wip: migrate to mono-repo. SPN has already been moved to spn/
This commit is contained in:
68
service/network/connection_android.go
Normal file
68
service/network/connection_android.go
Normal file
@@ -0,0 +1,68 @@
|
||||
package network
|
||||
|
||||
import (
|
||||
"context"
|
||||
"fmt"
|
||||
"net"
|
||||
"time"
|
||||
|
||||
"github.com/safing/portmaster/service/intel"
|
||||
"github.com/safing/portmaster/service/network/netutils"
|
||||
"github.com/safing/portmaster/service/network/packet"
|
||||
"github.com/safing/portmaster/service/process"
|
||||
"github.com/safing/portmaster/spn/navigator"
|
||||
"github.com/tevino/abool"
|
||||
)
|
||||
|
||||
// NewDefaultConnection creates a new connection with default values except local and remote IPs and protocols.
|
||||
func NewDefaultConnection(localIP net.IP, localPort uint16, remoteIP net.IP, remotePort uint16, ipVersion packet.IPVersion, protocol packet.IPProtocol) *Connection {
|
||||
connInfo := &Connection{
|
||||
ID: fmt.Sprintf("%s-%s-%d-%s-%d", protocol.String(), localIP, localPort, remoteIP, remotePort),
|
||||
Type: IPConnection,
|
||||
External: false,
|
||||
IPVersion: ipVersion,
|
||||
Inbound: false,
|
||||
IPProtocol: protocol,
|
||||
LocalIP: localIP,
|
||||
LocalIPScope: netutils.Global,
|
||||
LocalPort: localPort,
|
||||
PID: process.UnidentifiedProcessID,
|
||||
Entity: (&intel.Entity{
|
||||
IP: remoteIP,
|
||||
Protocol: uint8(protocol),
|
||||
Port: remotePort,
|
||||
}).Init(0),
|
||||
Resolver: nil,
|
||||
Started: time.Now().Unix(),
|
||||
VerdictPermanent: false,
|
||||
Tunneled: true,
|
||||
Encrypted: false,
|
||||
DataComplete: abool.NewBool(true),
|
||||
Internal: false,
|
||||
addedToMetrics: true, // Metrics are not needed for now. This will mark the Connection to be ignored.
|
||||
process: process.GetUnidentifiedProcess(context.Background()),
|
||||
}
|
||||
|
||||
// TODO: Quick fix for the SPN.
|
||||
// Use inspection framework for proper encryption detection.
|
||||
switch connInfo.Entity.DstPort() {
|
||||
case
|
||||
22, // SSH
|
||||
443, // HTTPS
|
||||
465, // SMTP-SSL
|
||||
853, // DoT
|
||||
993, // IMAP-SSL
|
||||
995: // POP3-SSL
|
||||
connInfo.Encrypted = true
|
||||
}
|
||||
|
||||
var layeredProfile = connInfo.process.Profile()
|
||||
connInfo.TunnelOpts = &navigator.Options{
|
||||
HubPolicies: layeredProfile.StackedExitHubPolicies(),
|
||||
CheckHubExitPolicyWith: connInfo.Entity,
|
||||
RequireTrustedDestinationHubs: !connInfo.Encrypted,
|
||||
RoutingProfile: layeredProfile.SPNRoutingAlgorithm(),
|
||||
}
|
||||
|
||||
return connInfo
|
||||
}
|
||||
Reference in New Issue
Block a user