Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
 DeepFal
|
a9e6ca7080 | ||
|
DeepFal
|
3272e66247 | ||
|
DeepFal
|
6f2a1472b6 |
No files matched your search
@@ -87,10 +87,15 @@ jobs:
|
||||
if: startsWith(github.ref, 'refs/tags/v')
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
# 只取安装包；docker 任务还会上传构建记录，不能一并下载
|
||||
- uses: actions/download-artifact@v4
|
||||
with:
|
||||
name: binaries
|
||||
path: dist
|
||||
- uses: actions/download-artifact@v4
|
||||
with:
|
||||
name: macos-app
|
||||
path: dist
|
||||
merge-multiple: true
|
||||
- name: Checksums
|
||||
run: cd dist && sha256sum * > SHA256SUMS
|
||||
# 说明 = 标签注释正文（本次更新）+ 下载说明（区分客户端与服务端）+ 自动生成的变更列表
|
||||
|
||||
@@ -7,6 +7,7 @@
|
||||
# make dmg 打包 macOS 安装镜像 dist/PortRelay-<版本>.dmg（UNIVERSAL=1 构建通用版本）
|
||||
# make release 打包服务端（Linux）与命令行 Agent（Linux / Windows）到 dist/
|
||||
# make snapshots 离屏渲染 App 界面截图（tools/ui-snapshots/out）
|
||||
# make readme-images 重新生成 README 的全部截图和动图到 docs/images（需要 Google Chrome）
|
||||
|
||||
VERSION ?= $(shell git describe --tags --always --dirty 2>/dev/null | sed 's/^v//' || echo dev)
|
||||
LDFLAGS := -s -w -X main.version=$(VERSION)
|
||||
@@ -16,7 +17,7 @@ GOBUILD := CGO_ENABLED=0 go build -trimpath -ldflags "$(LDFLAGS)"
|
||||
SERVER_PLATFORMS := linux/amd64 linux/arm64
|
||||
AGENT_PLATFORMS := linux/amd64 linux/arm64 windows/amd64
|
||||
|
||||
.PHONY: all test fmt server agent app install-app dmg release snapshots clean
|
||||
.PHONY: all test fmt server agent app install-app dmg release snapshots readme-images clean
|
||||
|
||||
all: test agent
|
||||
|
||||
@@ -80,5 +81,8 @@ release:
|
||||
snapshots:
|
||||
tools/ui-snapshots/render.sh
|
||||
|
||||
readme-images:
|
||||
tools/ui-snapshots/readme.sh
|
||||
|
||||
clean:
|
||||
rm -rf bin build dist PortRelay.app mac-native/PortRelay tools/ui-snapshots/.build tools/ui-snapshots/out
|
||||
@@ -51,18 +51,18 @@ PortRelay 把这件事变成三步：
|
||||
**访问控制**
|
||||
|
||||
- 三种访问方式：**仅授权链接**（默认，最安全）、IP / 网段白名单（可与授权链接叠加），以及全部放通。
|
||||
- 邀请链接可以设置链接有效期、可用设备数、授权后可访问时长（30 分钟、1 小时、2 小时、8 小时、当天有效、直到通道关闭，或自定义），以及是否需要审批。
|
||||
- 邀请链接可以设置链接有效期、可用设备数、授权后可访问时长（30 分钟、1 小时、2 小时、8 小时、当天有效、通道开启期间，或自定义），以及是否需要审批。
|
||||
- 需要审批时，App 会弹出系统通知，一键批准或拒绝；访问者的页面会自动刷新结果。
|
||||
- **计时从首次连接开始**：同事拿到授权后不用急着连，开始用的时候才开始计时。
|
||||
- 授权到期或被撤销后，**已建立的连接也会立刻断开**；未授权的连接直接被重置（TCP RST）并留下拦截记录。
|
||||
- **申请延长**：访问结束后 2 小时内（通道已关闭也可以），同事重新打开原链接点「申请延长」；你在 App、菜单栏或网页面板里选择延长多久即批准，关闭的通道会自动重新开启。你也可以对已授权或刚结束的设备主动延长。
|
||||
- **申请延长**：同事重新打开原来的邀请链接，点「申请延长」，你在 App、菜单栏或网页面板里选好延长多久即可批准。授权还没到期时，从原到期时间往后顺延；已经结束的从批准时算起，结束后 2 小时内都能申请，通道关了也没关系，批准后会自动重新开启。被撤销的授权不能延长。你也可以主动给已授权或刚结束的设备延长。
|
||||
- **通道组**：添加通道时目标是一个列表，每行一台主机、多个端口用逗号隔开（也可以直接粘贴一串 IP），每个地址一个通道，自动分配一段连续端口，并放进同一个通道组。组内地址共用一条邀请链接和同一份授权：同事授权一次即可访问整组，撤销一次全组断开。
|
||||
|
||||
**通道生命周期**
|
||||
|
||||
- **闲置自动关闭**：没有连接、没有有效授权、没有待处理申请，也没有还能使用的邀请链接时开始计时，默认 30 分钟后关闭。
|
||||
- 可选的**最长开启时长**，到点无论是否在用都关闭。
|
||||
- 通道组内任一地址在用，整组都不算闲置，一起开关、一起关闭。
|
||||
- 可选的**最长开启时长**，到点无论是否在用都关闭。批准延长时，如果新的授权到期时间更晚，通道会开到授权结束。
|
||||
- 通道组的闲置按整组计算：任一地址在用，整组都不会因闲置关闭，到时也是整组一起关。每个地址仍然可以单独开关。
|
||||
- 记录首次连接时间、实际连接时长和每次关闭的原因。
|
||||
- 编辑通道不会打断现有连接；更换端口时先绑定新端口再释放旧端口。
|
||||
|
||||
@@ -82,7 +82,7 @@ PortRelay 把这件事变成三步：
|
||||
|
||||
<p align="center">
|
||||
<img src="docs/images/live-traffic.gif" alt="通道卡片与实时流量" width="100%">
|
||||
<br><sub>通道卡片：访问地址、授权状态、实际连接时长，以及近 10 分钟流量（动图为加速演示）</sub>
|
||||
<br><sub>通道卡片：访问地址、待处理的访问与延长申请、实际连接时长，以及近 10 分钟流量（动图为加速演示）</sub>
|
||||
</p>
|
||||
|
||||
<picture>
|
||||
