@push.rocks/smartproxy 18.0.2 → 18.2.0

package/ts/proxies/smart-proxy/network-proxy-bridge.ts

@@ -1,46 +1,18 @@
 import * as plugins from '../../plugins.js';
 import { NetworkProxy } from '../network-proxy/index.js';
-import { Port80Handler } from '../../http/port80/port80-handler.js';
-import { subscribeToPort80Handler } from '../../core/utils/event-utils.js';
-import type { ICertificateData } from '../../certificate/models/certificate-types.js';
 import type { IConnectionRecord, ISmartProxyOptions } from './models/interfaces.js';
 import type { IRouteConfig } from './models/route-types.js';
 
-/**
- * Manages NetworkProxy integration for TLS termination
- *
- * NetworkProxyBridge connects SmartProxy with NetworkProxy to handle TLS termination.
- * It directly passes route configurations to NetworkProxy and manages the physical
- * connection piping between SmartProxy and NetworkProxy for TLS termination.
- *
- * It is used by SmartProxy for routes that have:
- * - TLS mode of 'terminate' or 'terminate-and-reencrypt'
- * - Certificate set to 'auto' or custom certificate
- */
 export class NetworkProxyBridge {
   private networkProxy: NetworkProxy | null = null;
-  private port80Handler: Port80Handler | null = null;
 
   constructor(private settings: ISmartProxyOptions) {}
   
   /**
-   * Set the Port80Handler to use for certificate management
+   * Get the NetworkProxy instance
    */
-  public setPort80Handler(handler: Port80Handler): void {
-    this.port80Handler = handler;
-    
-    // Subscribe to certificate events
-    subscribeToPort80Handler(handler, {
-      onCertificateIssued: this.handleCertificateEvent.bind(this),
-      onCertificateRenewed: this.handleCertificateEvent.bind(this)
-    });
-    
-    // If NetworkProxy is already initialized, connect it with Port80Handler
-    if (this.networkProxy) {
-      this.networkProxy.setExternalPort80Handler(handler);
-    }
-    
-    console.log('Port80Handler connected to NetworkProxyBridge');
+  public getNetworkProxy(): NetworkProxy | null {
+    return this.networkProxy;
   }
   
   /**
@@ -48,22 +20,14 @@ export class NetworkProxyBridge {
    */
   public async initialize(): Promise<void> {
     if (!this.networkProxy && this.settings.useNetworkProxy && this.settings.useNetworkProxy.length > 0) {
-      // Configure NetworkProxy options based on SmartProxy settings
       const networkProxyOptions: any = {
         port: this.settings.networkProxyPort!,
         portProxyIntegration: true,
-        logLevel: this.settings.enableDetailedLogging ? 'debug' : 'info',
-        useExternalPort80Handler: !!this.port80Handler // Use Port80Handler if available
+        logLevel: this.settings.enableDetailedLogging ? 'debug' : 'info'
       };
 
       this.networkProxy = new NetworkProxy(networkProxyOptions);
-
       console.log(`Initialized NetworkProxy on port ${this.settings.networkProxyPort}`);
-      
-      // Connect Port80Handler if available
-      if (this.port80Handler) {
-        this.networkProxy.setExternalPort80Handler(this.port80Handler);
-      }
 
       // Apply route configurations to NetworkProxy
       await this.syncRoutesToNetworkProxy(this.settings.routes || []);
@@ -71,235 +35,118 @@ export class NetworkProxyBridge {
   }
   
   /**
-   * Handle certificate issuance or renewal events
+   * Sync routes to NetworkProxy
    */
-  private handleCertificateEvent(data: ICertificateData): void {
+  public async syncRoutesToNetworkProxy(routes: IRouteConfig[]): Promise<void> {
     if (!this.networkProxy) return;
-
-    console.log(`Received certificate for ${data.domain} from Port80Handler, updating NetworkProxy`);
-
-    // Apply certificate directly to NetworkProxy
-    this.networkProxy.updateCertificate(data.domain, data.certificate, data.privateKey);
-  }
-
-  /**
-   * Apply an external (static) certificate into NetworkProxy
-   */
-  public applyExternalCertificate(data: ICertificateData): void {
-    if (!this.networkProxy) {
-      console.log(`NetworkProxy not initialized: cannot apply external certificate for ${data.domain}`);
-      return;
-    }
     
