美文网首页
kotlin实现内网穿透(可以放在安卓应用中使用)

kotlin实现内网穿透(可以放在安卓应用中使用)

作者: 今天i你好吗 | 来源:发表于2022-07-17 01:16 被阅读0次

相关内容

node.js实现内网穿透: https://www.jianshu.com/p/d2d4f8bff599
可以和node.js版混用
使用方式见node.js版,大同小异

实现代码

服务端:

import java.io.Closeable
import java.io.InputStream
import java.io.OutputStream
import java.net.InetAddress
import java.net.ServerSocket
import java.net.Socket
import java.security.KeyFactory
import java.security.interfaces.RSAPrivateKey
import java.util.*
import java.util.concurrent.Executors
import java.util.concurrent.TimeUnit
import javax.crypto.Cipher
import javax.crypto.EncryptedPrivateKeyInfo
import javax.crypto.SecretKeyFactory
import javax.crypto.spec.PBEKeySpec
import kotlin.collections.HashMap

/**
 * 作者:yzh
 *
 * 创建时间:2022/7/16 14:47
 *
 * 描述:
 *
 * 修订历史:
 */
object NatServer {
    private const val privateKeyStr =
        "-----BEGIN ENCRYPTED PRIVATE KEY-----\nMIIC3TBXBgkqhkiG9w0BBQ0wSjApBgkqhkiG9w0BBQwwHAQIl1wFXFOitsACAggA\nMAwGCCqGSIb3DQIJBQAwHQYJYIZIAWUDBAEqBBA0oPbhhGLdPgtmSrVbZciIBIIC\ngArc9A6lpkDo6P+Mo75UfU5EzkJhRrR69V1+iwLodTiMYbJK5VVyO6FyqTBTvNJs\nfJG55VijUESxPcJ5I3hNwjZqhNzDXR58ZkNaMKcuIkgCR0Vt5bo8GSsx/4dLYppo\n/pvGsSQ9MYtCsGCZKy/dpwm7BgDQ2GiYWcNL382c16NT80Bt/qq6/oY0jRCp5l9q\npCg0+Mh3o1w/ozKc1HX/3zmVX9KmsJFmLfH8WcB49YJmFSNvu9hSBXypnqvGodQd\n8yNxuEN1/7AwSnBZ/LOYGzittNwxfZE+LJHakGF6MVyuPbJI0s82B8MCQvlBpTeB\n0qKXlfiXIhS7KYIXaMCt5kJPRJQpDv1dmQIhWRjgaqldHbv0E3INf/AObuAXjoN3\nBLi3TQCm4e1Cde0RP4JNCdiLTT/MJAgFSIf7WHRteS22qmF9BR9EhBPJlWJ2GqlJ\nAi8JrX16WT9lTWIMFAH4NDbpaIpn61fjtBR05XCse2ZN3HOTgVxk0nbwZpFtQ+cQ\nsl7cLTx+GFgg6nhamXGHuvSSSsWqtTHdhvmDOeP8rq0bWwz0zVUlSIazd0jBbnw7\nJHNYBTpp7OOqg6lPw3J4dTi6NvRkqJ9oCuQBwdzyaNPOmtkVRsTn4xy2L8H56G3u\nFupF+kO1BAQJEJi/lm5oqOXjtj+O6R9LtjoLwbVtxLvJMsU0/Q1qxYU4z397k8QN\ntmTGo5I6s6UKYYgZK5dSrhwTTPVheI13hZmL994H5zzmd+E8wMCQiiibRUs+qsHF\ncKmJ+lZSG0VLKMlGmvfac9o+mTv8+C7miu/mQq1akrVLGRt4GTHR4lgQDNi20YyP\nhzEWbzdsDegNCIQSLTPkIl0=\n-----END ENCRYPTED PRIVATE KEY-----\n"
    private val ALGORITHM = "RSA/ECB/OAEPPadding"
    private val aes256cbc = "PBEWithHmacSHA256AndAES_256"
    private val keyFactory by lazy { KeyFactory.getInstance("RSA") }
    private const val socketOutTime = 30 * 1000
    private const val contentLength = 128
    private val privateKey by lazy {
        val keyStr = privateKeyStr.replace("-----BEGIN ENCRYPTED PRIVATE KEY-----", "")
            .replace("-----END ENCRYPTED PRIVATE KEY-----", "")
        val keySpec =
            EncryptedPrivateKeyInfo(base64Decoder(keyStr)).run {
                val secretKey = SecretKeyFactory.getInstance(aes256cbc)
                    .generateSecret(PBEKeySpec("yzh".toCharArray()))
                getKeySpec(
                    Cipher.getInstance(aes256cbc)
                        .apply { init(Cipher.DECRYPT_MODE, secretKey, algParameters) })
            }
        keyFactory.generatePrivate(keySpec) as? RSAPrivateKey
    }
    private val passwords = arrayOf("yzh")
    private val executor by lazy {
        Executors.newCachedThreadPool {
            Thread(
                it,
                "NatServerSocket=="
            )
        }
    }
    private val checkFree by lazy {
        Executors.newSingleThreadScheduledExecutor {
            Thread(
                it,
                "CheckServerFree=="
            )
        }
    }