@@ -104,18 +104,28 @@ PortRelay 把这件事变成三步：
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
**申请延长**：授权快到期或刚结束时，同事再打开同一个链接，就能看到自己的授权状态并申请延长，不用你重新发邀请。
|
||||
|
||||
<table>
|
||||
<tr>
|
||||
<td align="center"><img src="docs/images/auth-renew.png" alt="申请延长" width="100%"><br><sub>④ 再次打开链接，申请延长</sub></td>
|
||||
<td align="center"><img src="docs/images/auth-renew-pending.png" alt="等待批准延长" width="100%"><br><sub>⑤ 等待管理员选择时长</sub></td>
|
||||
<td align="center"><img src="docs/images/auth-renew-ok.png" alt="延长已批准" width="100%"><br><sub>⑥ 延长已批准</sub></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
你这边，通道卡片上会出现「申请延长」。打开「连接与授权」，延长申请排在最前面，点「批准延长」选好时长即可，同事的页面随即显示新的到期时间。这里还列出待审批的访问申请、已授权设备（在线状态与剩余时间）、最近结束的授权和仍然有效的邀请链接，刚结束的设备也可以直接延长。
|
||||
|
||||
<p align="center">
|
||||
<img src="docs/images/app-access.png" alt="连接与授权：延长申请、待审批、已授权设备、最近结束" width="80%">
|
||||
</p>
|
||||
|
||||
**通道组**：组卡片汇总整组的状态与流量，下面逐行列出每个访问地址，可以单独开关、单独邀请或移出组。
|
||||
|
||||
<p align="center">
|
||||
<img src="docs/images/app-group.png" alt="通道组" width="100%">
|
||||
</p>
|
||||
|
||||
**连接与授权管理**：待审批的申请、已授权设备（在线状态与剩余时间），以及仍然有效的邀请链接，都在同一处管理。
|
||||
|
||||
<p align="center">
|
||||
<img src="docs/images/app-access.png" alt="授权管理" width="80%">
|
||||
</p>
|
||||
|
||||
<details>
|
||||
<summary><b>网页面板与更多截图</b></summary>
|
||||
<br>
|
||||
@@ -210,10 +220,10 @@ make server # 产物：dist/portrelay-server-linux-{amd64,arm64}
|
||||
### 3. 创建通道并邀请同事
|
||||
|
||||
1. 点 **添加通道**，填写名称和目标主机、端口（如 `10.0.1.16`、`3306`）。可以先测试一下本机能否连通；网关上的访问端口自动分配。
|
||||
2. 访问方式保持默认的 **仅授权链接**，然后点 **邀请**，选择授权后可访问时长、可用设备数，以及是否需要审批。
|
||||
2. 访问方式保持默认的 **仅授权链接**。保存后会直接弹出邀请设置，选择授权后可访问时长、可用设备数，以及是否需要审批。以后要再发邀请，点通道卡片上的 **邀请**。
|
||||
3. 把生成的文案或二维码发给同事。同事打开链接、填写姓名后，就可以用数据库客户端或 SSH 连接 `192.168.1.10:33660`。
|
||||
|
||||
需要一次开放多台主机时（比如一组服务器），同样点 **添加通道**，每行填一台主机（端口用逗号隔开，可以直接粘贴一串 IP），表单会预览端口映射并自动放进新建的通道组，闲置关闭、限速、访问控制等设置对每个地址都生效。创建后点 **邀请整组**。之后要加地址，点组卡片上的 **添加地址**；已有通道可以在编辑时选择加入某个组。组的「连接与授权」可以按设备或按地址查看在线连接和接入记录。
|
||||
需要一次开放多台主机时（比如一组服务器），同样点 **添加通道**，每行填一台主机（端口用逗号隔开，可以直接粘贴一串 IP），表单会预览端口映射并自动放进新建的通道组，闲置关闭、限速、访问控制等设置对每个地址都生效。创建后弹出的邀请对整组有效。之后要加地址，点组卡片上的 **添加地址**；已有通道可以在编辑时选择加入某个组。组的「连接与授权」可以按设备或按地址查看在线连接和接入记录。
|
||||
|
||||
## 配置参考
|
||||
|
||||
@@ -299,6 +309,7 @@ make agent # 编译当前平台的 Agent 到 bin/
|
||||
make app # 构建 PortRelay.app（UNIVERSAL=1 ./build-app.sh 构建通用二进制）
|
||||
make release # 打包全部平台的网关与 Agent 到 dist/
|
||||
make snapshots # 离屏渲染 App 各界面截图到 tools/ui-snapshots/out/
|
||||
make readme-images # 重新生成 README 的全部截图和动图到 docs/images/
|
||||
```
|
||||
|
||||
```text
|
||||
@@ -309,10 +320,10 @@ client/ Agent：配置、隧道、本地 API、闲置关闭、流
|
||||
core/ 协议消息、ACL、流量计量与限速
|
||||
mac-native/ SwiftUI 菜单栏 App
|
||||
deploy/ systemd、Docker Compose 部署示例与安装脚本
|
||||
tools/ui-snapshots/ 离屏截图工具与 README 动图生成（mkgif）
|
||||
tools/ui-snapshots/ README 截图与动图：App 离屏渲染、网页截图、GIF 合成
|
||||
```
|
||||
|
||||
README 里的截图和动图都用模拟数据生成：`tools/ui-snapshots/render.sh readme` 渲染截图，`FRAMES=40 tools/ui-snapshots/render.sh gif` 渲染逐帧画面，再用 `go run ./tools/ui-snapshots/mkgif` 合成 GIF。
|
||||
README 里的截图和动图都使用模拟数据，改了界面后运行 `make readme-images` 即可全部重新生成（需要 Google Chrome）。App 界面离屏渲染，动图由逐帧画面合成，授权页和网页面板用无头 Chrome 截图。
|
||||
|
||||
欢迎提交 Issue 和 Pull Request。提交前请先运行 `make test`。
|
||||
|
||||
|
||||
+26
-18
@@ -54,18 +54,18 @@ PortRelay turns that into three steps:
|
||||
**Access control**
|
||||
|
||||
- Three access modes: **invite-only** (the default and safest), an IP / CIDR allowlist (which can be combined with invites), and open to all.
