = config['server_port']
    KEY = config['password']

    argv = sys.argv[1:]
    if '-6' in sys.argv[1:]:
        argv.remove('-6')

    optlist, args = getopt.getopt(argv, 'p:k:')
    for key, value in optlist:
        if key == '-p':
            PORT = int(value)
        elif key == '-k':
            KEY = value

    logging.basicConfig(level=logging.INFO, format='%(asctime)s %(levelname)-8s %(message)s',
                        datefmt='%Y-%m-%d %H:%M:%S', filemode='a+')

    encrypt_table = ''.join(get_table(KEY))
    decrypt_table = string.maketrans(encrypt_table, string.maketrans('', ''))
    try:
        logging.info("starting server at port %d ..." % PORT)
        loop = ssloop.instance()
        s = ssloop.Server(('0.0.0.0', PORT))
        s.on('connection', on_connection)
        s.listen()
        loop.start()
    except KeyboardInterrupt:
        sys.exit(0)