    fun run(dispatcherPort: Int) {
        val serverMap = HashMap<String, Server>()
        val synchronizedMap = HashMap<String, Any>()

        @Synchronized
        fun safeGet(key: String): Server? {
            return serverMap[key]?.run {
                if (natServerSocket.isClosed) {
                    null
                } else {
                    this
                }
            }
        }

        @Synchronized
        fun safeRemove(key: String) {
            serverMap.remove(key)
        }

        @Synchronized
        fun safeSet(key: String, ip: String?, port: Int): Server {
            return serverMap[key]?.run {
                if (natServerSocket.isClosed) {
                    null
                } else {
                    this
                }
            } ?: Server(ip, port) {
                safeRemove(key)
            }.also { serverMap[key] = it }
        }

        fun getSynKey(key: String): Any {
            synchronized(privateKeyStr) {
                return synchronizedMap[key] ?: Any().also { synchronizedMap[key] = it }
            }
        }

        val dispatcherSocket = ServerSocket(dispatcherPort)
        while (!dispatcherSocket.isClosed) {
            val natSocket: Socket
            try {
                natSocket = dispatcherSocket.accept().apply { soTimeout = socketOutTime }
            } catch (e: Exception) {
                println("dispatcher server error $e")
                return
            }
            NatServer(natSocket).run { ip, port ->
                val address = "$ip:$port"
                //当地址相同时没必要多次验重
                synchronized(getSynKey(address)) {
                    //验重需要时间,降低锁的粒度,不需要验重的优先通过
                    safeGet(address) ?: kotlin.run {
                        val natIps = "-${serverMap.keys.joinToString("-")}-"
                        val reg = if (ip.isNullOrBlank()) {
                            ":$port-"
                        } else {
                            "-:$port-"
                        }
                        if (natIps.indexOf(reg) == -1) {
                            safeSet(address, ip, port)
                        } else {
                            println("$address===$natIps")
                            null
                        }
                    }
                }
            }
        }
        println("dispatcher server closed")
    }

    class Server(ip: String?, port: Int, var freeCallBack: (() -> Unit)?) {
        val natServerSocket by lazy {
            if (ip.isNullOrBlank()) {
                ServerSocket(port)
            } else {
                ServerSocket(port, 50, InetAddress.getByName(ip))
            }
        }
        private val natServers = arrayListOf<NatServer>()
        private val paddingSocket = arrayListOf<Socket>()
        private val scheduledFuture = checkFree.scheduleAtFixedRate({
            checkDied()
        }, 60, 60, TimeUnit.SECONDS)

        @Volatile
        private var emptyCount = 0

        init {
            Thread {
                while (!natServerSocket.isClosed) {
                    val clientSocket = try {
                        natServerSocket.accept().apply { soTimeout = socketOutTime }
                    } catch (e: Exception) {
                        println("accept error $e")
                        break
                    }
                    dispatcherNatServer(clientSocket)
                }
                free()
                destroy()
            }.start()
        }

        private fun free() {
            freeCallBack?.run {
                freeCallBack = null
                invoke()
                scheduledFuture.cancel(false)
            }
        }