|
||||
- Each invite link has its own expiry, device limit, access duration once granted (30 min, 1 h, 2 h, 8 h, until end of day, until the tunnel closes, or a custom length) and an optional approval step.
|
||||
- Each invite link has its own expiry, device limit, access duration once granted (30 min, 1 h, 2 h, 8 h, until end of day, while the tunnel stays open, or a custom length) and an optional approval step.
|
||||
- When approval is required, the app shows a system notification and you approve or deny with one click. The requester's page refreshes on its own.
|
||||
- **The access clock starts at the first connection**, so a teammate can accept an invite now and use it later.
|
||||
- When access expires or is revoked, **existing connections are dropped too**. Unauthorized connections are reset (TCP RST) and logged.
|
||||
- **Extensions.** Within two hours after access ends (even if the tunnel has been closed), a teammate reopens the original link and clicks 申请延长 (Request extension). You approve it by picking a duration in the app, the menu bar or the web panel, and a closed tunnel reopens on its own. You can also extend a running or just-ended grant yourself.
|
||||
- **Extensions.** A teammate reopens the original invite link and clicks 申请延长 (Request extension); you approve by picking a duration in the app, the menu bar or the web panel. A grant that is still running is extended from its current expiry. One that has ended starts again from the moment you approve; that works for up to two hours after it ended, even if the tunnel has been closed, and the tunnel reopens on approval. Revoked grants cannot be extended. You can also extend a running or just-ended grant yourself.
|
||||
- **Tunnel groups**: the add-tunnel form takes a list of targets, one host per row with comma-separated ports (a pasted list of IPs is split into rows), creates one tunnel per address on a contiguous block of gateway ports and puts them in one group. A group shares one invite link and one set of grants: a teammate is authorized once for the whole group, and one revoke disconnects them everywhere.
|
||||
|
||||
**Tunnel lifecycle**
|
||||
|
||||
- **Idle auto-close.** The idle timer starts when a tunnel has no connections, no active grants, no pending requests and no invite links with uses left. By default the tunnel closes after 30 minutes of idle time.
|
||||
- An optional **maximum open time** closes the tunnel at a fixed point, whether or not it is in use.
|
||||
- While any address in a group is in use, the whole group counts as in use; members are switched on and off together.
|
||||
- An optional **maximum open time** closes the tunnel at a fixed point, whether or not it is in use. If you approve an extension that runs past that point, the tunnel stays open until the grant ends.
|
||||
- Idle time is counted per group: while any address is in use, none of them is closed for being idle, and when the group does go idle it closes as a whole. Each address can still be switched on or off on its own.
|
||||
- PortRelay records the first-connection time, the actual connected time and why each tunnel was closed.
|
||||
- Editing a tunnel keeps existing connections. Moving a tunnel binds the new port before releasing the old one.
|
||||
|
||||
@@ -85,7 +85,7 @@ PortRelay turns that into three steps:
|
||||
|
||||
<p align="center">
|
||||
<img src="docs/images/live-traffic.gif" alt="Tunnel card with live traffic" width="100%">
|
||||
<br><sub>A tunnel card: access address, grants, connected time and the last 10 minutes of traffic (sped up)</sub>
|
||||
<br><sub>A tunnel card: access address, pending access and extension requests, connected time and the last 10 minutes of traffic (sped up)</sub>
|
||||
</p>
|
||||
|
||||
<picture>
|
||||
@@ -107,18 +107,28 @@ PortRelay turns that into three steps:
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
**Extensions.** When access is about to run out or has just ended, the teammate opens the same link again, sees where their access stands and asks for more time. You don't need to send a new invite.
|
||||
|
||||
<table>
|
||||
<tr>
|
||||
<td align="center"><img src="docs/images/auth-renew.png" alt="Request an extension" width="100%"><br><sub>④ Reopen the link and request an extension</sub></td>
|
||||
<td align="center"><img src="docs/images/auth-renew-pending.png" alt="Waiting for the extension" width="100%"><br><sub>⑤ Wait while you choose a duration</sub></td>
|
||||
<td align="center"><img src="docs/images/auth-renew-ok.png" alt="Extension approved" width="100%"><br><sub>⑥ Extension approved</sub></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
On your side, the tunnel card shows 申请延长 (Extension requested). Open 连接与授权 (Connections & access): extension requests are listed first, and you approve one by clicking 批准延长 (Approve) and picking a duration. The teammate's page then shows the new expiry. The same view lists pending access requests, authorized devices (with online state and remaining time), recently ended grants and active invite links, and a device whose access just ended can be extended from there too.
|
||||
|
||||
<p align="center">
|
||||
<img src="docs/images/app-access.png" alt="Access management: extension requests, pending requests, authorized devices, recently ended" width="80%">
|
||||
</p>
|
||||
|
||||
**Tunnel groups.** A group card sums up the state and traffic of the whole group and lists every access address. Each address can be switched, invited or moved out on its own.
|
||||
|
||||
<p align="center">
|
||||
<img src="docs/images/app-group.png" alt="Tunnel group" width="100%">
|
||||
</p>
|
||||
|
||||
**Access management.** Pending requests, authorized devices (with online state and remaining time) and active invite links are all managed in one place.