-    // Apply certificate directly to NetworkProxy
-    this.networkProxy.updateCertificate(data.domain, data.certificate, data.privateKey);
-  }
-  
-  /**
-   * Get the NetworkProxy instance
-   */
-  public getNetworkProxy(): NetworkProxy | null {
-    return this.networkProxy;
-  }
-  
-  /**
-   * Get the NetworkProxy port
-   */
-  public getNetworkProxyPort(): number {
-    return this.networkProxy ? this.networkProxy.getListeningPort() : this.settings.networkProxyPort || 8443;
+    // Convert routes to NetworkProxy format
+    const networkProxyConfigs = routes
+      .filter(route => {
+        // Check if this route matches any of the specified network proxy ports
+        const routePorts = Array.isArray(route.match.ports) 
+          ? route.match.ports 
+          : [route.match.ports];
+        
+        return routePorts.some(port => 
+          this.settings.useNetworkProxy?.includes(port)
+        );
+      })
+      .map(route => this.routeToNetworkProxyConfig(route));
+    
+    // Apply configurations to NetworkProxy
+    await this.networkProxy.updateRouteConfigs(networkProxyConfigs);
   }
   
   /**
-   * Start NetworkProxy
+   * Convert route to NetworkProxy configuration
    */
-  public async start(): Promise<void> {
-    if (this.networkProxy) {
-      await this.networkProxy.start();
-      console.log(`NetworkProxy started on port ${this.settings.networkProxyPort}`);
-    }
+  private routeToNetworkProxyConfig(route: IRouteConfig): any {
+    // Convert route to NetworkProxy domain config format
+    return {
+      domain: route.match.domains?.[0] || '*',
+      target: route.action.target,
+      tls: route.action.tls,
+      security: route.action.security
+    };
   }
   
   /**
-   * Stop NetworkProxy
+   * Check if connection should use NetworkProxy
    */
-  public async stop(): Promise<void> {
-    if (this.networkProxy) {
-      try {
-        console.log('Stopping NetworkProxy...');
-        await this.networkProxy.stop();
-        console.log('NetworkProxy stopped successfully');
-      } catch (err) {
-        console.log(`Error stopping NetworkProxy: ${err}`);
-      }
-    }
+  public shouldUseNetworkProxy(connection: IConnectionRecord, routeMatch: any): boolean {
+    // Only use NetworkProxy for TLS termination
+    return (
+      routeMatch.route.action.tls?.mode === 'terminate' ||
+      routeMatch.route.action.tls?.mode === 'terminate-and-reencrypt'
+    ) && this.networkProxy !== null;
   }
   
   /**
-   * Forwards a TLS connection to a NetworkProxy for handling
+   * Forward connection to NetworkProxy
    */
-  public forwardToNetworkProxy(
+  public async forwardToNetworkProxy(
     connectionId: string,
     socket: plugins.net.Socket,
     record: IConnectionRecord,
-    initialData: Buffer,
-    customProxyPort?: number,
-    onError?: (reason: string) => void
-  ): void {
-    // Ensure NetworkProxy is initialized
+    initialChunk: Buffer,
+    networkProxyPort: number,
+    cleanupCallback: (reason: string) => void
+  ): Promise<void> {
     if (!this.networkProxy) {
-      console.log(
-        `[${connectionId}] NetworkProxy not initialized. Cannot forward connection.`
-      );
-      if (onError) {
-        onError('network_proxy_not_initialized');
-      }
-      return;
-    }
-
-    // Use the custom port if provided, otherwise use the default NetworkProxy port
-    const proxyPort = customProxyPort || this.networkProxy.getListeningPort();
-    const proxyHost = 'localhost'; // Assuming NetworkProxy runs locally
-
-    if (this.settings.enableDetailedLogging) {
-      console.log(
-        `[${connectionId}] Forwarding TLS connection to NetworkProxy at ${proxyHost}:${proxyPort}`
-      );
+      throw new Error('NetworkProxy not initialized');
     }
-
-    // Create a connection to the NetworkProxy
-    const proxySocket = plugins.net.connect({
-      host: proxyHost,
-      port: proxyPort,
-    });
-
-    // Store the outgoing socket in the record
-    record.outgoing = proxySocket;
-    record.outgoingStartTime = Date.now();
-    record.usingNetworkProxy = true;
-
-    // Set up error handlers
-    proxySocket.on('error', (err) => {
-      console.log(`[${connectionId}] Error connecting to NetworkProxy: ${err.message}`);
-      if (onError) {
-        onError('network_proxy_connect_error');
-      }
-    });
-
-    // Handle connection to NetworkProxy
-    proxySocket.on('connect', () => {
-      if (this.settings.enableDetailedLogging) {
-        console.log(`[${connectionId}] Connected to NetworkProxy at ${proxyHost}:${proxyPort}`);
-      }
-
-      // First send the initial data that contains the TLS ClientHello
-      proxySocket.write(initialData);
-
-      // Now set up bidirectional piping between client and NetworkProxy
-      socket.pipe(proxySocket);
-      proxySocket.pipe(socket);
-
-      if (this.settings.enableDetailedLogging) {
-        console.log(`[${connectionId}] TLS connection successfully forwarded to NetworkProxy`);
-      }
+    
+    const proxySocket = new plugins.net.Socket();
+    
+    await new Promise<void>((resolve, reject) => {
+      proxySocket.connect(networkProxyPort, 'localhost', () => {
+        console.log(`[${connectionId}] Connected to NetworkProxy for termination`);
+        resolve();
+      });
+      
+      proxySocket.on('error', reject);
     });
+    
+    // Send initial chunk if present
+    if (initialChunk) {
+      proxySocket.write(initialChunk);
+    }
+    
+    // Pipe the sockets together
+    socket.pipe(proxySocket);
+    proxySocket.pipe(socket);
+    
+    // Handle cleanup
+    const cleanup = (reason: string) => {
+      socket.unpipe(proxySocket);
+      proxySocket.unpipe(socket);
+      proxySocket.destroy();
+      cleanupCallback(reason);
+    };
+    
+    socket.on('end', () => cleanup('socket_end'));
+    socket.on('error', () => cleanup('socket_error'));
+    proxySocket.on('end', () => cleanup('proxy_end'));
+    proxySocket.on('error', () => cleanup('proxy_error'));
   }
   
