package main import ( "bufio" "fmt" "net" "os" "strconv" "strings" "sync" "time" "github.com/miekg/dns" "errors" "crypto/tls" ) type ResolvError struct { qname, net string nameservers []string } func (e ResolvError) Error() string { errmsg := fmt.Sprintf("%s resolv failed on %s (%s)", e.qname, strings.Join(e.nameservers, "; "), e.net) return errmsg } type RResp struct { msg *dns.Msg nameserver string rtt time.Duration } type Resolver struct { servers []string domain_server *suffixTreeNode config *ResolvSettings tcpClient *dns.Client udpClient *dns.Client httpsClient *dns.Client } func NewResolver(c ResolvSettings) *Resolver { r := &Resolver{ servers: []string{}, domain_server: newSuffixTreeRoot(), config: &c, } if serverList := os.Getenv("SERVER_LIST_FILE"); serverList != "" { r.ReadServerListFile(serverList) } else if len(c.ServerListFile) > 0 { r.ReadServerListFile(c.ServerListFile) } if len(c.ResolvFile) > 0 { clientConfig, err := dns.ClientConfigFromFile(c.ResolvFile) if err != nil { logger.Error(":%s is not a valid resolv.conf file\n", c.ResolvFile) logger.Error("%s", err) panic(err) } for _, server := range clientConfig.Servers { r.servers = append(r.servers, net.JoinHostPort(server, clientConfig.Port)) } } if len(c.DOHServer) > 0 { r.servers = append([]string{c.DOHServer}, r.servers...) } timeout := r.Timeout() r.udpClient = &dns.Client{ Net: "udp", ReadTimeout: timeout, WriteTimeout: timeout, } r.tcpClient = &dns.Client{ Net: "tcp", ReadTimeout: timeout, WriteTimeout: timeout, } r.httpsClient = &dns.Client{ Net: "https", ReadTimeout: timeout, WriteTimeout: timeout, } return r } func (r *Resolver) parseServerListFile(buf *os.File) { scanner := bufio.NewScanner(buf) var line string var idx int for scanner.Scan() { line = strings.TrimSpace(scanner.Text()) if !strings.HasPrefix(line, "server") { continue } idx = strings.Index(line, "=") if idx == -1 { continue } line = strings.TrimSpace(line[idx:]) if strings.HasPrefix(line, "https://") { r.servers = append(r.servers, line) continue } tokens := strings.Split(line, "/") switch len(tokens) { case 3: domain := tokens[1] ip := tokens[2] if !isDomain(domain) || !isIP(ip) { continue } r.domain_server.sinsert(strings.Split(domain, "."), ip) case 1: srv_port := strings.Split(line, "#") if len(srv_port) > 2 { continue } ip := "" if ip = srv_port[0]; !isIP(ip) { continue } port := "53" if len(srv_port) == 2 { if _, err := strconv.Atoi(srv_port[1]); err != nil { continue } port = srv_port[1] } r.servers = append(r.servers, net.JoinHostPort(ip, port)) } } } func (r *Resolver) ReadServerListFile(path string) { files := strings.Split(path, ";") for _, file := range files { buf, err := os.Open(file) if err != nil { panic("Can't open " + file) } defer buf.Close() r.parseServerListFile(buf) } } // Lookup will ask each nameserver in top-to-bottom fashion, starting a new request // in every second, and return as early as possbile (have an answer). // It returns an error if no request has succeeded. func (r *Resolver) Lookup(net string, req *dns.Msg) (message *dns.Msg, err error) { if net == "udp" && settings.ResolvConfig.SetEDNS0 { req = req.SetEdns0(65535, true) } qname := req.Question[0].Name res := make(chan *RResp, 1) var wg sync.WaitGroup L := func(resolver *Resolver, nameserver string) { defer wg.Done() c, err := resolver.resolverFor(net, nameserver) if err != nil { logger.Warn("error:%s", err.Error()) return } r, rtt, err := c.Exchange(req, nameserver) if err != nil { logger.Warn("%s socket error on %s", qname, nameserver) logger.Warn("error:%s", err.Error()) return } // If SERVFAIL happen, should return immediately and try another upstream resolver. // However, other Error code like NXDOMAIN is an clear response stating // that it has been verified no such domain existas and ask other resolvers // would make no sense. See more about #20 if r != nil && r.Rcode != dns.RcodeSuccess { logger.Warn("%s failed to get an valid answer on %s", qname, nameserver) if r.Rcode == dns.RcodeServerFailure { return } } re := &RResp{r, nameserver, rtt} select { case res <- re: default: } } ticker := time.NewTicker(time.Duration(settings.ResolvConfig.Interval) * time.Millisecond) defer ticker.Stop() // Start lookup on each nameserver top-down, in every second nameservers := r.Nameservers(qname) for _, nameserver := range nameservers { wg.Add(1) go L(r, nameserver) // but exit early, if we have an answer select { case re := <-res: logger.Debug("%s resolv on %s rtt: %v", UnFqdn(qname), re.nameserver, re.rtt) return re.msg, nil case <-ticker.C: continue } } // wait for all the namservers to finish wg.Wait() select { case re := <-res: logger.Debug("%s resolv on %s rtt: %v", UnFqdn(qname), re.nameserver, re.rtt) return re.msg, nil default: return nil, ResolvError{qname, net, nameservers} } } func (r *Resolver) resolverFor(net, nameserver string) (*dns.Client, error) { if strings.HasPrefix(nameserver, "https") { return r.httpsClient, nil } else if strings.HasSuffix(nameserver, ":853") { // TODO We need to set the server name so we can confirm the TLS connection. This may require a rewrite of storing nameservers. return &dns.Client{ Net: "tcp-tls", ReadTimeout: r.Timeout(), WriteTimeout: r.Timeout(), TLSConfig: &tls.Config{ ServerName: "", }, }, nil } else if net == "udp" { return r.udpClient, nil } else if net == "tcp" { return r.tcpClient, nil } return nil, errors.New("no client for nameserver") } // Namservers return the array of nameservers, with port number appended. // '#' in the name is treated as port separator, as with dnsmasq. func (r *Resolver) Nameservers(qname string) []string { queryKeys := strings.Split(qname, ".") queryKeys = queryKeys[:len(queryKeys)-1] // ignore last '.' ns := []string{} if v, found := r.domain_server.search(queryKeys); found { logger.Debug("%s be found in domain server list, upstream: %v", qname, v) ns = append(ns, net.JoinHostPort(v, "53")) //Ensure query the specific upstream nameserver in async Lookup() function. return ns } for _, nameserver := range r.servers { ns = append(ns, nameserver) } return ns } func (r *Resolver) Timeout() time.Duration { return time.Duration(r.config.Timeout) * time.Second }