|
||||
|
||||
<p align="center">
|
||||
<img src="docs/images/app-access.png" alt="Access management" width="80%">
|
||||
</p>
|
||||
|
||||
<details>
|
||||
<summary><b>Web panel and more screenshots</b></summary>
|
||||
<br>
|
||||
@@ -219,10 +229,10 @@ Open ⚙️ Settings and fill in:
|
||||
### 3. Create a tunnel and invite someone
|
||||
|
||||
1. Click **添加通道** (Add tunnel) and enter a name, a target host and port such as `10.0.1.16` and `3306`. You can probe the target from your machine first; the gateway port is assigned automatically.
|
||||
2. Keep the default access mode, **仅授权链接** (invite-only). Click **邀请** (Invite), then choose how long access lasts, how many devices may use the link, and whether approval is required.
|
||||
2. Keep the default access mode, **仅授权链接** (invite-only). After you save, the invite form opens: choose how long access lasts, how many devices may use the link, and whether approval is required. To send another invite later, click **邀请** (Invite) on the tunnel card.
|
||||
3. Send the generated message or QR code. Once the teammate has entered their name, they can connect their database client or SSH to `192.168.1.10:33660`.
|
||||
|
||||
To open several hosts at once (a set of servers, say), use the same **添加通道** (Add tunnel) form with one host per row (comma-separated ports; you can paste a list of IPs). The form previews the port mapping and puts the addresses in a new tunnel group; idle close, bandwidth and access settings apply to every address. Then click **邀请整组** (Invite group). To add addresses later, click **添加地址** (Add address) on the group card; an existing tunnel can join a group from its edit form. A group's connections and history can be viewed by device or by address.
|
||||
To open several hosts at once (a set of servers, say), use the same **添加通道** (Add tunnel) form with one host per row (comma-separated ports; you can paste a list of IPs). The form previews the port mapping and puts the addresses in a new tunnel group; idle close, bandwidth and access settings apply to every address. The invite form that opens after creation covers the whole group. To add addresses later, click **添加地址** (Add address) on the group card; an existing tunnel can join a group from its edit form. A group's connections and history can be viewed by device or by address.
|
||||
|
||||
## Configuration
|
||||
|
||||
@@ -315,6 +325,7 @@ make agent # build the agent for this platform into bin/
|
||||
make app # build PortRelay.app (UNIVERSAL=1 ./build-app.sh for a universal binary)
|
||||
make release # package gateway + agent for all platforms into dist/
|
||||
make snapshots # render app screens offscreen into tools/ui-snapshots/out/
|
||||
make readme-images # regenerate every README screenshot and animation in docs/images/
|
||||
```
|
||||
|
||||
```text
|
||||
@@ -325,13 +336,10 @@ client/ agent: config, tunnels, local API, idle close, traffic st
|
||||
core/ protocol messages, ACL, traffic metering and rate limiting
|
||||
mac-native/ SwiftUI menu-bar app
|
||||
deploy/ systemd and Docker Compose examples, install script
|
||||
tools/ui-snapshots/ offscreen screenshot renderer and README GIF builder (mkgif)
|
||||
tools/ui-snapshots/ README images: offscreen app rendering, web screenshots, GIF encoding
|
||||
```
|
||||
|
||||
All screenshots and animations in this README come from mock data:
|
||||
- `tools/ui-snapshots/render.sh readme` renders the screenshots;
|
||||
- `FRAMES=40 tools/ui-snapshots/render.sh gif` renders the animation frames;
|
||||
- `go run ./tools/ui-snapshots/mkgif` encodes the frames as a GIF.
|
||||
All screenshots and animations in this README use mock data. After a UI change, run `make readme-images` to regenerate them (Google Chrome required). App screens are rendered offscreen, the animation is encoded from rendered frames, and the invite pages and web panel are captured with headless Chrome.
|
||||
|
||||
Issues and pull requests are welcome. Please run `make test` before submitting.
|
||||
|
||||
|
||||
@@ -747,7 +747,8 @@
|
||||
const fmtSecs = secs => {
|
||||
secs = Math.max(0, Math.floor(secs || 0));
|
||||
const h = Math.floor(secs / 3600), m = Math.floor((secs % 3600) / 60), sec = secs % 60;
|
||||
return h > 0 ? `${h}小时${m}分` : (m > 0 ? `${m}分${sec}秒` : `${sec}秒`);
|
||||
const pad = n => String(n).padStart(2, '0');
|
||||
return h > 0 ? `${h}小时${pad(m)}分` : (m > 0 ? `${m}分${pad(sec)}秒` : `${sec}秒`);
|
||||
};
|
||||
const fmtMinutes = m => m >= 1440 && m % 1440 === 0 ? `${m / 1440} 天`