        @Synchronized
        private fun checkDied() {
            if (natServers.isEmpty()) {
                emptyCount++
                if (emptyCount >= 5) {
                    natServerSocket.safeClose()
                }
            } else {
                emptyCount = 0
            }
        }

        @Synchronized
        private fun dispatcherNatServer(clientSocket: Socket) {
            if (natServers.isEmpty()) {
                paddingSocket.add(clientSocket)
            } else {
                natServers.removeAt(0).startNat(clientSocket)
            }
        }

        @Synchronized
        fun addNatServer(natServer: NatServer) {
            if (natServerSocket.isClosed) {
                return
            }
            emptyCount = 0
            if (paddingSocket.isEmpty()) {
                natServers.add(natServer)
            } else {
                natServer.startNat(paddingSocket.removeAt(0))
            }
        }

        @Synchronized
        fun removeNatServer(natServer: NatServer) {
            natServers.remove(natServer)
        }

        @Synchronized
        private fun removePaddingSocket(clientSocket: Socket) {
            paddingSocket.remove(clientSocket)
        }

        @Synchronized
        fun destroy() {
            natServers.forEach { it.natSocket.safeClose() }
            paddingSocket.forEach { it.safeClose() }
            natServers.clear()
            paddingSocket.clear()
        }
    }

    class NatServer(val natSocket: Socket) {
        private val natInStream by lazy { natSocket.getInputStream() }
        private val natOutStream by lazy { natSocket.getOutputStream() }

        @Volatile
        private var userSocket: Socket? = null

        @Volatile
        private var serverCallBack: Server? = null

        fun run(getServerCallBack: (ip: String?, port: Int) -> Server?) {
            executor.execute {
                val natInfoArray = ByteArray(contentLength)
                var readCount = 0
                val dataArray = ByteArray(contentLength)
                var length: Int
                while (!natSocket.isClosed) {
                    try {
                        length = natInStream.read(dataArray)
                    } catch (e: Exception) {
                        exception("natInStream error $e")
                        return@execute
                    }
                    if (length == -1) {
                        exception("natInStream closed")
                        return@execute
                    }
                    if (readCount != contentLength) {
                        if (readCount + length > contentLength) {
                            System.arraycopy(
                                dataArray,
                                0,
                                natInfoArray,
                                readCount,
                                contentLength - readCount
                            )
                            readCount = contentLength
                            length = length + readCount - contentLength
                            val newData = dataArray.copyOfRange(contentLength - readCount, length)
                            System.arraycopy(newData, 0, contentLength, 0, length)
                        } else {
                            System.arraycopy(dataArray, 0, natInfoArray, readCount, length)
                            readCount += length
                            length = 0
                        }
                        if (readCount != contentLength) {
                            continue
                        }
                        val info: String?
                        try {
                            info = decrypt(natInfoArray)
                            println("info: $info")
                        } catch (e: Exception) {
                            error("privateDecrypt error $e")
                            return@execute
                        }
                        if (info == null) {
                            error("info is null")
                            return@execute
                        }
                        val infos = info.split("-").map { it.trim() }
                        if (infos.size != 2) {
                            error("infos error ${infos.size}")
                            return@execute
                        }
                        if (passwords.indexOf(infos[1]) == -1) {
                            error("passwords error ${info[1]}")
                            return@execute
                        }
                        val address = infos[0].split(":").map { it.trim() }
                        val port: Int
                        try {
                            port = address[1].toInt()
                        } catch (e: Exception) {
                            println("port error $e")
                            return@execute
                        }
                        if (port < 0 || port > 65535) {
                            error("port2 error $port")
                            return@execute
                        }
                        serverCallBack = getServerCallBack(address[0], port)
                        if (serverCallBack == null) {
                            error("port3 error used")
                            return@execute
                        } else {
                            serverCallBack?.addNatServer(this)
                        }
                    }
                    if (length != 0) {
                        dataArray.indexOf(0).let {
                            if (it == -1 || it >= length) {
                                userSocket ?: try {
                                    natOutStream.write(ByteArray(1) { 0 })
                                } catch (e: Exception) {
                                    exception("natOutStream error $e")
                                    return@execute
                                }
                            } else {
                                userSocket?.run {
                                    val userOutputStream = getOutputStream()
                                    try {
                                        userOutputStream.write(dataArray, it + 1, length - it - 1)
                                    } catch (e: Exception) {
                                        exception("userOutputStream error $e")
                                        return@execute
                                    }
                                    val natDataSwitch =
                                        Switch(natSocket, this, natInStream, userOutputStream)
                                    Thread(natDataSwitch, "natServer端Data==").start()
                                }
                                return@execute
                            }
                        }
                    }
                }
            }
        }

