2 GoVPN -- simple secure free software virtual private network daemon
3 Copyright (C) 2014-2016 Sergey Matveev <stargrave@stargrave.org>
5 This program is free software: you can redistribute it and/or modify
6 it under the terms of the GNU General Public License as published by
7 the Free Software Foundation, either version 3 of the License, or
8 (at your option) any later version.
10 This program is distributed in the hope that it will be useful,
11 but WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 GNU General Public License for more details.
15 You should have received a copy of the GNU General Public License
16 along with this program. If not, see <http://www.gnu.org/licenses/>.
19 // Simple secure, DPI/censorship-resistant free software VPN daemon client.
31 "cypherpunks.ru/govpn"
35 remoteAddr = flag.String("remote", "", "Remote server address")
36 proto = flag.String("proto", "udp", "Protocol to use: udp or tcp")
37 ifaceName = flag.String("iface", "tap0", "TUN/TAP network interface")
38 verifierRaw = flag.String("verifier", "", "Verifier")
39 keyPath = flag.String("key", "", "Path to passphrase file")
40 upPath = flag.String("up", "", "Path to up-script")
41 downPath = flag.String("down", "", "Path to down-script")
42 stats = flag.String("stats", "", "Enable stats retrieving on host:port")
43 proxyAddr = flag.String("proxy", "", "Use HTTP proxy on host:port")
44 proxyAuth = flag.String("proxy-auth", "", "user:password Basic proxy auth")
45 mtu = flag.Int("mtu", govpn.MTUDefault, "MTU of TUN/TAP interface")
46 timeoutP = flag.Int("timeout", 60, "Timeout seconds")
47 timeSync = flag.Int("timesync", 0, "Time synchronization requirement")
48 noreconnect = flag.Bool("noreconnect", false, "Disable reconnection after timeout")
49 noisy = flag.Bool("noise", false, "Enable noise appending")
50 encless = flag.Bool("encless", false, "Encryptionless mode")
51 cpr = flag.Int("cpr", 0, "Enable constant KiB/sec out traffic rate")
52 egdPath = flag.String("egd", "", "Optional path to EGD socket")
53 syslog = flag.Bool("syslog", false, "Enable logging to syslog")
54 version = flag.Bool("version", false, "Print version information")
55 warranty = flag.Bool("warranty", false, "Print warranty information")
60 firstUpCall bool = true
61 knownPeers govpn.KnownPeers
62 idsCache *govpn.MACCache
68 fmt.Println(govpn.Warranty)
72 fmt.Println(govpn.VersionGet())
77 log.SetFlags(log.Ldate | log.Lmicroseconds | log.Lshortfile)
79 if *mtu > govpn.MTUMax {
80 log.Fatalln("Maximum allowable MTU is", govpn.MTUMax)
83 log.Println("Using", *egdPath, "EGD")
84 govpn.EGDInit(*egdPath)
90 if !(*proto == "udp" || *proto == "tcp") {
91 log.Fatalln("Unknown protocol specified")
93 if *verifierRaw == "" {
94 log.Fatalln("No verifier specified")
96 verifier, err := govpn.VerifierFromString(*verifierRaw)
100 key, err := govpn.KeyRead(*keyPath)
102 log.Fatalln("Unable to read the key", err)
104 priv := verifier.PasswordApply(key)
107 log.Fatalln("Currently encryptionless mode works only with TCP")
111 conf = &govpn.PeerConf{
115 Timeout: time.Second * time.Duration(timeout),
123 idsCache = govpn.NewMACCache()
124 confs := map[govpn.PeerId]*govpn.PeerConf{*verifier.Id: conf}
125 idsCache.Update(&confs)
126 log.Println(govpn.VersionGet())
128 tap, err = govpn.TAPListen(*ifaceName, *mtu)
130 log.Fatalln("Can not listen on TUN/TAP interface:", err)
134 log.Println("Stats are going to listen on", *stats)
135 statsPort, err := net.Listen("tcp", *stats)
137 log.Fatalln("Can not listen on stats port:", err)
139 go govpn.StatsProcessor(statsPort, &knownPeers)
146 termSignal := make(chan os.Signal, 1)
147 signal.Notify(termSignal, os.Interrupt, os.Kill)
151 timeouted := make(chan struct{})
152 rehandshaking := make(chan struct{})
153 termination := make(chan struct{})
156 go startUDP(timeouted, rehandshaking, termination)
158 if *proxyAddr != "" {
159 go proxyTCP(timeouted, rehandshaking, termination)
161 go startTCP(timeouted, rehandshaking, termination)
166 govpn.BothPrintf(`[finish remote="%s"]`, *remoteAddr)
167 termination <- struct{}{}
173 govpn.BothPrintf(`[sleep seconds="%d"]`, timeout)
174 time.Sleep(time.Second * time.Duration(timeout))
175 case <-rehandshaking:
181 govpn.ScriptCall(*downPath, *ifaceName, *remoteAddr)