mirror of
https://github.com/amnezia-vpn/amnezia-client.git
synced 2026-05-08 14:33:23 +00:00
911a999c64
* fix: xray heap corruption * fix: use proper configuration for split-tunneled apps * chore: enable killswitch * chore: xray windows split-tunneling cleanup * chore: proper xray killswitch log * feat: add wait for the tun device * chore: update amnezia_xray deps for macos * fix: add nullptr check for split-tunnel on win * fix: modernize vpnAdapter grabbing function * fix: remove network watcher due to its fragileness * chore: xrayprotocol cleanup * fix: correct wrong iface index on win * chore: move tun2socks implementation to the client from the service * chore: xrayprotocol cleanup * chore: more xrayprotocol cleanup * fix: consistent tun device with GUID specified * chore: tun2socks logs * chore: PrivilegedProcess cleanup * better error handling in establishment phase * terminate&kill ops for remote process * fix: straighforward killing the process on windows * fix: finally remove GUID setting from tun2socks due to instability * fix: add sanitizer to ipc process * chore: do not collect sensitive info from tun2socks
115 lines
3.5 KiB
C++
115 lines
3.5 KiB
C++
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#include "windowsdaemon.h"
|
|
|
|
#include <Windows.h>
|
|
#include <qassert.h>
|
|
|
|
#include <QCoreApplication>
|
|
#include <QJsonDocument>
|
|
#include <QJsonObject>
|
|
#include <QJsonValue>
|
|
#include <QLocalSocket>
|
|
#include <QNetworkInterface>
|
|
#include <QTextStream>
|
|
#include <QtGlobal>
|
|
|
|
#include "daemon/daemonerrors.h"
|
|
#include "dnsutilswindows.h"
|
|
#include "leakdetector.h"
|
|
#include "logger.h"
|
|
#include "platforms/windows/daemon/windowsfirewall.h"
|
|
#include "platforms/windows/daemon/windowssplittunnel.h"
|
|
#include "windowsfirewall.h"
|
|
|
|
#include "core/networkUtilities.h"
|
|
|
|
namespace {
|
|
Logger logger("WindowsDaemon");
|
|
}
|
|
|
|
WindowsDaemon::WindowsDaemon() : Daemon(nullptr) {
|
|
MZ_COUNT_CTOR(WindowsDaemon);
|
|
m_firewallManager = WindowsFirewall::create(this);
|
|
Q_ASSERT(m_firewallManager != nullptr);
|
|
|
|
m_wgutils = WireguardUtilsWindows::create(m_firewallManager, this);
|
|
m_dnsutils = new DnsUtilsWindows(this);
|
|
m_splitTunnelManager = WindowsSplitTunnel::create(m_firewallManager);
|
|
|
|
connect(m_wgutils.get(), &WireguardUtilsWindows::backendFailure, this,
|
|
&WindowsDaemon::monitorBackendFailure);
|
|
connect(this, &WindowsDaemon::activationFailure,
|
|
[this]() { m_firewallManager->disableKillSwitch(); });
|
|
}
|
|
|
|
WindowsDaemon::~WindowsDaemon() {
|
|
MZ_COUNT_DTOR(WindowsDaemon);
|
|
logger.debug() << "Daemon released";
|
|
}
|
|
|
|
void WindowsDaemon::prepareActivation(const InterfaceConfig& config, int inetAdapterIndex) {
|
|
// Before creating the interface we need to check which adapter
|
|
// routes to the server endpoint
|
|
if (inetAdapterIndex == 0) {
|
|
auto serveraddr = QHostAddress(config.m_serverIpv4AddrIn);
|
|
m_inetAdapterIndex = NetworkUtilities::AdapterIndexTo(serveraddr);
|
|
} else {
|
|
m_inetAdapterIndex = inetAdapterIndex;
|
|
}
|
|
}
|
|
|
|
void WindowsDaemon::activateSplitTunnel(const InterfaceConfig& config, int vpnAdapterIndex) {
|
|
if (m_splitTunnelManager == nullptr)
|
|
return;
|
|
|
|
if (config.m_vpnDisabledApps.length() > 0) {
|
|
m_splitTunnelManager->start(m_inetAdapterIndex, vpnAdapterIndex);
|
|
m_splitTunnelManager->excludeApps(config.m_vpnDisabledApps);
|
|
} else {
|
|
m_splitTunnelManager->stop();
|
|
}
|
|
}
|
|
|
|
bool WindowsDaemon::run(Op op, const InterfaceConfig& config) {
|
|
if (!m_splitTunnelManager) {
|
|
if (config.m_vpnDisabledApps.length() > 0) {
|
|
// The Client has sent us a list of disabled apps, but we failed
|
|
// to init the the split tunnel driver.
|
|
// So let the client know this was not possible
|
|
emit backendFailure(DaemonError::ERROR_SPLIT_TUNNEL_INIT_FAILURE);
|
|
}
|
|
return true;
|
|
}
|
|
|
|
if (op == Down) {
|
|
m_splitTunnelManager->stop();
|
|
return true;
|
|
}
|
|
if (config.m_vpnDisabledApps.length() > 0) {
|
|
if (!m_splitTunnelManager->start(m_inetAdapterIndex)) {
|
|
emit backendFailure(DaemonError::ERROR_SPLIT_TUNNEL_START_FAILURE);
|
|
};
|
|
if (!m_splitTunnelManager->excludeApps(config.m_vpnDisabledApps)) {
|
|
emit backendFailure(DaemonError::ERROR_SPLIT_TUNNEL_EXCLUDE_FAILURE);
|
|
};
|
|
// Now the driver should be running (State == 4)
|
|
if (!m_splitTunnelManager->isRunning()) {
|
|
emit backendFailure(DaemonError::ERROR_SPLIT_TUNNEL_START_FAILURE);
|
|
}
|
|
return true;
|
|
}
|
|
m_splitTunnelManager->stop();
|
|
|
|
return true;
|
|
}
|
|
|
|
void WindowsDaemon::monitorBackendFailure() {
|
|
logger.warning() << "Tunnel service is down";
|
|
|
|
emit backendFailure();
|
|
deactivate();
|
|
}
|