        fun startNat(userSocket: Socket) {
            executor.execute {
                this.userSocket = userSocket
                try {
                    natOutStream.write(ByteArray(1) { 1 })
                } catch (e: Exception) {
                    exception("natOutStream error $e")
                    return@execute
                }
                val userDataSwitch =
                    Switch(userSocket, natSocket, userSocket.getInputStream(), natOutStream)
                Thread(userDataSwitch, "user端Data==").start()
            }
        }

        private fun error(message: String) {
            try {
                natOutStream.write(ByteArray(1) { 2 })
            } catch (e: Exception) {
                exception("natOutStream error $e")
            }
            exception(message)
        }

        private fun exception(message: String) {
            println(message)
            natSocket.safeClose()
            userSocket?.safeClose()
            serverCallBack?.removeNatServer(this)
        }
    }

    class Switch(
        private val inSocket: Socket, private val outSocket: Socket,
        private val inStream: InputStream, private val outStream: OutputStream
    ) : Runnable {
        private val buffer = ByteArray(1024 * 8)

        override fun run() {
            var length = 0
            while (!inSocket.isClosed && !outSocket.isClosed &&
                try {
                    inStream.read(buffer).also { length = it } > -1
                } catch (e: Exception) {
                    false
                }
            ) {

                try {
                    outStream.write(buffer, 0, length)
                    outStream.flush()
                } catch (e: Exception) {
                    break
                }
            }

            inSocket.safeClose()
            outSocket.safeClose()
        }
    }

    private fun Closeable?.safeClose() {
        try {
            this?.close()
        } catch (e: Exception) {
            e.printStackTrace()
        }
    }

    private fun base64Decoder(keyStr: String) = Base64.getDecoder().decode(
        keyStr.replace("\n", "")
            .replace(" ", "")
            .toByteArray(Charsets.UTF_8)
    )

    fun decrypt(data: ByteArray): String? {
        privateKey ?: return null
        return Cipher.getInstance(ALGORITHM).run {
            init(Cipher.DECRYPT_MODE, privateKey)
            String(doFinal(data), Charsets.UTF_8)
        }
    }
}

客户端:

import android.util.Base64
import java.io.Closeable
import java.io.InputStream
import java.io.OutputStream
import java.net.InetSocketAddress
import java.net.Proxy
import java.net.Socket
import java.security.KeyFactory
import java.security.interfaces.RSAPublicKey
import java.security.spec.X509EncodedKeySpec
import java.util.concurrent.Executors
import java.util.concurrent.ScheduledFuture
import java.util.concurrent.TimeUnit
import javax.crypto.Cipher
import kotlin.system.exitProcess


/**
 * 作者:yzh
 *
 * 创建时间:2022/7/15 21:56
 *
 * 描述:
 *
 * 修订历史:
 */
object NatClient {
    private const val publicKeyStr =
        "-----BEGIN PUBLIC KEY-----\nMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCWAX9+7stLFV8sW2zA470M8b/5\nHt1FgkpGIVHfHvjIxh3k/APVfWlXpoN6lKIDQ/z4LZc+m03faeR/qjgl562W0sHQ\nDezv/cd84Uc2hDh/vTifL6RfNA7mrW3aqiVxT4gzvp327nzck/J/mzfVFyEgFb+z\nWsvr0xMkg+NNXMww8wIDAQAB\n-----END PUBLIC KEY-----\n"

