123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178 |
- package main
- import (
- "embed"
- "flag"
- "fmt"
- "log"
- "net/http"
- "os"
- "os/signal"
- "syscall"
- "time"
- "github.com/google/uuid"
- "imuslab.com/zoraxy/mod/acme"
- "imuslab.com/zoraxy/mod/auth"
- "imuslab.com/zoraxy/mod/database"
- "imuslab.com/zoraxy/mod/dynamicproxy/redirection"
- "imuslab.com/zoraxy/mod/email"
- "imuslab.com/zoraxy/mod/forwardproxy"
- "imuslab.com/zoraxy/mod/ganserv"
- "imuslab.com/zoraxy/mod/geodb"
- "imuslab.com/zoraxy/mod/info/logger"
- "imuslab.com/zoraxy/mod/mdns"
- "imuslab.com/zoraxy/mod/netstat"
- "imuslab.com/zoraxy/mod/pathrule"
- "imuslab.com/zoraxy/mod/sshprox"
- "imuslab.com/zoraxy/mod/statistic"
- "imuslab.com/zoraxy/mod/statistic/analytic"
- "imuslab.com/zoraxy/mod/tcpprox"
- "imuslab.com/zoraxy/mod/tlscert"
- "imuslab.com/zoraxy/mod/uptime"
- "imuslab.com/zoraxy/mod/utils"
- "imuslab.com/zoraxy/mod/webserv"
- )
- // General flags
- var webUIPort = flag.String("port", ":8000", "Management web interface listening port")
- var noauth = flag.Bool("noauth", false, "Disable authentication for management interface")
- var showver = flag.Bool("version", false, "Show version of this server")
- var allowSshLoopback = flag.Bool("sshlb", false, "Allow loopback web ssh connection (DANGER)")
- var allowMdnsScanning = flag.Bool("mdns", true, "Enable mDNS scanner and transponder")
- var ztAuthToken = flag.String("ztauth", "", "ZeroTier authtoken for the local node")
- var ztAPIPort = flag.Int("ztport", 9993, "ZeroTier controller API port")
- var acmeAutoRenewInterval = flag.Int("autorenew", 86400, "ACME auto TLS/SSL certificate renew check interval (seconds)")
- var enableHighSpeedGeoIPLookup = flag.Bool("fastgeoip", false, "Enable high speed geoip lookup, require 1GB extra memory (Not recommend for low end devices)")
- var staticWebServerRoot = flag.String("webroot", "./www", "Static web server root folder. Only allow chnage in start paramters")
- var allowWebFileManager = flag.Bool("webfm", true, "Enable web file manager for static web server root folder")
- var logOutputToFile = flag.Bool("log", true, "Log terminal output to file")
- var (
- name = "Zoraxy"
- version = "3.0.2"
- nodeUUID = "generic"
- development = false //Set this to false to use embedded web fs
- bootTime = time.Now().Unix()
- /*
- Binary Embedding File System
- */
- //go:embed web/*
- webres embed.FS
- /*
- Handler Modules
- */
- sysdb *database.Database //System database
- authAgent *auth.AuthAgent //Authentication agent
- tlsCertManager *tlscert.Manager //TLS / SSL management
- redirectTable *redirection.RuleTable //Handle special redirection rule sets
- pathRuleHandler *pathrule.Handler //Handle specific path blocking or custom headers
- geodbStore *geodb.Store //GeoIP database, also handle black list and whitelist features
- netstatBuffers *netstat.NetStatBuffers //Realtime graph buffers
- statisticCollector *statistic.Collector //Collecting statistic from visitors
- uptimeMonitor *uptime.Monitor //Uptime monitor service worker
- mdnsScanner *mdns.MDNSHost //mDNS discovery services
- ganManager *ganserv.NetworkManager //Global Area Network Manager
- webSshManager *sshprox.Manager //Web SSH connection service
- tcpProxyManager *tcpprox.Manager //TCP Proxy Manager
- acmeHandler *acme.ACMEHandler //Handler for ACME Certificate renew
- acmeAutoRenewer *acme.AutoRenewer //Handler for ACME auto renew ticking
- staticWebServer *webserv.WebServer //Static web server for hosting simple stuffs
- forwardProxy *forwardproxy.Handler //HTTP Forward proxy, basically VPN for web browser
- //Helper modules
- EmailSender *email.Sender //Email sender that handle email sending
- AnalyticLoader *analytic.DataLoader //Data loader for Zoraxy Analytic
- SystemWideLogger *logger.Logger //Logger for Zoraxy
- )
- // Kill signal handler. Do something before the system the core terminate.
- func SetupCloseHandler() {
- c := make(chan os.Signal, 2)
- signal.Notify(c, os.Interrupt, syscall.SIGTERM)
- go func() {
- <-c
- ShutdownSeq()
- os.Exit(0)
- }()
- }
- func ShutdownSeq() {
- fmt.Println("- Shutting down " + name)
- fmt.Println("- Closing GeoDB ")
- geodbStore.Close()
- fmt.Println("- Closing Netstats Listener")
- netstatBuffers.Close()
- fmt.Println("- Closing Statistic Collector")
- statisticCollector.Close()
- if mdnsTickerStop != nil {
- fmt.Println("- Stopping mDNS Discoverer (might take a few minutes)")
- // Stop the mdns service
- mdnsTickerStop <- true
- }
- mdnsScanner.Close()
- fmt.Println("- Closing Certificates Auto Renewer")
- acmeAutoRenewer.Close()
- //Remove the tmp folder
- fmt.Println("- Cleaning up tmp files")
- os.RemoveAll("./tmp")
- fmt.Println("- Closing system wide logger")
- SystemWideLogger.Close()
- //Close database, final
- fmt.Println("- Stopping system database")
- sysdb.Close()
- }
- func main() {
- //Parse startup flags
- flag.Parse()
- if *showver {
- fmt.Println(name + " - Version " + version)
- os.Exit(0)
- }
- SetupCloseHandler()
- //Read or create the system uuid
- uuidRecord := "./sys.uuid"
- if !utils.FileExists(uuidRecord) {
- newSystemUUID := uuid.New().String()
- os.WriteFile(uuidRecord, []byte(newSystemUUID), 0775)
- }
- uuidBytes, err := os.ReadFile(uuidRecord)
- if err != nil {
- SystemWideLogger.PrintAndLog("ZeroTier", "Unable to read system uuid from file system", nil)
- panic(err)
- }
- nodeUUID = string(uuidBytes)
- //Startup all modules
- startupSequence()
- //Initiate management interface APIs
- requireAuth = !(*noauth)
- initAPIs()
- //Start the reverse proxy server in go routine
- go func() {
- ReverseProxtInit()
- }()
- time.Sleep(500 * time.Millisecond)
- //Start the finalize sequences
- finalSequence()
- SystemWideLogger.Println("Zoraxy started. Visit control panel at http://localhost" + *webUIPort)
- err = http.ListenAndServe(*webUIPort, nil)
- if err != nil {
- log.Fatal(err)
- }
- }
|