@serve.zone/dcrouter 11.13.0 → 11.14.0

package/dist_ts/radius/classes.radius.server.js

@@ -1,386 +0,0 @@
-import * as plugins from '../plugins.js';
-import { logger } from '../logger.js';
-import { VlanManager } from './classes.vlan.manager.js';
-import { AccountingManager } from './classes.accounting.manager.js';
-/**
- * RADIUS Server wrapper that provides:
- * - MAC Authentication Bypass (MAB) for network devices
- * - VLAN assignment based on MAC address
- * - Accounting for session tracking and billing
- * - Integration with SmartProxy routing
- */
-export class RadiusServer {
-    radiusServer;
-    vlanManager;
-    accountingManager;
-    config;
-    storageManager;
-    clientSecrets = new Map();
-    running = false;
-    // Statistics
-    stats = {
-        authRequests: 0,
-        authAccepts: 0,
-        authRejects: 0,
-        accountingRequests: 0,
-        startTime: 0,
-    };
-    constructor(config, storageManager) {
-        this.config = {
-            authPort: config.authPort ?? 1812,
-            acctPort: config.acctPort ?? 1813,
-            bindAddress: config.bindAddress ?? '0.0.0.0',
-            ...config,
-        };
-        this.storageManager = storageManager;
-        // Initialize VLAN manager
-        this.vlanManager = new VlanManager(config.vlanAssignment, storageManager);
-        // Initialize accounting manager
-        this.accountingManager = new AccountingManager(config.accounting, storageManager);
-    }
-    /**
-     * Start the RADIUS server
-     */
-    async start() {
-        if (this.running) {
-            logger.log('warn', 'RADIUS server is already running');
-            return;
-        }
-        logger.log('info', `Starting RADIUS server on ${this.config.bindAddress}:${this.config.authPort} (auth) and ${this.config.acctPort} (acct)`);
-        // Initialize managers
-        await this.vlanManager.initialize();
-        await this.accountingManager.initialize();
-        // Import static VLAN mappings if provided
-        if (this.config.vlanAssignment?.mappings) {
-            await this.vlanManager.importMappings(this.config.vlanAssignment.mappings);
-        }
-        // Build client secrets map
-        this.buildClientSecretsMap();
-        // Create the RADIUS server
-        this.radiusServer = new plugins.smartradius.RadiusServer({
-            authPort: this.config.authPort,
-            acctPort: this.config.acctPort,
-            bindAddress: this.config.bindAddress,
-            defaultSecret: this.getDefaultSecret(),
-            authenticationHandler: this.handleAuthentication.bind(this),
-            accountingHandler: this.handleAccounting.bind(this),
-        });
-        // Configure per-client secrets
-        for (const [ip, secret] of this.clientSecrets) {
-            this.radiusServer.setClientSecret(ip, secret);
-        }
-        // Start the server
-        await this.radiusServer.start();
-        this.running = true;
-        this.stats.startTime = Date.now();
-        logger.log('info', `RADIUS server started with ${this.config.clients.length} configured clients`);
-    }
-    /**
-     * Stop the RADIUS server
-     */
-    async stop() {
-        if (!this.running) {
-            return;
-        }
-        logger.log('info', 'Stopping RADIUS server...');
-        if (this.radiusServer) {
-            await this.radiusServer.stop();
-            this.radiusServer = undefined;
-        }
-        this.accountingManager.stop();
-        this.running = false;
-        logger.log('info', 'RADIUS server stopped');
-    }
-    /**
-     * Handle authentication request
-     */
-    async handleAuthentication(request) {
-        this.stats.authRequests++;
-        const authData = {
-            username: request.attributes?.UserName || '',
-            password: request.attributes?.UserPassword,
-            nasIpAddress: request.attributes?.NasIpAddress || request.source?.address || '',
-            nasPort: request.attributes?.NasPort,
-            nasPortType: request.attributes?.NasPortType,
-            nasIdentifier: request.attributes?.NasIdentifier,
-            calledStationId: request.attributes?.CalledStationId,
-            callingStationId: request.attributes?.CallingStationId,
-            serviceType: request.attributes?.ServiceType,
-        };
-        logger.log('debug', `RADIUS Auth Request: user=${authData.username}, NAS=${authData.nasIpAddress}`);
-        // Perform MAC Authentication Bypass (MAB)
-        // In MAB, the username is typically the MAC address
-        const result = await this.performMabAuthentication(authData);
-        if (result.success) {
-            this.stats.authAccepts++;
-            logger.log('info', `RADIUS Auth Accept: user=${authData.username}, VLAN=${result.vlanId}`);
