mirror of
https://github.com/apernet/OpenGFW.git
synced 2024-12-23 01:19:21 +08:00
feat: add invalid threshold to DNS analyzer for UDP offloading
This commit is contained in:
parent
25241c9df0
commit
f9864628d2
@ -8,6 +8,10 @@ import (
|
|||||||
"github.com/google/gopacket/layers"
|
"github.com/google/gopacket/layers"
|
||||||
)
|
)
|
||||||
|
|
||||||
|
const (
|
||||||
|
dnsUDPInvalidCountThreshold = 4
|
||||||
|
)
|
||||||
|
|
||||||
// DNSAnalyzer is for both DNS over UDP and TCP.
|
// DNSAnalyzer is for both DNS over UDP and TCP.
|
||||||
var (
|
var (
|
||||||
_ analyzer.UDPAnalyzer = (*DNSAnalyzer)(nil)
|
_ analyzer.UDPAnalyzer = (*DNSAnalyzer)(nil)
|
||||||
@ -45,13 +49,20 @@ func (a *DNSAnalyzer) NewTCP(info analyzer.TCPInfo, logger analyzer.Logger) anal
|
|||||||
|
|
||||||
type dnsUDPStream struct {
|
type dnsUDPStream struct {
|
||||||
logger analyzer.Logger
|
logger analyzer.Logger
|
||||||
|
invalidCount int
|
||||||
}
|
}
|
||||||
|
|
||||||
func (s *dnsUDPStream) Feed(rev bool, data []byte) (u *analyzer.PropUpdate, done bool) {
|
func (s *dnsUDPStream) Feed(rev bool, data []byte) (u *analyzer.PropUpdate, done bool) {
|
||||||
m := parseDNSMessage(data)
|
m := parseDNSMessage(data)
|
||||||
|
// To allow non-DNS UDP traffic to get offloaded,
|
||||||
|
// we consider a UDP stream invalid and "done" if
|
||||||
|
// it has more than a certain number of consecutive
|
||||||
|
// packets that are not valid DNS messages.
|
||||||
if m == nil {
|
if m == nil {
|
||||||
return nil, false
|
s.invalidCount++
|
||||||
|
return nil, s.invalidCount >= dnsUDPInvalidCountThreshold
|
||||||
}
|
}
|
||||||
|
s.invalidCount = 0 // Reset invalid count on valid DNS message
|
||||||
return &analyzer.PropUpdate{
|
return &analyzer.PropUpdate{
|
||||||
Type: analyzer.PropUpdateReplace,
|
Type: analyzer.PropUpdateReplace,
|
||||||
M: m,
|
M: m,
|
||||||
|
Loading…
Reference in New Issue
Block a user