bec8ff27ae
- Fix: custom config with custom network interface name for firewall - Keep VPN tunnel interface in firewall state - Vul fix: only allow traffic through vpn interface when needed - Adapt code to adapt to network interface name - Remove outdated TUN and TAP constants
60 lines
1.3 KiB
Go
60 lines
1.3 KiB
Go
package vpn
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/qdm12/gluetun/internal/portforward"
|
|
)
|
|
|
|
var (
|
|
errObtainVPNLocalGateway = errors.New("cannot obtain VPN local gateway IP")
|
|
errStartPortForwarding = errors.New("cannot start port forwarding")
|
|
)
|
|
|
|
func (l *Loop) startPortForwarding(ctx context.Context, data tunnelUpData) (err error) {
|
|
if !data.portForwarding {
|
|
return nil
|
|
}
|
|
|
|
// only used for PIA for now
|
|
gateway, err := l.routing.VPNLocalGatewayIP(data.vpnIntf)
|
|
if err != nil {
|
|
return fmt.Errorf("%w: %s", errObtainVPNLocalGateway, err)
|
|
}
|
|
l.logger.Info("VPN gateway IP address: " + gateway.String())
|
|
|
|
pfData := portforward.StartData{
|
|
PortForwarder: data.portForwarder,
|
|
Gateway: gateway,
|
|
ServerName: data.serverName,
|
|
Interface: data.vpnIntf,
|
|
}
|
|
_, err = l.portForward.Start(ctx, pfData)
|
|
if err != nil {
|
|
return fmt.Errorf("%w: %s", errStartPortForwarding, err)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (l *Loop) stopPortForwarding(ctx context.Context, enabled bool,
|
|
timeout time.Duration) {
|
|
if !enabled {
|
|
return // nothing to stop
|
|
}
|
|
|
|
if timeout > 0 {
|
|
var cancel context.CancelFunc
|
|
ctx, cancel = context.WithTimeout(ctx, timeout)
|
|
defer cancel()
|
|
}
|
|
|
|
_, err := l.portForward.Stop(ctx)
|
|
if err != nil {
|
|
l.logger.Error("cannot stop port forwarding: " + err.Error())
|
|
}
|
|
}
|