    //RSA/ECB/OAEPPadding=RSA_PKCS1_OAEP_PADDING(node默认), RSA/ECB/PKCS1Padding=RSA_PKCS1_PADDING(java RSA默认)
    private val ALGORITHM = "RSA/ECB/OAEPPadding"
    private val keyFactory by lazy { KeyFactory.getInstance("RSA") }

    private val publicKey by lazy {
        val keyStr = publicKeyStr.replace("-----BEGIN PUBLIC KEY-----", "")
            .replace("-----END PUBLIC KEY-----", "")
        keyFactory.generatePublic(X509EncodedKeySpec(base64Decoder(keyStr))) as? RSAPublicKey
    }
    private const val socketOutTime = 30 * 1000
    private const val rateInterval = 3 * 1000L
    private val threadPool by lazy {
        Executors.newScheduledThreadPool(3) {
            Thread(it, "NatClientSocket==")
        }
    }

    fun run() {
        val errorCounts = HashMap<String, Int>()
        fun start(clientId: String) {
            NatImpClient(
                "127.0.0.1", 8080, ":9001",
                "192.168.2.6", 8989, "yzh", clientId
            ) {
                if (it.isNullOrBlank()) {
                    threadPool.execute { start(clientId) }
                } else {
                    errorCounts[clientId] = (errorCounts[clientId] ?: 0) + 1
                    println("error=$clientId=${errorCounts[clientId]}=$it")
                    var scheduledFuture: ScheduledFuture<*>? = null
                    scheduledFuture = threadPool.scheduleWithFixedDelay({
                        start(clientId)
                        scheduledFuture?.cancel(false)
                    }, (errorCounts[clientId] ?: 1) * 1000L, Long.MAX_VALUE, TimeUnit.MILLISECONDS)
                }
            }.run(rateInterval)
        }

        var count = 0
        var scheduledFuture: ScheduledFuture<*>? = null
        scheduledFuture = threadPool.scheduleWithFixedDelay({
            start(count.toString())
            if (count++ == 2) {
                scheduledFuture?.cancel(false)
            }
        }, 0, 1000, TimeUnit.MILLISECONDS)
    }

    class NatImpClient(
        localServerIp: String, localServerPort: Int, natServerUseAddr: String?,
        natDispatchIp: String, natDispatchPort: Int, password: String,
        private val clientId: String, private var usedCallBack: ((errorMessage: String?) -> Unit)?
    ) {
        private val natInfo by lazy { encrypt("$natServerUseAddr-$password") }
        private val natSocket by lazy {
            val proxy = Proxy(Proxy.Type.SOCKS, InetSocketAddress("127.0.0.1", 1080))
            var cSocket = Socket(proxy)
            cSocket = Socket()
            cSocket.apply {
                soTimeout = socketOutTime
                try {
                    connect(InetSocketAddress(natDispatchIp, natDispatchPort))
                } catch (e: Exception) {
                    usedCallBack?.run {
                        usedCallBack = null
                        invoke(e.message)
                    }
                    safeClose()
                }
                println("$clientId-connectNat地址:${remoteSocketAddress}")
            }
        }

        private val natInStream by lazy { natSocket.getInputStream() }
        private val natOutStream by lazy { natSocket.getOutputStream() }
        private val localServerSocket by lazy {
            val proxy = Proxy(Proxy.Type.SOCKS, InetSocketAddress("127.0.0.1", 1080))
            var socket = Socket(proxy)
            socket = Socket()
            socket.apply {
                soTimeout = socketOutTime
                try {
                    connect(InetSocketAddress(localServerIp, localServerPort))
                } catch (e: Exception) {
                    usedCallBack?.run {
                        usedCallBack = null
                        invoke(e.message)
                    }
                    safeClose()
                    natSocket.safeClose()
                }
                println("$clientId-connectLocalServer地址:${remoteSocketAddress}")
            }
        }
        private val executor by lazy {
            Executors.newSingleThreadScheduledExecutor {
                Thread(it, "NatClientSocket==")
            }
        }