   /**
-   * Synchronizes routes to NetworkProxy
-   *
-   * This method directly passes route configurations to NetworkProxy without any
-   * intermediate conversion. NetworkProxy natively understands route configurations.
-   *
-   * @param routes The route configurations to sync to NetworkProxy
+   * Start NetworkProxy
    */
-  public async syncRoutesToNetworkProxy(routes: IRouteConfig[]): Promise<void> {
-    if (!this.networkProxy) {
-      console.log('Cannot sync configurations - NetworkProxy not initialized');
-      return;
-    }
-
-    try {
-      // Filter only routes that are applicable to NetworkProxy (TLS termination)
-      const networkProxyRoutes = routes.filter(route => {
-        return (
-          route.action.type === 'forward' &&
-          route.action.tls &&
-          (route.action.tls.mode === 'terminate' || route.action.tls.mode === 'terminate-and-reencrypt')
-        );
-      });
-
-      // Pass routes directly to NetworkProxy
-      await this.networkProxy.updateRouteConfigs(networkProxyRoutes);
-      console.log(`Synced ${networkProxyRoutes.length} routes directly to NetworkProxy`);
-    } catch (err) {
-      console.log(`Error syncing routes to NetworkProxy: ${err}`);
+  public async start(): Promise<void> {
+    if (this.networkProxy) {
+      await this.networkProxy.start();
     }
   }
   
   /**
-   * Request a certificate for a specific domain
-   *
-   * @param domain The domain to request a certificate for
-   * @param routeName Optional route name to associate with this certificate
+   * Stop NetworkProxy
    */
-  public async requestCertificate(domain: string, routeName?: string): Promise<boolean> {
-    // Delegate to Port80Handler if available
-    if (this.port80Handler) {
-      try {
-        // Check if the domain is already registered
-        const cert = this.port80Handler.getCertificate(domain);
-        if (cert) {
-          console.log(`Certificate already exists for ${domain}`);
-          return true;
-        }
-
-        // Build the domain options
-        const domainOptions: any = {
-          domainName: domain,
-          sslRedirect: true,
-          acmeMaintenance: true,
-        };
-
-        // Add route reference if available
-        if (routeName) {
-          domainOptions.routeReference = {
-            routeName
-          };
-        }
-
-        // Register the domain for certificate issuance
-        this.port80Handler.addDomain(domainOptions);
-
-        console.log(`Domain ${domain} registered for certificate issuance`);
-        return true;
-      } catch (err) {
-        console.log(`Error requesting certificate: ${err}`);
-        return false;
-      }
-    }
-
-    // Fall back to NetworkProxy if Port80Handler is not available
-    if (!this.networkProxy) {
-      console.log('Cannot request certificate - NetworkProxy not initialized');
-      return false;
-    }
-
-    if (!this.settings.acme?.enabled) {
-      console.log('Cannot request certificate - ACME is not enabled');
-      return false;
-    }
-
-    try {
-      const result = await this.networkProxy.requestCertificate(domain);
-      if (result) {
-        console.log(`Certificate request for ${domain} submitted successfully`);
-      } else {
-        console.log(`Certificate request for ${domain} failed`);
-      }
-      return result;
-    } catch (err) {
-      console.log(`Error requesting certificate: ${err}`);
-      return false;
+  public async stop(): Promise<void> {
+    if (this.networkProxy) {
+      await this.networkProxy.stop();
+      this.networkProxy = null;
     }
   }
 }

