@opensecurity/zonzon-core 0.1.3 → 0.1.4

package/dist/http-handler.js

@@ -58,11 +58,11 @@ export class HttpHandler {
     server = null;
     circuitBreakers = new Map();
     activeConnections = new Set();
-    constructor(dnsServer, config, port = 80) {
+    constructor(dnsServer, config, port) {
         this.dnsServer = dnsServer;
         this.proxyService = new HttpProxyService();
-        this.port = port;
         this.config = config;
+        this.port = config.httpPort ?? port ?? 80;
     }
     getCircuitBreaker(upstream) {
         if (!this.circuitBreakers.has(upstream)) {

package/dist/schema.js

@@ -63,6 +63,8 @@ const ControlPlaneSchema = z.object({
 });
 const ServerConfigSchema = z.object({
     port: z.coerce.number().int().min(1).max(65535).default(53),
+    httpPort: z.coerce.number().int().min(1).max(65535).optional(),
+    httpsPort: z.coerce.number().int().min(1).max(65535).optional(),
     fallbackDns: Ipv4Schema.optional(),
     firewall: FirewallSchema.optional(),
     controlPlane: ControlPlaneSchema.optional(),

package/dist/sni-proxy.js

@@ -7,9 +7,9 @@ export class SniProxyService {
     config;
     server = null;
     activeConnections = new Set();
-    constructor(config, port = 443) {
+    constructor(config, port) {
         this.config = config;
-        this.port = port;
+        this.port = config.httpsPort ?? port ?? 443;
     }
     extractSNI(data) {
         try {
@@ -73,7 +73,7 @@ export class SniProxyService {
             isHandled = true;
             const sni = this.extractSNI(buffer);
             if (!sni) {
-                audit.http(clientIp, "TLS", "UNKNOWN", ":443", 400, "Dropped: No SNI detected");
+                audit.http(clientIp, "TLS", "UNKNOWN", `:${this.port}`, 400, "Dropped: No SNI detected");
                 clientSocket.destroy();
                 return;
             }
@@ -90,7 +90,7 @@ export class SniProxyService {
                 if (firewallEngine.evaluateIp(targetIp, this.config.firewall) === "DENY") {
                     throw new Error(`Target IP ${targetIp} blocked by Firewall policy`);
                 }
-                audit.http(clientIp, "TLS-SNI", sni, ":443", 200, `Tunneled to ${targetIp}`);
+                audit.http(clientIp, "TLS-SNI", sni, `:${this.port}`, 200, `Tunneled to ${targetIp}`);
                 const srvSocket = net.connect(443, targetIp, () => {
                     srvSocket.write(buffer);
                     clientSocket.pipe(srvSocket);
@@ -105,7 +105,7 @@ export class SniProxyService {
                 });
             }
             catch (err) {
-                audit.http(clientIp, "TLS-SNI", sni, ":443", 403, `Blocked: ${err.message}`);
+                audit.http(clientIp, "TLS-SNI", sni, `:${this.port}`, 403, `Blocked: ${err.message}`);
                 clientSocket.destroy();
             }
         });

package/dist/types.d.ts

@@ -68,6 +68,8 @@ export interface ControlPlaneConfig {
 }
 export interface ServerConfig {
     port: number;
+    httpPort?: number;
+    httpsPort?: number;
     fallbackDns?: string;
     firewall?: FirewallConfig;
     controlPlane?: ControlPlaneConfig;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opensecurity/zonzon-core",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "core routing, dns, and firewall engine",
   "type": "module",
   "author": "Lucian BLETAN <neuraluc@gmail.com>",