|
||||
: (m >= 60 && m % 60 === 0 ? `${m / 60} 小时` : (m > 60 ? `${Math.floor(m / 60)} 小时 ${m % 60} 分钟` : `${m} 分钟`));
|
||||
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 172 KiB After Width: | Height: | Size: 296 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 99 KiB After Width: | Height: | Size: 129 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 144 KiB After Width: | Height: | Size: 169 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 161 KiB After Width: | Height: | Size: 216 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 92 KiB After Width: | Height: | Size: 115 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 535 KiB After Width: | Height: | Size: 657 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 586 KiB After Width: | Height: | Size: 749 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 79 KiB After Width: | Height: | Size: 95 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 96 KiB After Width: | Height: | Size: 112 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 78 KiB After Width: | Height: | Size: 94 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 93 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 92 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 89 KiB |
@@ -1,4 +1,4 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 210" width="960" height="210" role="img" aria-label="邀请流程：生成邀请链接、同事打开链接填写姓名、可选的管理员审批、首次连接开始计时、到期自动断开">
|
||||
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 960 210" width="960" height="210" role="img" aria-label="邀请流程：生成邀请链接、同事打开链接填写姓名、可选的管理员审批、首次连接开始计时、到期自动断开，结束后 2 小时内可申请延长">
|
||||
<style>
|
||||
svg {
|
||||
--bg: #f8fafc; --track: #e2e8f0; --ring: #cbd5e1; --base: #ffffff; --text: #0f172a; --sub: #64748b; --accent: #2563eb; --on: #ffffff;
|
||||
@@ -68,8 +68,8 @@
|
||||
<text class="numon" x="665" y="67.5" text-anchor="middle">4</text>
|
||||
</g>
|
||||
<text class="title" x="665" y="116" text-anchor="middle">首次连接起计时</text>
|
||||
<text class="sub" x="665" y="140" text-anchor="middle">2 小时 / 8 小时 / 当天</text>
|
||||
<text class="sub" x="665" y="160" text-anchor="middle">或直到通道关闭</text>
|
||||
<text class="sub" x="665" y="140" text-anchor="middle">30 分钟 / 2 小时 / 当天</text>
|
||||
<text class="sub" x="665" y="160" text-anchor="middle">也可以自定义时长</text>
|
||||
<circle class="ring" cx="850" cy="62" r="20"/>
|
||||
<text class="num" x="850" y="67.5" text-anchor="middle">5</text>
|
||||
<g class="on5">
|
||||
@@ -78,5 +78,5 @@
|
||||
</g>
|
||||
<text class="title" x="850" y="116" text-anchor="middle">到期自动断开</text>
|
||||
<text class="sub" x="850" y="140" text-anchor="middle">已建立的连接一并断开</text>
|
||||
<text class="sub" x="850" y="160" text-anchor="middle">闲置的通道自动关闭</text>
|
||||
<text class="sub" x="850" y="160" text-anchor="middle">2 小时内可申请延长</text>
|
||||
</svg>
|
||||
|
Before Width: | Height: | Size: 5.1 KiB After Width: | Height: | Size: 5.2 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 560 KiB After Width: | Height: | Size: 510 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 711 KiB After Width: | Height: | Size: 1010 KiB |
@@ -397,10 +397,11 @@ func formatSecondsToDuration(_ totalSec: Int64) -> String {
|
||||
let hours = totalSec / 3600
|
||||
let mins = (totalSec % 3600) / 60
|
||||
let secs = totalSec % 60
|
||||
// 第二个单位补零，计时跳动时文字宽度不变
|
||||
if hours > 0 {
|
||||
return "\(hours)小时\(mins)分"
|
||||
return "\(hours)小时" + String(format: "%02d分", mins)
|
||||
} else if mins > 0 {
|
||||
return "\(mins)分\(secs)秒"
|
||||
return "\(mins)分" + String(format: "%02d秒", secs)
|
||||
} else {
|
||||
return "\(secs)秒"
|
||||
}
|
||||
@@ -1557,6 +1558,7 @@ class PortRelayViewModel: ObservableObject {
|
||||
lines.append("请在 \(fmt.string(from: deadline)) 前用浏览器打开下面的链接，\(action)（访问有效期：\(leaseDurationTitle(leaseDuration))）：")
|
||||
lines.append(link)
|
||||
lines.append("此链接仅限 1 台设备使用，请勿转发。")
|
||||
lines.append("授权结束后 2 小时内，可以重新打开此链接申请延长。")
|
||||
let text = lines.joined(separator: "\n")
|
||||
return (InviteShareResp(invite: InviteItem(code: "k7m2xq9fpa", note: note, created_at: "", expires_at: "", max_uses: maxUses, lease_duration: leaseDuration, require_approval: requireApproval, uses: nil), link: link, share_text: text), nil)
|
||||
}
|
||||
@@ -3702,7 +3704,7 @@ struct ClientDetailsSheet: View {
|
||||
.font(.system(size: 12, design: .monospaced))
|
||||
.foregroundColor(.accentColor)
|
||||
}
|
||||
Text(verbatim: "申请于 \(formatDateTimeShort(r.at)) · 批准后可访问 \(leaseDurationTitle(invites.first { $0.code == r.invite }?.lease_duration))")
