// Package dns is an implementation of core.DNS feature. package dns import ( "context" go_errors "errors" "fmt" "sort" "strings" "sync" "github.com/xtls/xray-core/common" "github.com/xtls/xray-core/common/errors" "github.com/xtls/xray-core/common/net" "github.com/xtls/xray-core/common/session" "github.com/xtls/xray-core/common/strmatcher" "github.com/xtls/xray-core/features/dns" ) // DNS is a DNS rely server. type DNS struct { sync.Mutex disableFallback bool disableFallbackIfMatch bool ipOption *dns.IPOption hosts *StaticHosts clients []*Client ctx context.Context domainMatcher strmatcher.IndexMatcher matcherInfos []*DomainMatcherInfo } // DomainMatcherInfo contains information attached to index returned by Server.domainMatcher type DomainMatcherInfo struct { clientIdx uint16 domainRuleIdx uint16 } // New creates a new DNS server with given configuration. func New(ctx context.Context, config *Config) (*DNS, error) { var clientIP net.IP switch len(config.ClientIp) { case 0, net.IPv4len, net.IPv6len: clientIP = net.IP(config.ClientIp) default: return nil, errors.New("unexpected client IP length ", len(config.ClientIp)) } var ipOption dns.IPOption switch config.QueryStrategy { case QueryStrategy_USE_IP: ipOption = dns.IPOption{ IPv4Enable: true, IPv6Enable: true, FakeEnable: false, } case QueryStrategy_USE_IP4: ipOption = dns.IPOption{ IPv4Enable: true, IPv6Enable: false, FakeEnable: false, } case QueryStrategy_USE_IP6: ipOption = dns.IPOption{ IPv4Enable: false, IPv6Enable: true, FakeEnable: false, } default: return nil, errors.New("unexpected query strategy ", config.QueryStrategy) } hosts, err := NewStaticHosts(config.StaticHosts) if err != nil { return nil, errors.New("failed to create hosts").Base(err) } var clients []*Client domainRuleCount := 0 var defaultTag = config.Tag if len(config.Tag) == 0 { defaultTag = generateRandomTag() } for _, ns := range config.NameServer { domainRuleCount += len(ns.PrioritizedDomain) } // MatcherInfos is ensured to cover the maximum index domainMatcher could return, where matcher's index starts from 1 matcherInfos := make([]*DomainMatcherInfo, domainRuleCount+1) domainMatcher := &strmatcher.MatcherGroup{} for _, ns := range config.NameServer { clientIdx := len(clients) updateDomain := func(domainRule strmatcher.Matcher, originalRuleIdx int, matcherInfos []*DomainMatcherInfo) error { midx := domainMatcher.Add(domainRule) matcherInfos[midx] = &DomainMatcherInfo{ clientIdx: uint16(clientIdx), domainRuleIdx: uint16(originalRuleIdx), } return nil } myClientIP := clientIP switch len(ns.ClientIp) { case net.IPv4len, net.IPv6len: myClientIP = net.IP(ns.ClientIp) } disableCache := config.DisableCache var tag = defaultTag if len(ns.Tag) > 0 { tag = ns.Tag } clientIPOption := ResolveIpOptionOverride(ns.QueryStrategy, ipOption) if !clientIPOption.IPv4Enable && !clientIPOption.IPv6Enable { return nil, errors.New("no QueryStrategy available for ", ns.Address) } client, err := NewClient(ctx, ns, myClientIP, disableCache, tag, clientIPOption, &matcherInfos, updateDomain) if err != nil { return nil, errors.New("failed to create client").Base(err) } clients = append(clients, client) } // If there is no DNS client in config, add a `localhost` DNS client if len(clients) == 0 { clients = append(clients, NewLocalDNSClient(ipOption)) } return &DNS{ hosts: hosts, ipOption: &ipOption, clients: clients, ctx: ctx, domainMatcher: domainMatcher, matcherInfos: matcherInfos, disableFallback: config.DisableFallback, disableFallbackIfMatch: config.DisableFallbackIfMatch, }, nil } // Type implements common.HasType. func (*DNS) Type() interface{} { return dns.ClientType() } // Start implements common.Runnable. func (s *DNS) Start() error { return nil } // Close implements common.Closable. func (s *DNS) Close() error { return nil } // IsOwnLink implements proxy.dns.ownLinkVerifier func (s *DNS) IsOwnLink(ctx context.Context) bool { inbound := session.InboundFromContext(ctx) if inbound == nil { return false } for _, client := range s.clients { if client.tag == inbound.Tag { return true } } return false } // LookupIP implements dns.Client. func (s *DNS) LookupIP(domain string, option