mirror of
https://github.com/lkddi/Xboard.git
synced 2026-04-03 10:30:51 +08:00
358 lines
13 KiB
PHP
358 lines
13 KiB
PHP
<?php
|
|
|
|
namespace App\Protocols;
|
|
|
|
use App\Support\AbstractProtocol;
|
|
use App\Models\Server;
|
|
|
|
class Loon extends AbstractProtocol
|
|
{
|
|
public $flags = ['loon'];
|
|
|
|
public $allowedProtocols = [
|
|
Server::TYPE_SHADOWSOCKS,
|
|
Server::TYPE_VMESS,
|
|
Server::TYPE_TROJAN,
|
|
Server::TYPE_HYSTERIA,
|
|
Server::TYPE_VLESS,
|
|
Server::TYPE_ANYTLS,
|
|
];
|
|
|
|
protected $protocolRequirements = [
|
|
'loon.hysteria.protocol_settings.version' => [2 => '637'],
|
|
'loon.trojan.protocol_settings.tls' => [0 => '3.2.1', 1 => '3.2.1',2 => '999.9.9'],
|
|
];
|
|
|
|
public function handle()
|
|
{
|
|
$servers = $this->servers;
|
|
$user = $this->user;
|
|
|
|
$uri = '';
|
|
|
|
foreach ($servers as $item) {
|
|
if (
|
|
$item['type'] === Server::TYPE_SHADOWSOCKS
|
|
) {
|
|
$uri .= self::buildShadowsocks($item['password'], $item);
|
|
}
|
|
if ($item['type'] === Server::TYPE_VMESS) {
|
|
$uri .= self::buildVmess($item['password'], $item);
|
|
}
|
|
if ($item['type'] === Server::TYPE_TROJAN) {
|
|
$uri .= self::buildTrojan($item['password'], $item);
|
|
}
|
|
if ($item['type'] === Server::TYPE_HYSTERIA) {
|
|
$uri .= self::buildHysteria($item['password'], $item, $user);
|
|
}
|
|
if ($item['type'] === Server::TYPE_VLESS) {
|
|
$uri .= self::buildVless($item['password'], $item);
|
|
}
|
|
if ($item['type'] === Server::TYPE_ANYTLS) {
|
|
$uri .= self::buildAnyTLS($item['password'], $item);
|
|
}
|
|
}
|
|
return response($uri)
|
|
->header('content-type', 'text/plain')
|
|
->header('Subscription-Userinfo', "upload={$user['u']}; download={$user['d']}; total={$user['transfer_enable']}; expire={$user['expired_at']}");
|
|
}
|
|
|
|
|
|
public static function buildShadowsocks($password, $server)
|
|
{
|
|
$protocol_settings = $server['protocol_settings'];
|
|
$cipher = data_get($protocol_settings, 'cipher');
|
|
|
|
$config = [
|
|
"{$server['name']}=Shadowsocks",
|
|
"{$server['host']}",
|
|
"{$server['port']}",
|
|
"{$cipher}",
|
|
"{$password}",
|
|
'fast-open=false',
|
|
'udp=true'
|
|
];
|
|
|
|
if (data_get($protocol_settings, 'plugin') && data_get($protocol_settings, 'plugin_opts')) {
|
|
$plugin = data_get($protocol_settings, 'plugin');
|
|
$pluginOpts = data_get($protocol_settings, 'plugin_opts', '');
|
|
// 解析插件选项
|
|
$parsedOpts = collect(explode(';', $pluginOpts))
|
|
->filter()
|
|
->mapWithKeys(function ($pair) {
|
|
if (!str_contains($pair, '=')) {
|
|
return [];
|
|
}
|
|
[$key, $value] = explode('=', $pair, 2);
|
|
return [trim($key) => trim($value)];
|
|
})
|
|
->all();
|
|
switch ($plugin) {
|
|
case 'obfs':
|
|
$config[] = "obfs-name={$parsedOpts['obfs']}";
|
|
if (isset($parsedOpts['obfs-host'])) {
|
|
$config[] = "obfs-host={$parsedOpts['obfs-host']}";
|
|
}
|
|
if (isset($parsedOpts['path'])) {
|
|
$config[] = "obfs-uri={$parsedOpts['path']}";
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
|
|
$config = array_filter($config);
|
|
$uri = implode(',', $config) . "\r\n";
|
|
return $uri;
|
|
}
|
|
|
|
public static function buildVmess($uuid, $server)
|
|
{
|
|
$protocol_settings = $server['protocol_settings'];
|
|
$config = [
|
|
"{$server['name']}=vmess",
|
|
"{$server['host']}",
|
|
"{$server['port']}",
|
|
'auto',
|
|
"{$uuid}",
|
|
'fast-open=false',
|
|
'udp=true',
|
|
"alterId=0"
|
|
];
|
|
|
|
if (data_get($protocol_settings, 'tls')) {
|
|
$config[] = 'over-tls=true';
|
|
if (data_get($protocol_settings, 'tls_settings')) {
|
|
$tls_settings = data_get($protocol_settings, 'tls_settings');
|
|
$config[] = 'skip-cert-verify=' . (data_get($tls_settings, 'allow_insecure') ? 'true' : 'false');
|
|
