2 GoVPN -- simple secure free software virtual private network daemon
3 Copyright (C) 2014-2015 Sergey Matveev <stargrave@stargrave.org>
5 This program is free software: you can redistribute it and/or modify
6 it under the terms of the GNU General Public License as published by
7 the Free Software Foundation, either version 3 of the License, or
8 (at your option) any later version.
10 This program is distributed in the hope that it will be useful,
11 but WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 GNU General Public License for more details.
15 You should have received a copy of the GNU General Public License
16 along with this program. If not, see <http://www.gnu.org/licenses/>.
19 // Simple secure, DPI/censorship-resistant free software VPN daemon client.
34 remoteAddr = flag.String("remote", "", "Remote server address")
35 proto = flag.String("proto", "udp", "Protocol to use: udp or tcp")
36 ifaceName = flag.String("iface", "tap0", "TAP network interface")
37 verifierRaw = flag.String("verifier", "", "Verifier")
38 keyPath = flag.String("key", "", "Path to passphrase file")
39 upPath = flag.String("up", "", "Path to up-script")
40 downPath = flag.String("down", "", "Path to down-script")
41 stats = flag.String("stats", "", "Enable stats retrieving on host:port")
42 proxyAddr = flag.String("proxy", "", "Use HTTP proxy on host:port")
43 proxyAuth = flag.String("proxy-auth", "", "user:password Basic proxy auth")
44 mtu = flag.Int("mtu", 1452, "MTU for outgoing packets")
45 timeoutP = flag.Int("timeout", 60, "Timeout seconds")
46 noisy = flag.Bool("noise", false, "Enable noise appending")
47 cpr = flag.Int("cpr", 0, "Enable constant KiB/sec out traffic rate")
48 egdPath = flag.String("egd", "", "Optional path to EGD socket")
53 firstUpCall bool = true
54 knownPeers govpn.KnownPeers
55 idsCache govpn.CipherCache
62 log.SetFlags(log.Ldate | log.Lmicroseconds | log.Lshortfile)
67 log.Println("Using", *egdPath, "EGD")
68 govpn.EGDInit(*egdPath)
71 verifier, err := govpn.VerifierFromString(*verifierRaw)
75 priv := verifier.PasswordApply(govpn.StringFromFile(*keyPath))
76 conf = &govpn.PeerConf{
78 Timeout: time.Second * time.Duration(timeout),
84 idsCache = govpn.NewCipherCache([]govpn.PeerId{*verifier.Id})
85 log.Println(govpn.VersionGet())
87 tap, err = govpn.TAPListen(*ifaceName)
89 log.Fatalln("Can not listen on TAP interface:", err)
92 log.Println("Max MTU on TAP interface:", govpn.TAPMaxMTU())
94 log.Println("Stats are going to listen on", *stats)
95 statsPort, err := net.Listen("tcp", *stats)
97 log.Fatalln("Can not listen on stats port:", err)
99 go govpn.StatsProcessor(statsPort, &knownPeers)
102 termSignal := make(chan os.Signal, 1)
103 signal.Notify(termSignal, os.Interrupt, os.Kill)
107 timeouted := make(chan struct{})
108 rehandshaking := make(chan struct{})
109 termination := make(chan struct{})
110 if *proxyAddr != "" {
115 go startUDP(timeouted, rehandshaking, termination)
117 if *proxyAddr != "" {
118 go proxyTCP(timeouted, rehandshaking, termination)
120 go startTCP(timeouted, rehandshaking, termination)
123 log.Fatalln("Unknown protocol specified")
127 log.Fatalln("Finishing")
128 termination <- struct{}{}
132 case <-rehandshaking:
138 govpn.ScriptCall(*downPath, *ifaceName)