-            // Build response with VLAN attributes
-            const response = {
-                code: plugins.smartradius.ERadiusCode.AccessAccept,
-                replyMessage: result.replyMessage,
-            };
-            // Add VLAN attributes if assigned
-            if (result.vlanId !== undefined) {
-                response.tunnelType = 13; // VLAN
-                response.tunnelMediumType = 6; // IEEE 802
-                response.tunnelPrivateGroupId = String(result.vlanId);
-            }
-            // Add session timeout if specified
-            if (result.sessionTimeout) {
-                response.sessionTimeout = result.sessionTimeout;
-            }
-            // Add idle timeout if specified
-            if (result.idleTimeout) {
-                response.idleTimeout = result.idleTimeout;
-            }
-            // Add framed IP if specified
-            if (result.framedIpAddress) {
-                response.framedIpAddress = result.framedIpAddress;
-            }
-            return response;
-        }
-        else {
-            this.stats.authRejects++;
-            logger.log('warn', `RADIUS Auth Reject: user=${authData.username}, reason=${result.rejectReason}`);
-            return {
-                code: plugins.smartradius.ERadiusCode.AccessReject,
-                replyMessage: result.rejectReason || 'Access Denied',
-            };
-        }
-    }
-    /**
-     * Handle accounting request
-     */
-    async handleAccounting(request) {
-        this.stats.accountingRequests++;
-        if (!this.config.accounting?.enabled) {
-            // Still respond even if not tracking
-            return { code: plugins.smartradius.ERadiusCode.AccountingResponse };
-        }
-        const statusType = request.attributes?.AcctStatusType;
-        const sessionId = request.attributes?.AcctSessionId || '';
-        const accountingData = {
-            sessionId,
-            username: request.attributes?.UserName || '',
-            macAddress: request.attributes?.CallingStationId,
-            nasIpAddress: request.attributes?.NasIpAddress || request.source?.address || '',
-            nasPort: request.attributes?.NasPort,
-            nasPortType: request.attributes?.NasPortType,
-            nasIdentifier: request.attributes?.NasIdentifier,
-            calledStationId: request.attributes?.CalledStationId,
-            callingStationId: request.attributes?.CallingStationId,
-            inputOctets: request.attributes?.AcctInputOctets,
-            outputOctets: request.attributes?.AcctOutputOctets,
-            inputPackets: request.attributes?.AcctInputPackets,
-            outputPackets: request.attributes?.AcctOutputPackets,
-            sessionTime: request.attributes?.AcctSessionTime,
-            terminateCause: request.attributes?.AcctTerminateCause,
-            serviceType: request.attributes?.ServiceType,
-        };
-        try {
-            switch (statusType) {
-                case plugins.smartradius.EAcctStatusType.Start:
-                    logger.log('debug', `RADIUS Acct Start: session=${sessionId}, user=${accountingData.username}`);
-                    await this.accountingManager.handleAccountingStart(accountingData);
-                    break;
-                case plugins.smartradius.EAcctStatusType.Stop:
-                    logger.log('debug', `RADIUS Acct Stop: session=${sessionId}`);
-                    await this.accountingManager.handleAccountingStop(accountingData);
-                    break;
-                case plugins.smartradius.EAcctStatusType.InterimUpdate:
-                    logger.log('debug', `RADIUS Acct Interim: session=${sessionId}`);
-                    await this.accountingManager.handleAccountingUpdate(accountingData);
-                    break;
-                default:
-                    logger.log('debug', `RADIUS Acct Unknown status type: ${statusType}`);
-            }
-        }
-        catch (error) {
-            logger.log('error', `RADIUS accounting error: ${error.message}`);
-        }
-        return { code: plugins.smartradius.ERadiusCode.AccountingResponse };
-    }
-    /**
-     * Perform MAC Authentication Bypass
-     */
-    async performMabAuthentication(data) {
-        // Extract MAC address from username or CallingStationId
-        const macAddress = this.extractMacAddress(data);
-        if (!macAddress) {
-            return {
-                success: false,
-                rejectReason: 'No MAC address found',
-            };
-        }
-        // Look up VLAN assignment
-        const vlanResult = this.vlanManager.assignVlan(macAddress);
-        if (!vlanResult.assigned) {
-            return {
-                success: false,