|
||||
Text(verbatim: "申请于 \(formatClock(r.at)) · 批准后可访问 \(leaseDurationTitle(invites.first { $0.code == r.invite }?.lease_duration))")
|
||||
.font(.system(size: 11))
|
||||
.foregroundColor(.secondary)
|
||||
.lineLimit(1)
|
||||
|
||||
@@ -0,0 +1,85 @@
|
||||
package server
|
||||
|
||||
import (
|
||||
"io"
|
||||
"net/http"
|
||||
"net/http/httptest"
|
||||
"net/url"
|
||||
"os"
|
||||
"path/filepath"
|
||||
"strings"
|
||||
"testing"
|
||||
"time"
|
||||
|
||||
"github.com/DeepFal/PortRelay/core/acl"
|
||||
"github.com/DeepFal/PortRelay/core/protocol"
|
||||
"github.com/DeepFal/PortRelay/core/traffic"
|
||||
)
|
||||
|
||||
// TestReadmePages 用模拟状态生成 README 截图用的授权页 HTML（tools/ui-snapshots/web.sh 调用），平时跳过。
|
||||
// 通道只放在内存里，不监听端口；访问者 IP 直接写在请求上。
|
||||
func TestReadmePages(t *testing.T) {
|
||||
out := os.Getenv("PORTRELAY_README_PAGES")
|
||||
if out == "" {
|
||||
t.Skip("PORTRELAY_README_PAGES not set")
|
||||
}
|
||||
m := NewManager(33000, 34000, testToken)
|
||||
m.PublicHost = "192.168.1.10"
|
||||
cfg := protocol.TunnelConfig{ID: "mysql", Name: "MySQL 数据库", Target: "10.0.1.16:3306", ListenPort: 33660, Enabled: true}
|
||||
m.mu.Lock()
|
||||
m.tunnels[cfg.ID] = &Tunnel{Config: cfg, whitelist: acl.NewWhitelist(nil), activeConns: map[string]*ActiveClient{},
|
||||
meter: traffic.NewMeter(), closed: make(chan struct{})}
|
||||
m.mu.Unlock()
|
||||
|
||||
do := func(method, path, ip string, form url.Values) *httptest.ResponseRecorder {
|
||||
var body io.Reader
|
||||
if form != nil {
|
||||
body = strings.NewReader(form.Encode())
|
||||
}
|
||||
r := httptest.NewRequest(method, "http://192.168.1.10:33000"+path, body)
|
||||
if form != nil {
|
||||
r.Header.Set("Content-Type", "application/x-www-form-urlencoded")
|
||||
}
|
||||
r.RemoteAddr = ip + ":52000"
|
||||
w := httptest.NewRecorder()
|
||||
m.handleHTTPRequest(w, r)
|
||||
return w
|
||||
}
|
||||
follow := func(w *httptest.ResponseRecorder, ip string) *httptest.ResponseRecorder {
|
||||
if loc := w.Header().Get("Location"); loc != "" {
|
||||
return do(http.MethodGet, loc, ip, nil)
|
||||
}
|
||||
return w
|
||||
}
|
||||
save := func(name string, w *httptest.ResponseRecorder) {
|
||||
t.Helper()
|
||||
if w.Code != http.StatusOK {
|
||||
t.Fatalf("%s: %d %s", name, w.Code, w.Body)
|
||||
}
|
||||
if err := os.WriteFile(filepath.Join(out, name+".html"), w.Body.Bytes(), 0o644); err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
}
|
||||
|
||||
// ① 打开邀请链接 → ③ 授权成功
|
||||
inv := m.state.createInvite(cfg.ID, "张三", 24*time.Hour, 1, "2h", false)
|
||||
save("auth-form", do(http.MethodGet, "/i/"+inv.Code, "192.168.1.21", nil))
|
||||
save("auth-ok", do(http.MethodPost, "/auth", "192.168.1.21", url.Values{"code": {inv.Code}, "name": {"张三"}}))
|
||||
|
||||
// ② 需要审批
|
||||
ask := m.state.createInvite(cfg.ID, "测试组", 24*time.Hour, 0, "today", true)
|
||||
save("auth-pending", follow(do(http.MethodPost, "/auth", "192.168.1.88", url.Values{"code": {ask.Code}, "name": {"李四"}}), "192.168.1.88"))
|
||||
|
||||
// ④ ⑤ ⑥ 两小时前开始使用、20 分钟前到期，再打开链接申请延长，管理员批准 2 小时
|
||||
ip := "192.168.1.47"
|
||||
rn := m.state.createInvite(cfg.ID, "赵六", 24*time.Hour, 1, "2h", false)
|
||||
do(http.MethodPost, "/auth", ip, url.Values{"code": {rn.Code}, "name": {"赵六"}})
|
||||
m.state.startLease(cfg.ID, ip, nil, time.Now().Add(-140*time.Minute))
|
||||
save("auth-renew", do(http.MethodGet, "/i/"+rn.Code, ip, nil))
|
||||
status := do(http.MethodPost, "/renew", ip, url.Values{"code": {rn.Code}})
|
||||
save("auth-renew-pending", follow(status, ip))
|
||||
if resp := m.extendLease(protocol.ExtendLeaseMessage{TunnelID: cfg.ID, IP: ip, Minutes: 120}); !resp.Success {
|
||||
t.Fatal(resp.Error)
|
||||
}
|
||||
save("auth-renew-ok", follow(status, ip))
|
||||
}
|
||||
@@ -163,6 +163,12 @@ func makeDemoVM(tick: Int = 0) -> PortRelayViewModel {
|
||||
{"code":"gx2","note":"测试组","created_at":"\(t(-100))","expires_at":"\(t(86000))","max_uses":3,"lease_duration":"today","require_approval":true}]}}]
|
||||
""")
|
||||
vm.groups[0].rate_history = RateSeriesItem(end: ga.end, step: 5, up: zip(ga.up, gb.up).map { $0 + $1 }, down: zip(ga.down, gb.down).map { $0 + $1 })
|
||||
// 授权延长：赵六的访问 20 分钟前结束，刚申请延长；王五结束不到 2 小时，还可以延长
|
||||
vm.tunnels[0].renewals = decode([RenewalItem].self, """
|
||||
[{"tunnel_id":"t1","ip":"192.168.1.47","name":"赵六","invite":"ab1","ended_at":"\(t(-1200))","renew_before":"\(t(6000))",
|
||||
"request":{"id":"rn1","tunnel_id":"t1","name":"赵六","ip":"192.168.1.47","invite":"ab1","at":"\(t(-60))","status":"pending","renewal":true}},