package/ts/proxies/smart-proxy/route-connection-handler.ts

@@ -365,6 +365,10 @@ export class RouteConnectionHandler {
       case 'block':
         return this.handleBlockAction(socket, record, route);
       
+      case 'static':
+        this.handleStaticAction(socket, record, route);
+        return;
+      
       default:
         console.log(`[${connectionId}] Unknown action type: ${(route.action as any).type}`);
         socket.end();
@@ -528,7 +532,7 @@ export class RouteConnectionHandler {
             
             // If we have an initial chunk with TLS data, start processing it
             if (initialChunk && record.isTLS) {
-              return this.networkProxyBridge.forwardToNetworkProxy(
+              this.networkProxyBridge.forwardToNetworkProxy(
                 connectionId,
                 socket,
                 record,
@@ -536,6 +540,7 @@ export class RouteConnectionHandler {
                 this.settings.networkProxyPort,
                 (reason) => this.connectionManager.initiateCleanupOnce(record, reason)
               );
+              return;
             }
             
             // This shouldn't normally happen - we should have TLS data at this point
@@ -706,6 +711,64 @@ export class RouteConnectionHandler {
     this.connectionManager.initiateCleanupOnce(record, 'route_blocked');
   }
   
+  /**
+   * Handle a static action for a route
+   */
+  private async handleStaticAction(
+    socket: plugins.net.Socket,
+    record: IConnectionRecord,
+    route: IRouteConfig
+  ): Promise<void> {
+    const connectionId = record.id;
+    
+    if (!route.action.handler) {
+      console.error(`[${connectionId}] Static route '${route.name}' has no handler`);
+      socket.end();
+      this.connectionManager.cleanupConnection(record, 'no_handler');
+      return;
+    }
+    
+    try {
+      // Build route context
+      const context: IRouteContext = {
+        port: record.localPort,
+        domain: record.lockedDomain,
+        clientIp: record.remoteIP,
+        serverIp: socket.localAddress!,
+        path: undefined,  // Will need to be extracted from HTTP request
+        isTls: record.isTLS,
+        tlsVersion: record.tlsVersion,
+        routeName: route.name,
+        routeId: route.name,
+        timestamp: Date.now(),
+        connectionId
+      };
+      
+      // Call the handler
+      const response = await route.action.handler(context);
+      
+      // Send HTTP response
+      const headers = response.headers || {};
+      headers['Content-Length'] = Buffer.byteLength(response.body).toString();
+      
+      let httpResponse = `HTTP/1.1 ${response.status} ${getStatusText(response.status)}\r\n`;
+      for (const [key, value] of Object.entries(headers)) {
+        httpResponse += `${key}: ${value}\r\n`;
+      }
+      httpResponse += '\r\n';
+      
+      socket.write(httpResponse);
+      socket.write(response.body);
+      socket.end();
+      
+      this.connectionManager.cleanupConnection(record, 'completed');
+    } catch (error) {
+      console.error(`[${connectionId}] Error in static handler: ${error}`);
+      socket.end();
+      this.connectionManager.cleanupConnection(record, 'handler_error');
+    }
+  }
+  
   /**
    * Sets up a direct connection to the target
    */
@@ -1131,4 +1194,14 @@ export class RouteConnectionHandler {
       }
     });
   }
+}
+
+// Helper function for status text
+function getStatusText(status: number): string {
+  const statusTexts: Record<number, string> = {
+    200: 'OK',
+    404: 'Not Found',
+    500: 'Internal Server Error'
+  };
+  return statusTexts[status] || 'Unknown';
 }