-                rejectReason: 'Unknown MAC address',
-            };
-        }
-        // Build successful result
-        const result = {
-            success: true,
-            vlanId: vlanResult.vlan,
-            replyMessage: vlanResult.isDefault
-                ? `Assigned to default VLAN ${vlanResult.vlan}`
-                : `Assigned to VLAN ${vlanResult.vlan}`,
-        };
-        // Apply any additional settings from the matched rule
-        if (vlanResult.matchedRule) {
-            // Future: Add session timeout, idle timeout, etc. from rule
-        }
-        return result;
-    }
-    /**
-     * Extract MAC address from authentication data
-     */
-    extractMacAddress(data) {
-        // Try CallingStationId first (most common for MAB)
-        if (data.callingStationId) {
-            return this.normalizeMac(data.callingStationId);
-        }
-        // Try username (often MAC address in MAB)
-        if (data.username && this.looksLikeMac(data.username)) {
-            return this.normalizeMac(data.username);
-        }
-        return null;
-    }
-    /**
-     * Check if a string looks like a MAC address
-     */
-    looksLikeMac(value) {
-        // Remove common separators and check length
-        const cleaned = value.replace(/[-:. ]/g, '');
-        return /^[0-9a-fA-F]{12}$/.test(cleaned);
-    }
-    /**
-     * Normalize MAC address format
-     */
-    normalizeMac(mac) {
-        return this.vlanManager.normalizeMac(mac);
-    }
-    /**
-     * Build client secrets map from configuration
-     */
-    buildClientSecretsMap() {
-        this.clientSecrets.clear();
-        for (const client of this.config.clients) {
-            if (!client.enabled) {
-                continue;
-            }
-            // Handle CIDR ranges
-            if (client.ipRange.includes('/')) {
-                // For CIDR ranges, we'll use the network address as key
-                // In practice, smartradius may handle this differently
-                const [network] = client.ipRange.split('/');
-                this.clientSecrets.set(network, client.secret);
-            }
-            else {
-                this.clientSecrets.set(client.ipRange, client.secret);
-            }
-        }
-    }
-    /**
-     * Get default secret for unknown clients
-     */
-    getDefaultSecret() {
-        // Use first enabled client's secret as default, or a random one
-        for (const client of this.config.clients) {
-            if (client.enabled) {
-                return client.secret;
-            }
-        }
-        return plugins.crypto.randomBytes(16).toString('hex');
-    }
-    /**
-     * Add a RADIUS client
-     */
-    async addClient(client) {
-        // Check if client already exists
-        const existingIndex = this.config.clients.findIndex(c => c.name === client.name);
-        if (existingIndex >= 0) {
-            this.config.clients[existingIndex] = client;
-        }
-        else {
-            this.config.clients.push(client);
-        }
-        // Update client secrets if running
-        if (this.running && this.radiusServer && client.enabled) {
-            if (client.ipRange.includes('/')) {
-                const [network] = client.ipRange.split('/');
-                this.radiusServer.setClientSecret(network, client.secret);
-                this.clientSecrets.set(network, client.secret);
-            }
-            else {
-                this.radiusServer.setClientSecret(client.ipRange, client.secret);
-                this.clientSecrets.set(client.ipRange, client.secret);
-            }
-        }
-        logger.log('info', `RADIUS client ${client.enabled ? 'added' : 'disabled'}: ${client.name} (${client.ipRange})`);
-    }
-    /**
-     * Remove a RADIUS client
-     */
-    removeClient(name) {
-        const index = this.config.clients.findIndex(c => c.name === name);
-        if (index >= 0) {
-            const client = this.config.clients[index];
-            this.config.clients.splice(index, 1);
-            // Remove from secrets map
-            if (client.ipRange.includes('/')) {
-                const [network] = client.ipRange.split('/');
-                this.clientSecrets.delete(network);
-            }
-            else {
-                this.clientSecrets.delete(client.ipRange);
-            }
-            logger.log('info', `RADIUS client removed: ${name}`);
-            return true;
-        }
-        return false;
-    }
-    /**
-     * Get configured clients
-     */
-    getClients() {
-        return [...this.config.clients];
-    }
-    /**
-     * Get VLAN manager for direct access to VLAN operations
-     */
-    getVlanManager() {
-        return this.vlanManager;
-    }
-    /**
-     * Get accounting manager for direct access to accounting operations
