0ct0pu5/hev-socks5-tproxy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Scripts: per-app mode.

Browse source
This commit is contained in:
hev 2021-05-17 22:48:05 +08:00
parent 6c6a2438b6
commit 8451efb3b8
1 changed files with 41 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

41
scripts/tp Executable file
View file

@ -0,0 +1,41 @@
#!/bin/bash
NET_CLS_DIR="/sys/fs/cgroup/net_cls/tproxy"
NET_CLS_ID=1088
PKT_MARK=1088
TCP_PORT=1088
UDP_PORT=1088
function init() {
# CGroup
mkdir -p ${NET_CLS_DIR}
chmod 0666 ${NET_CLS_DIR}/cgroup.procs
echo ${NET_CLS_ID} > ${NET_CLS_DIR}/net_cls.classid
# IPv4
iptables -t mangle -A PREROUTING -m mark ! --mark ${PKT_MARK} -j RETURN
iptables -t mangle -A PREROUTING -p tcp -j TPROXY --on-port ${TCP_PORT}
iptables -t mangle -A PREROUTING -p udp -j TPROXY --on-port ${UDP_PORT}
iptables -t mangle -A OUTPUT -m cgroup --cgroup ${NET_CLS_ID} -j MARK --set-mark ${PKT_MARK}
ip rule add fwmark ${PKT_MARK} table 100
ip route add local default dev lo table 100
# IPv6
ip6tables -t mangle -A PREROUTING -m mark ! --mark ${PKT_MARK} -j RETURN
ip6tables -t mangle -A PREROUTING -p tcp -j TPROXY --on-port ${TCP_PORT}
ip6tables -t mangle -A PREROUTING -p udp -j TPROXY --on-port ${UDP_PORT}
ip6tables -t mangle -A OUTPUT -m cgroup --cgroup ${NET_CLS_ID} -j MARK --set-mark ${PKT_MARK}
ip -6 rule add fwmark ${PKT_MARK} table 100
ip -6 route add local default dev lo table 100
echo $$ > ${NET_CLS_DIR}/cgroup.procs
}
if [ ! -e ${NET_CLS_DIR} ]; then
init > /dev/null 2> /dev/null
fi
echo $$ > ${NET_CLS_DIR}/cgroup.procs
exec "$@"