|
||||
{"tunnel_id":"t1","ip":"192.168.1.36","name":"王五","invite":"ab2","ended_at":"\(t(-3000))","renew_before":"\(t(4200))"}]
|
||||
""")
|
||||
// 卡片与顶部统计的实时速率取曲线最后一个点
|
||||
var totalIn: Int64 = 0, totalOut: Int64 = 0
|
||||
for i in [0, 1, 3, 4] {
|
||||
@@ -205,6 +211,8 @@ func makeDemoVM(tick: Int = 0) -> PortRelayViewModel {
|
||||
final class KeyWindow: NSWindow {
|
||||
override var isKeyWindow: Bool { true }
|
||||
override var isMainWindow: Bool { true }
|
||||
/// 渲染进程不会被激活，AppKit 控件（开关、分段控件）按这个私有属性决定是否画成灰色
|
||||
@objc(hasKeyAppearance) func alwaysHasKeyAppearance() -> Bool { true }
|
||||
}
|
||||
|
||||
@MainActor
|
||||
@@ -256,12 +264,11 @@ MainActor.assumeIsolated {
|
||||
let demo = makeDemoVM()
|
||||
render("readme-main-light", CGSize(width: 980, height: 1180), ContentView(vm: demo))
|
||||
render("readme-main-dark", CGSize(width: 980, height: 1180), dark: true, ContentView(vm: demo))
|
||||
render("readme-invite", CGSize(width: 560, height: 250), InviteSheet(vm: demo, tunnel: demo.tunnels[0], autoGenerate: true, isPresented: yes))
|
||||
render("readme-invite", CGSize(width: 600, height: 270), InviteSheet(vm: demo, tunnel: demo.tunnels[0], autoGenerate: true, isPresented: yes))
|
||||
render("readme-clients", CGSize(width: 760, height: 560), ClientDetailsSheet(vm: demo, tunnel: demo.tunnels[0], initialTab: 0, isPresented: yes))
|
||||
render("readme-access", CGSize(width: 760, height: 490), ClientDetailsSheet(vm: demo, tunnel: demo.tunnels[0], initialTab: 2, isPresented: yes))
|
||||
render("readme-edit", CGSize(width: 520, height: 760), TunnelEditSheet(vm: demo, tunnel: demo.tunnels[0], isPresented: yes))
|
||||
render("readme-edit", CGSize(width: 520, height: 570), TunnelEditSheet(vm: demo, tunnel: demo.tunnels[0], isPresented: yes))
|
||||
let g = demo.groups[0]
|
||||
render("group-card", CGSize(width: 980, height: 330), GroupCardView(group: g, members: demo.members(of: g), visible: demo.members(of: g), vm: demo,
|
||||
render("readme-group", CGSize(width: 980, height: 330), GroupCardView(group: g, members: demo.members(of: g), visible: demo.members(of: g), vm: demo,
|
||||
onEdit: {}, onAddMember: {}, onInvite: {}, onViewClients: { _ in }, onEditMember: { _ in }, onInviteMember: { _ in }, onMemberClients: { _ in }).padding(20))
|
||||
render("group-card-dark", CGSize(width: 980, height: 330), dark: true, GroupCardView(group: g, members: demo.members(of: g), visible: demo.members(of: g), vm: demo,
|
||||
onEdit: {}, onAddMember: {}, onInvite: {}, onViewClients: { _ in }, onEditMember: { _ in }, onInviteMember: { _ in }, onMemberClients: { _ in }).padding(20))
|
||||
@@ -282,15 +289,9 @@ MainActor.assumeIsolated {
|
||||
render("group-edit-member", CGSize(width: 520, height: 800), TunnelEditSheet(vm: demo, tunnel: demo.tunnels[3], isPresented: yes))
|
||||
|
||||
// 授权延长：申请延长、最近结束、已授权设备的「延长」
|
||||
let rvm = makeDemoVM()
|
||||
rvm.tunnels[0].renewals = decode([RenewalItem].self, """
|
||||
[{"tunnel_id":"\(rvm.tunnels[0].id)","ip":"192.168.1.35","name":"李四","invite":"ab1","ended_at":"\(t(-1200))","renew_before":"\(t(6000))",
|
||||
"request":{"id":"rn1","tunnel_id":"\(rvm.tunnels[0].id)","name":"李四","ip":"192.168.1.35","invite":"ab1","at":"\(t(-60))","status":"pending","renewal":true}},
|
||||
{"tunnel_id":"\(rvm.tunnels[0].id)","ip":"192.168.1.36","name":"王五","invite":"ab2","ended_at":"\(t(-3000))","renew_before":"\(t(4200))"}]
|
||||
""")
|
||||
render("renew-access", CGSize(width: 760, height: 620), ClientDetailsSheet(vm: rvm, tunnel: rvm.tunnels[0], initialTab: 2, isPresented: yes))
|
||||
render("renew-card", CGSize(width: 980, height: 220), TunnelCardView(tunnel: rvm.tunnels[0], vm: rvm, onEdit: {}, onViewClients: {}, onViewLeases: {}, onInvite: {}).padding(20))
|
||||
render("renew-invite-form", CGSize(width: 600, height: 400), InviteSheet(vm: rvm, tunnel: rvm.tunnels[0], autoGenerate: false, isPresented: yes))
|
||||
render("readme-access", CGSize(width: 760, height: 800), ClientDetailsSheet(vm: demo, tunnel: demo.tunnels[0], initialTab: 2, isPresented: yes))
|
||||
render("renew-card", CGSize(width: 980, height: 220), TunnelCardView(tunnel: demo.tunnels[0], vm: demo, onEdit: {}, onViewClients: {}, onViewLeases: {}, onInvite: {}).padding(20))
|
||||
render("renew-invite-form", CGSize(width: 600, height: 400), InviteSheet(vm: demo, tunnel: demo.tunnels[0], autoGenerate: false, isPresented: yes))
|
||||
render("renew-custom", CGSize(width: 300, height: 90), CustomMinutesForm(actionTitle: "延长") { _ in })