-     */
-    getAccountingManager() {
-        return this.accountingManager;
-    }
-    /**
-     * Get server statistics
-     */
-    getStats() {
-        return {
-            running: this.running,
-            uptime: this.running ? Date.now() - this.stats.startTime : 0,
-            authRequests: this.stats.authRequests,
-            authAccepts: this.stats.authAccepts,
-            authRejects: this.stats.authRejects,
-            accountingRequests: this.stats.accountingRequests,
-            activeSessions: this.accountingManager.getStats().activeSessions,
-            vlanMappings: this.vlanManager.getStats().totalMappings,
-            clients: this.config.clients.filter(c => c.enabled).length,
-        };
-    }
-    /**
-     * Check if server is running
-     */
-    isRunning() {
-        return this.running;
-    }
-}
-//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/radius/classes.vlan.manager.d.ts

@@ -1,128 +0,0 @@
-import type { StorageManager } from '../storage/index.js';
-/**
- * MAC address to VLAN mapping
- */
-export interface IMacVlanMapping {
-    /** MAC address (full) or OUI pattern (e.g., "00:11:22" for vendor prefix) */
-    mac: string;
-    /** VLAN ID to assign */
-    vlan: number;
-    /** Optional description */
-    description?: string;
-    /** Whether this mapping is enabled */
-    enabled: boolean;
-    /** Creation timestamp */
-    createdAt: number;
-    /** Last update timestamp */
-    updatedAt: number;
-}
-/**
- * VLAN assignment result
- */
-export interface IVlanAssignmentResult {
-    /** Whether a VLAN was successfully assigned */
-    assigned: boolean;
-    /** The assigned VLAN ID (or default if not matched) */
-    vlan: number;
-    /** The matching rule (if any) */
-    matchedRule?: IMacVlanMapping;
-    /** Whether default VLAN was used */
-    isDefault: boolean;
-}
-/**
- * VlanManager configuration
- */
-export interface IVlanManagerConfig {
-    /** Default VLAN for unknown MACs */
-    defaultVlan?: number;
-    /** Whether to allow unknown MACs (assign default VLAN) or reject */
-    allowUnknownMacs?: boolean;
-    /** Storage key prefix for persistence */
-    storagePrefix?: string;
-}
-/**
- * Manages MAC address to VLAN mappings with support for:
- * - Exact MAC address matching
- * - OUI (vendor prefix) pattern matching
- * - Wildcard patterns
- * - Default VLAN for unknown devices
- */
-export declare class VlanManager {
-    private mappings;
-    private config;
-    private storageManager?;
-    private normalizedMacCache;
-    constructor(config?: IVlanManagerConfig, storageManager?: StorageManager);
-    /**
-     * Initialize the VLAN manager and load persisted mappings
-     */
-    initialize(): Promise<void>;
-    /**
-     * Normalize a MAC address to lowercase with colons
-     * Accepts formats: 00:11:22:33:44:55, 00-11-22-33-44-55, 001122334455
-     */
-    normalizeMac(mac: string): string;
-    /**
-     * Check if a MAC address matches a pattern
-     * Supports:
-     * - Exact match: "00:11:22:33:44:55"
-     * - OUI match: "00:11:22" (matches any device with this vendor prefix)
-     * - Wildcard: "*" (matches all)
-     */
-    macMatchesPattern(mac: string, pattern: string): boolean;
-    /**
-     * Add or update a MAC to VLAN mapping
-     */
-    addMapping(mapping: Omit<IMacVlanMapping, 'createdAt' | 'updatedAt'>): Promise<IMacVlanMapping>;
-    /**
-     * Remove a MAC to VLAN mapping
-     */
-    removeMapping(mac: string): Promise<boolean>;
-    /**
-     * Get a specific mapping by MAC
-     */
-    getMapping(mac: string): IMacVlanMapping | undefined;
-    /**
-     * Get all mappings
-     */
-    getAllMappings(): IMacVlanMapping[];
-    /**
-     * Determine VLAN assignment for a MAC address
-     * Returns the most specific matching rule (exact > OUI > wildcard > default)
-     */
-    assignVlan(mac: string): IVlanAssignmentResult;
-    /**
-     * Bulk import mappings
-     */
-    importMappings(mappings: Array<Omit<IMacVlanMapping, 'createdAt' | 'updatedAt'>>): Promise<number>;
-    /**
-     * Export all mappings
-     */
-    exportMappings(): IMacVlanMapping[];
-    /**
-     * Update configuration
-     */
-    updateConfig(config: Partial<IVlanManagerConfig>): void;
-    /**
-     * Get current configuration
-     */
-    getConfig(): Required<IVlanManagerConfig>;
-    /**
-     * Get statistics
-     */
-    getStats(): {
-        totalMappings: number;
-        enabledMappings: number;
-        exactMatches: number;
-        ouiPatterns: number;
-        wildcardPatterns: number;
-    };
-    /**
-     * Load mappings from storage
-     */
-    private loadMappings;
-    /**
-     * Save mappings to storage
-     */
-    private saveMappings;
-}