mullvad-encrypted-dns-proxy/examples/forwarder.rs


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

use std::env::args;

use mullvad_encrypted_dns_proxy::{Forwarder, config_resolver};
use tokio::net::TcpListener;

/// This can be tested out by using curl:
/// `curl https://api.mullvad.net:$port/app/v1/relays --resolve api.mullvad.net:$port:$addr`
///  where $addr and $port are the listening address of the proxy (bind_addr).
#[tokio::main]
async fn main() {
    env_logger::init();

    let bind_addr = args().nth(1).unwrap_or("127.0.0.1:0".to_owned());

    let resolvers = config_resolver::default_resolvers();
    let configs = config_resolver::resolve_configs(&resolvers, "frakta.eu")
        .await
        .expect("Failed to resolve configs");

    let proxy_config = configs
        .into_iter()
        .find(|c| c.obfuscation.is_some())
        .expect("No XOR config");
    println!("Proxy config in use: {proxy_config:?}");

    let listener = TcpListener::bind(bind_addr)
        .await
        .expect("Failed to bind listener socket");

    let listen_addr = listener
        .local_addr()
        .expect("failed to obtain listen address");
    println!("Listening on {listen_addr}");

    while let Ok((client_conn, client_addr)) = listener.accept().await {
        println!("Incoming connection from {client_addr}");
        let connected = Forwarder::connect(&proxy_config)
            .await
            .expect("failed to connect to obfuscator");
        let _ = connected.forward(client_conn).await;
    }
}