if (data_get($tls_settings, 'server_name'))
|
|
$config[] = "tls-name={$tls_settings['server_name']}";
|
|
}
|
|
}
|
|
|
|
switch (data_get($server['protocol_settings'], 'network')) {
|
|
case 'tcp':
|
|
$config[] = 'transport=tcp';
|
|
$tcpSettings = data_get($protocol_settings, 'network_settings');
|
|
if (data_get($tcpSettings, 'header.type'))
|
|
$config = str_replace('transport=tcp', "transport={$tcpSettings['header']['type']}", $config);
|
|
if (data_get($tcpSettings, key: 'header.request.path')) {
|
|
$paths = data_get($tcpSettings, key: 'header.request.path');
|
|
$path = $paths[array_rand($paths)];
|
|
$config[] = "path={$path}";
|
|
}
|
|
if (data_get($tcpSettings, key: 'header.request.headers.Host')) {
|
|
$hosts = data_get($tcpSettings, key: 'header.request.headers.Host');
|
|
$host = $hosts[array_rand($hosts)];
|
|
$config[] = "host={$host}";
|
|
}
|
|
break;
|
|
case 'ws':
|
|
$config[] = 'transport=ws';
|
|
$wsSettings = data_get($protocol_settings, 'network_settings');
|
|
if (data_get($wsSettings, key: 'path'))
|
|
$config[] = "path={$wsSettings['path']}";
|
|
if (data_get($wsSettings, key: 'headers.Host'))
|
|
$config[] = "host={$wsSettings['headers']['Host']}";
|
|
break;
|
|
case 'grpc':
|
|
$config[] = 'transport=grpc';
|
|
if ($serviceName = data_get($protocol_settings, 'network_settings.serviceName'))
|
|
$config[] = "grpc-service-name={$serviceName}";
|
|
break;
|
|
case 'h2':
|
|
$config[] = 'transport=h2';
|
|
if ($path = data_get($protocol_settings, 'network_settings.path'))
|
|
$config[] = "path={$path}";
|
|
if ($host = data_get($protocol_settings, 'network_settings.host'))
|
|
$config[] = "host=" . (is_array($host) ? $host[0] : $host);
|
|
break;
|
|
case 'httpupgrade':
|
|
$config[] = 'transport=httpupgrade';
|
|
if ($path = data_get($protocol_settings, 'network_settings.path'))
|
|
$config[] = "path={$path}";
|
|
if ($host = data_get($protocol_settings, 'network_settings.headers.Host'))
|
|
$config[] = "host={$host}";
|
|
break;
|
|
}
|
|
|
|
$uri = implode(',', $config);
|
|
$uri .= "\r\n";
|
|
return $uri;
|
|
}
|
|
|
|
public static function buildTrojan($password, $server)
|
|
{
|
|
$protocol_settings = $server['protocol_settings'];
|
|
$config = [
|
|
"{$server['name']}=trojan",
|
|
"{$server['host']}",
|
|
"{$server['port']}",
|
|
"{$password}",
|
|
];
|
|
|
|
$tlsMode = (int) data_get($protocol_settings, 'tls', 1);
|
|
switch ($tlsMode) {
|
|
case 2: // Reality
|
|
if ($serverName = data_get($protocol_settings, 'reality_settings.server_name')) {
|
|
$config[] = "tls-name={$serverName}";
|
|
}
|
|
if ($pubkey = data_get($protocol_settings, 'reality_settings.public_key')) {
|
|
$config[] = "public-key={$pubkey}";
|
|
}
|
|
if ($shortid = data_get($protocol_settings, 'reality_settings.short_id')) {
|
|
$config[] = "short-id={$shortid}";
|
|
}
|
|
$config[] = 'skip-cert-verify=' . (data_get($protocol_settings, 'reality_settings.allow_insecure', false) ? 'true' : 'false');
|
|
break;
|
|
default: // Standard TLS
|
|
if ($serverName = data_get($protocol_settings, 'server_name')) {
|
|
$config[] = "tls-name={$serverName}";
|
|
}
|
|
$config[] = 'skip-cert-verify=' . (data_get($protocol_settings, 'allow_insecure') ? 'true' : 'false');
|
|
break;
|
|
}
|
|
|
|
switch (data_get($protocol_settings, 'network', 'tcp')) {
|
|
case 'ws':
|
|
$config[] = 'transport=ws';
|
|
if ($path = data_get($protocol_settings, 'network_settings.path'))
|
|
$config[] = "path={$path}";
|
|
if ($host = data_get($protocol_settings, 'network_settings.headers.Host'))
|
|
$config[] = "host={$host}";
|
|
break;
|
|
case 'grpc':
|
|
$config[] = 'transport=grpc';
|
|
if ($serviceName = data_get($protocol_settings, 'network_settings.serviceName'))
|
|
