#pragma once #include "pools.h" #include "conntrack.h" #include "desync.h" #include "protocol.h" #include "helpers.h" #include #include #include #include #include #include #include #include #define TLS_PARTIALS_ENABLE true #define Q_RCVBUF (128*1024) // in bytes #define Q_SNDBUF (64*1024) // in bytes #define RAW_SNDBUF (64*1024) // in bytes #define Q_MAXLEN 1024 // in packets #define BADSEQ_INCREMENT_DEFAULT -10000 #define BADSEQ_ACK_INCREMENT_DEFAULT -66000 #define IPFRAG_UDP_DEFAULT 8 #define IPFRAG_TCP_DEFAULT 32 #define UDPLEN_INCREMENT_DEFAULT 2 #define HOSTLIST_AUTO_FAIL_THRESHOLD_DEFAULT 3 #define HOSTLIST_AUTO_FAIL_TIME_DEFAULT 60 #define HOSTLIST_AUTO_RETRANS_THRESHOLD_DEFAULT 3 enum log_target { LOG_TARGET_CONSOLE=0, LOG_TARGET_FILE, LOG_TARGET_SYSLOG }; struct desync_profile { int n; // number of the profile uint16_t wsize,wssize; uint8_t wscale,wsscale; char wssize_cutoff_mode; // n - packets, d - data packets, s - relative sequence unsigned int wssize_cutoff; bool hostcase, hostnospace, domcase; char hostspell[4]; enum dpi_desync_mode desync_mode0,desync_mode,desync_mode2; bool desync_retrans,desync_skip_nosni,desync_any_proto; unsigned int desync_repeats,desync_split_pos,desync_seqovl,desync_ipfrag_pos_tcp,desync_ipfrag_pos_udp; enum httpreqpos desync_split_http_req; enum tlspos desync_split_tls; char desync_start_mode, desync_cutoff_mode; // n - packets, d - data packets, s - relative sequence unsigned int desync_start, desync_cutoff; uint8_t desync_ttl, desync_ttl6; autottl desync_autottl, desync_autottl6; uint32_t desync_fooling_mode; uint32_t desync_badseq_increment, desync_badseq_ack_increment; uint8_t fake_http[1460],fake_tls[1460],fake_unknown[1460],fake_syndata[1460],seqovl_pattern[1460]; uint8_t fake_unknown_udp[1472],udplen_pattern[1472],fake_quic[1472],fake_wg[1472],fake_dht[1472]; size_t fake_http_size,fake_tls_size,fake_quic_size,fake_wg_size,fake_dht_size,fake_unknown_size,fake_syndata_size,fake_unknown_udp_size; int udplen_increment; bool filter_ipv4,filter_ipv6; port_filter pf_tcp,pf_udp; uint32_t filter_l7; // L7_PROTO_* bits ipset ips,ips_exclude; struct str_list_head ipset_files, ipset_exclude_files; strpool *hostlist, *hostlist_exclude; struct str_list_head hostlist_files, hostlist_exclude_files; char hostlist_auto_filename[PATH_MAX]; int hostlist_auto_fail_threshold, hostlist_auto_fail_time, hostlist_auto_retrans_threshold; time_t hostlist_auto_mod_time; hostfail_pool *hostlist_auto_fail_counters; }; #define PROFILE_IPSETS_EMPTY(dp) (IPSET_EMPTY(&dp->ips) && IPSET_EMPTY(&dp->ips_exclude)) struct desync_profile_list { struct desync_profile dp; LIST_ENTRY(desync_profile_list) next; }; LIST_HEAD(desync_profile_list_head, desync_profile_list); struct desync_profile_list *dp_list_add(struct desync_profile_list_head *head); void dp_list_destroy(struct desync_profile_list_head *head); bool dp_list_have_autohostlist(struct desync_profile_list_head *head); struct params_s { enum log_target debug_target; char debug_logfile[PATH_MAX]; bool debug; #ifdef __linux__ int qnum; #elif defined(BSD) uint16_t port; // divert port #endif char bind_fix4,bind_fix6; uint32_t desync_fwmark; // unused in BSD struct desync_profile_list_head desync_profiles; #ifdef __CYGWIN__ struct str_list_head ssid_filter,nlm_filter; #else bool droproot; uid_t uid; gid_t gid; #endif char hostlist_auto_debuglog[PATH_MAX]; unsigned int ctrack_t_syn, ctrack_t_est, ctrack_t_fin, ctrack_t_udp; t_conntrack conntrack; }; extern struct params_s params; extern const char *progname; int DLOG(const char *format, ...); int DLOG_ERR(const char *format, ...); int DLOG_PERROR(const char *s); int DLOG_CONDUP(const char *format, ...); int HOSTLIST_DEBUGLOG_APPEND(const char *format, ...);