        fun run(rate: Long = 3000) {
            natInfo?.let {
                executor.execute {
                    writeMockData(it)
                }
            } ?: return
            val scheduledFuture = executor.scheduleWithFixedDelay({
                writeMockData(ByteArray(1) { 1 })
            }, rate, rate, TimeUnit.MILLISECONDS)
            threadPool.execute {
                var read: Int
                while (!natSocket.isClosed) {
                    try {
                        read = natInStream.read()
                    } catch (e: Exception) {
                        usedCallBack?.run {
                            usedCallBack = null
                            invoke(e.message)
                            natSocket.safeClose()
                        }
                        return@execute
                    }
                    when (read) {
                        1 -> {
                            scheduledFuture.cancel(false)
                            usedCallBack?.run {
                                usedCallBack = null
                                invoke(null)
                            }
                            switchData(localServerSocket)
                            return@execute
                        }
                        2 -> {
                            exitProcess(0)
                        }
                        else -> {
//                            println("$clientId-pong")
                        }
                    }
                }
            }
        }

        private fun switchData(socket: Socket) {
            if (socket.isClosed) return
            executor.execute {
                if (!writeMockData(ByteArray(1) { 0 })) {
                    socket.safeClose()
                }
                val localServerDataSwitch = Switch(
                    socket, natSocket, socket.getInputStream(), natOutStream
                )
                Thread(localServerDataSwitch, "$clientId-localServer端Data==").start()
            }
            val natDataSwitch = Switch(
                natSocket, socket, natInStream, socket.getOutputStream()
            )
            Thread(natDataSwitch, "$clientId-natClient端Data==").start()
        }

        private fun writeMockData(data: ByteArray): Boolean {
            return try {
                natOutStream.write(data)
                true
            } catch (e: Exception) {
                usedCallBack?.run {
                    usedCallBack = null
                    invoke(e.message)
                }
                natSocket.safeClose()
                false
            }
        }
    }

    class Switch(
        private val inSocket: Socket, private val outSocket: Socket,
        private val inStream: InputStream, private val outStream: OutputStream
    ) : Runnable {
        private val buffer = ByteArray(1024 * 8)

        override fun run() {
            var length = 0
            while (!inSocket.isClosed && !outSocket.isClosed &&
                try {
                    inStream.read(buffer).also { length = it } > -1
                } catch (e: Exception) {
                    false
                }
            ) {
                try {
                    outStream.write(buffer, 0, length)
                    outStream.flush()
                } catch (e: Exception) {
                    break
                }
            }

            inSocket.safeClose()
            outSocket.safeClose()
        }

    }

    private fun Closeable?.safeClose() {
        try {
            this?.close()
        } catch (e: Exception) {
            e.printStackTrace()
        }
    }

    private fun base64Decoder(keyStr: String) = Base64.decode(
        keyStr.replace("\n", "")
            .replace(" ", "")
            .toByteArray(Charsets.UTF_8), Base64.DEFAULT
    )

    private fun encrypt(message: String): ByteArray? {
        return Cipher.getInstance(ALGORITHM).run {
            init(Cipher.ENCRYPT_MODE, publicKey)
            doFinal(message.toByteArray(Charsets.UTF_8))
        }
    }
}

比较遗憾的是在安卓端解密时报了个 PBEWithHmacSHA256AndAES_256 SecretKeyFactory not available 可以通过采用非加密的私钥来解决这个问题


    private val privateKey by lazy {
        privateKey ?: return@lazy null
        val keySpec = if (pwd.isNullOrBlank()) {
            val keyStr = privateKey.replace("-----BEGIN PRIVATE KEY-----", "")
                .replace("-----END PRIVATE KEY-----", "")
            PKCS8EncodedKeySpec(base64Decoder(keyStr))
        } else {
            val keyStr = privateKey.replace("-----BEGIN ENCRYPTED PRIVATE KEY-----", "")
                .replace("-----END ENCRYPTED PRIVATE KEY-----", "")
            EncryptedPrivateKeyInfo(base64Decoder(keyStr)).run {
                val secretKey = SecretKeyFactory.getInstance(aes256cbc).generateSecret(PBEKeySpec(pwd.toCharArray()))
                getKeySpec(Cipher.getInstance(aes256cbc).apply { init(Cipher.DECRYPT_MODE, secretKey, algParameters) })
            }
        }
        keyFactory.generatePrivate(keySpec) as? RSAPrivateKey
    }

相关文章

网友评论

      本文标题:kotlin实现内网穿透(可以放在安卓应用中使用)

      本文链接:https://www.haomeiwen.com/subject/wumkirtx.html