$config[] = "grpc-service-name={$serviceName}";
|
|
break;
|
|
}
|
|
|
|
$config = array_filter($config);
|
|
$uri = implode(',', $config);
|
|
$uri .= "\r\n";
|
|
return $uri;
|
|
}
|
|
|
|
public static function buildVless($password, $server)
|
|
{
|
|
$protocol_settings = data_get($server, 'protocol_settings', []);
|
|
|
|
$config = [
|
|
"{$server['name']}=VLESS",
|
|
"{$server['host']}",
|
|
"{$server['port']}",
|
|
"{$password}",
|
|
"alterId=0",
|
|
"udp=true"
|
|
];
|
|
|
|
// flow
|
|
if ($flow = data_get($protocol_settings, 'flow')) {
|
|
$config[] = "flow={$flow}";
|
|
}
|
|
|
|
// TLS/Reality
|
|
switch (data_get($protocol_settings, 'tls')) {
|
|
case 1:
|
|
$config[] = "over-tls=true";
|
|
$config[] = "skip-cert-verify=" . (data_get($protocol_settings, 'tls_settings.allow_insecure', false) ? "true" : "false");
|
|
if ($serverName = data_get($protocol_settings, 'tls_settings.server_name')) {
|
|
$config[] = "sni={$serverName}";
|
|
}
|
|
break;
|
|
case 2:
|
|
$config[] = "over-tls=true";
|
|
$config[] = "skip-cert-verify=" . (data_get($protocol_settings, 'reality_settings.allow_insecure', false) ? "true" : "false");
|
|
if ($serverName = data_get($protocol_settings, 'reality_settings.server_name')) {
|
|
$config[] = "sni={$serverName}";
|
|
}
|
|
if ($pubkey = data_get($protocol_settings, 'reality_settings.public_key')) {
|
|
$config[] = "public-key={$pubkey}";
|
|
}
|
|
if ($shortid = data_get($protocol_settings, 'reality_settings.short_id')) {
|
|
$config[] = "short-id={$shortid}";
|
|
}
|
|
break;
|
|
default:
|
|
$config[] = "over-tls=false";
|
|
break;
|
|
}
|
|
|
|
// network
|
|
switch (data_get($protocol_settings, 'network')) {
|
|
case 'ws':
|
|
$config[] = "transport=ws";
|
|
if ($path = data_get($protocol_settings, 'network_settings.path')) {
|
|
$config[] = "path={$path}";
|
|
}
|
|
if ($host = data_get($protocol_settings, 'network_settings.headers.Host')) {
|
|
$config[] = "host={$host}";
|
|
}
|
|
break;
|
|
case 'grpc':
|
|
$config[] = "transport=grpc";
|
|
if ($serviceName = data_get($protocol_settings, 'network_settings.serviceName')) {
|
|
$config[] = "grpc-service-name={$serviceName}";
|
|
}
|
|
break;
|
|
default:
|
|
$config[] = "transport=tcp";
|
|
break;
|
|
}
|
|
|
|
$config = array_filter($config);
|
|
$uri = implode(',', $config) . "\r\n";
|
|
return $uri;
|
|
}
|
|
|
|
public static function buildHysteria($password, $server, $user)
|
|
{
|
|
$protocol_settings = $server['protocol_settings'];
|
|
if ($protocol_settings['version'] != 2) {
|
|
return;
|
|
}
|
|
$config = [
|
|
"{$server['name']}=Hysteria2",
|
|
$server['host'],
|
|
$server['port'],
|
|
$password,
|
|
$protocol_settings['tls']['server_name'] ? "sni={$protocol_settings['tls']['server_name']}" : "(null)"
|
|
];
|
|
if (data_get($protocol_settings, 'tls.allow_insecure'))
|
|
$config[] = "skip-cert-verify=true";
|
|
if ($down = data_get($protocol_settings, 'bandwidth.down')) {
|
|
$config[] = "download-bandwidth={$down}";
|
|
}
|
|
$config[] = "udp=true";
|
|
$config = array_filter($config);
|
|
$uri = implode(',', $config);
|
|
$uri .= "\r\n";
|
|
return $uri;
|
|
}
|
|
|
|
public static function buildAnyTLS($password, $server)
|
|
{
|
|
$protocol_settings = data_get($server, 'protocol_settings', []);
|
|
|
|
$config = [
|
|
"{$server['name']}=anytls",
|
|
"{$server['host']}",
|
|
"{$server['port']}",
|
|
"{$password}",
|
|
"udp=true"
|
|
];
|
|
|
|
if ($serverName = data_get($protocol_settings, 'tls.server_name')) {
|
|
$config[] = "sni={$serverName}";
|
|
}
|
|
// ✅ 跳过证书校验
|
|
if (data_get($protocol_settings, 'tls.allow_insecure')) {
|
|
$config[] = 'skip-cert-verify=true';
|
|
}
|
|
|
|
$config = array_filter($config);
|
|
|
|
return implode(',', $config) . "\r\n";
|
|
}
|
|
}
|