dns.IPOption) ([]net.IP, uint32, error) { // Normalize the FQDN form query domain = strings.TrimSuffix(domain, ".") if domain == "" { return nil, 0, errors.New("empty domain name") } option.IPv4Enable = option.IPv4Enable && s.ipOption.IPv4Enable option.IPv6Enable = option.IPv6Enable && s.ipOption.IPv6Enable if !option.IPv4Enable && !option.IPv6Enable { return nil, 0, dns.ErrEmptyResponse } // Static host lookup switch addrs := s.hosts.Lookup(domain, option); { case addrs == nil: // Domain not recorded in static host break case len(addrs) == 0: // Domain recorded, but no valid IP returned (e.g. IPv4 address with only IPv6 enabled) return nil, 0, dns.ErrEmptyResponse case len(addrs) == 1 && addrs[0].Family().IsDomain(): // Domain replacement errors.LogInfo(s.ctx, "domain replaced: ", domain, " -> ", addrs[0].Domain()) domain = addrs[0].Domain() default: // Successfully found ip records in static host errors.LogInfo(s.ctx, "returning ", len(addrs), " IP(s) for domain ", domain, " -> ", addrs) ips, err := toNetIP(addrs) if err != nil { return nil, 0, err } return ips, 10, nil // Hosts ttl is 10 } // Name servers lookup var errs []error for _, client := range s.sortClients(domain) { if !option.FakeEnable && strings.EqualFold(client.Name(), "FakeDNS") { errors.LogDebug(s.ctx, "skip DNS resolution for domain ", domain, " at server ", client.Name()) continue } ips, ttl, err := client.QueryIP(s.ctx, domain, option) if len(ips) > 0 { if ttl == 0 { ttl = 1 } return ips, ttl, nil } errors.LogInfoInner(s.ctx, err, "failed to lookup ip for domain ", domain, " at server ", client.Name()) if err == nil { err = dns.ErrEmptyResponse } errs = append(errs, err) } if len(errs) > 0 { allErrs := errors.Combine(errs...) err0 := errs[0] if errors.AllEqual(err0, allErrs) { if go_errors.Is(err0, dns.ErrEmptyResponse) { return nil, 0, dns.ErrEmptyResponse } return nil, 0, errors.New("returning nil for domain ", domain).Base(err0) } return nil, 0, errors.New("returning nil for domain ", domain).Base(allErrs) } return nil, 0, dns.ErrEmptyResponse } // LookupHosts implements dns.HostsLookup. func (s *DNS) LookupHosts(domain string) *net.Address { domain = strings.TrimSuffix(domain, ".") if domain == "" { return nil } // Normalize the FQDN form query addrs := s.hosts.Lookup(domain, *s.ipOption) if len(addrs) > 0 { errors.LogInfo(s.ctx, "domain replaced: ", domain, " -> ", addrs[0].String()) return &addrs[0] } return nil } func (s *DNS) sortClients(domain string) []*Client { clients := make([]*Client, 0, len(s.clients)) clientUsed := make([]bool, len(s.clients)) clientNames := make([]string, 0, len(s.clients)) domainRules := []string{} // Priority domain matching hasMatch := false MatchSlice := s.domainMatcher.Match(domain) sort.Slice(MatchSlice, func(i, j int) bool { return MatchSlice[i] < MatchSlice[j] }) for _, match := range MatchSlice { info := s.matcherInfos[match] client := s.clients[info.clientIdx] domainRule := client.domains[info.domainRuleIdx] domainRules = append(domainRules, fmt.Sprintf("%s(DNS idx:%d)", domainRule, info.clientIdx)) if clientUsed[info.clientIdx] { continue } clientUsed[info.clientIdx] = true clients = append(clients, client) clientNames = append(clientNames, client.Name()) hasMatch = true } if !(s.disableFallback || s.disableFallbackIfMatch && hasMatch) { // Default round-robin query for idx, client := range s.clients { if clientUsed[idx] || client.skipFallback { continue } clientUsed[idx] = true clients = append(clients, client) clientNames = append(clientNames, client.Name()) } } if len(domainRules) > 0 { errors.LogDebug(s.ctx, "domain ", domain, " matches following rules: ", domainRules) } if len(clientNames) > 0 { errors.LogDebug(s.ctx, "domain ", domain, " will use DNS in order: ", clientNames) } if len(clients) == 0 { clients = append(clients, s.clients[0]) clientNames = append(clientNames, s.clients[0].Name()) errors.LogDebug(s.ctx, "domain ", domain, " will use the first DNS: ", clientNames) } return clients } func init() { common.Must(common.RegisterConfig((*Config)(nil), func(ctx context.Context, config interface{}) (interface{}, error) { return New(ctx, config.(*Config)) })) }