|
||||
|
||||
// README 动图逐帧：卡片随时间推移（每帧 = 5 秒）
|
||||
|
||||
Executable
+24
@@ -0,0 +1,24 @@
|
||||
#!/bin/bash
|
||||
# 重新生成 README 用到的全部截图和动图（模拟数据），写入 docs/images。
|
||||
# 用法: tools/ui-snapshots/readme.sh（即 make readme-images）
|
||||
# 需要 Xcode 命令行工具和 Google Chrome。
|
||||
set -e
|
||||
DIR="$(cd "$(dirname "$0")" && pwd)"
|
||||
ROOT="$(cd "$DIR/../.." && pwd)"
|
||||
IMG="$ROOT/docs/images"
|
||||
|
||||
# App 界面：readme-xxx.png → app-xxx.png
|
||||
"$DIR/render.sh" readme
|
||||
for f in "$DIR"/out/readme-*.png; do
|
||||
name="$(basename "$f")"
|
||||
cp "$f" "$IMG/app-${name#readme-}"
|
||||
done
|
||||
|
||||
# 通道卡片动图：40 帧，每帧相当于 5 秒
|
||||
FRAMES=40 "$DIR/render.sh" gif
|
||||
(cd "$ROOT" && go run ./tools/ui-snapshots/mkgif -o "$IMG/live-traffic.gif" "$DIR"/out/gif-*.png)
|
||||
|
||||
# 授权页与网页面板
|
||||
"$DIR/web.sh"
|
||||
cp "$DIR"/out/web/*.png "$IMG/"
|
||||
echo "✓ 已更新 docs/images"
|
||||
Executable
+41
@@ -0,0 +1,41 @@
|
||||
#!/bin/bash
|
||||
# 用无头 Chrome 截取 README 里的授权页和网页面板（模拟数据）。
|
||||
# 用法: tools/ui-snapshots/web.sh 输出: tools/ui-snapshots/out/web/*.png
|
||||
# 需要 Google Chrome，路径可用 CHROME 环境变量指定。
|
||||
set -e
|
||||
DIR="$(cd "$(dirname "$0")" && pwd)"
|
||||
ROOT="$(cd "$DIR/../.." && pwd)"
|
||||
BUILD="$DIR/.build/web"
|
||||
OUT="$DIR/out/web"
|
||||
CHROME="${CHROME:-/Applications/Google Chrome.app/Contents/MacOS/Google Chrome}"
|
||||
[ -x "$CHROME" ] || { echo "找不到 Chrome：$CHROME（可用 CHROME=... 指定）" >&2; exit 1; }
|
||||
rm -rf "$BUILD" "$OUT"
|
||||
mkdir -p "$BUILD" "$OUT"
|
||||
|
||||
# shot URL 宽 高 输出：按 2 倍像素截图，使用临时的浏览器配置
|
||||
shot() {
|
||||
"$CHROME" --headless=new --disable-gpu --hide-scrollbars --no-first-run --no-default-browser-check \
|
||||
--blink-settings=preferredColorScheme=1 --force-device-scale-factor=2 --window-size="$2,$3" --timeout=3000 \
|
||||
--user-data-dir="$BUILD/chrome" --screenshot="$4" "$1" >/dev/null 2>&1
|
||||
}
|
||||
|
||||
# 授权页：服务端用模拟状态生成 HTML。无头 Chrome 的窗口最窄约 500pt，
|
||||
# 所以把页面放进居中的 390pt 宽 iframe（手机宽度），截图后从中间裁出 iframe 部分
|
||||
(cd "$ROOT" && PORTRELAY_README_PAGES="$BUILD" go test ./server -run '^TestReadmePages$' -count=1 >/dev/null)
|
||||
for page in "$BUILD"/auth-*.html; do
|
||||
name="$(basename "$page" .html)"
|
||||
printf '<!DOCTYPE html><body style="margin:0;background:#F5F5F7"><iframe src="%s" width="390" height="610" style="border:0;display:block;margin:0 auto"></iframe>' \
|
||||
"$(basename "$page")" >"$BUILD/frame-$name.html"
|
||||
shot "file://$BUILD/frame-$name.html" 520 610 "$OUT/$name.png"
|
||||
sips -c 1220 780 "$OUT/$name.png" >/dev/null
|
||||
echo "captured $name"
|
||||
done
|
||||
|
||||
# 网页面板：本机模拟 Agent API，只监听回环地址
|
||||
(cd "$ROOT" && go build -o "$BUILD/webpanel" ./tools/ui-snapshots/webpanel)
|
||||
"$BUILD/webpanel" "$ROOT/cmd/portrelay-agent/web/index.html" >"$BUILD/webpanel.url" &
|
||||
pid=$!
|
||||
trap 'kill $pid 2>/dev/null' EXIT
|
||||
for _ in $(seq 50); do [ -s "$BUILD/webpanel.url" ] && break; sleep 0.1; done
|
||||
shot "$(head -1 "$BUILD/webpanel.url")" 1280 1124 "$OUT/web-panel.png"
|
||||
echo "captured web-panel"
|
||||
@@ -0,0 +1,181 @@
|
||||
// webpanel 用模拟数据提供 Agent 网页面板，用于 README 截图（tools/ui-snapshots/web.sh 调用）。
|
||||
//
|
||||
// go run ./tools/ui-snapshots/webpanel cmd/portrelay-agent/web/index.html
|
||||
//
|
||||
// 只监听 127.0.0.1 的随机端口，启动后在标准输出打印面板地址。
|
||||
// 数据与 tools/ui-snapshots/main.swift 的 makeDemoVM 保持一致，App 截图和网页截图展示的是同一组通道。
|
||||
package main
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"fmt"
|
||||
"log"
|
||||
"math"
|
||||
"net"
|
||||
"net/http"
|
||||
"os"
|
||||
"time"
|
||||
)
|
||||
|
||||
var base = time.Now()
|
||||
|
||||
func at(sec float64) string {
|
||||
return base.Add(time.Duration(sec * float64(time.Second))).Format(time.RFC3339Nano)
|
||||
}
|
||||
|
||||
// demoRate 与 main.swift 的同名函数相同：几段查询突发叠加平稳传输
|
||||
func demoRate(k int, seed, level, burst float64) int64 {
|
||||
x := float64(k)
|
||||
v := level * (0.55 + 0.25*math.Sin(x/9+seed) + 0.2*math.Sin(x/3.7+seed*2))
|
||||
for c := -60; c <= 600; c += 21 {
|
||||
h := 0.35 + 0.65*math.Abs(math.Sin(float64(c)*0.731+seed))
|
||||
v += burst * h * math.Exp(-math.Pow((x-float64(c)-7*math.Sin(float64(c)+seed))/3.2, 2))
|
||||
}
|
||||
return int64(math.Max(0, v))
|
||||
}
|
||||
|
||||
type series struct {
|
||||
End int64 `json:"end"`
|
||||
Step int `json:"step"`
|
||||
Up []int64 `json:"up"`
|
||||
Down []int64 `json:"down"`
|
||||
}
|
||||
|
||||
func demoSeries(seed, level, burst, upScale float64, points int) series {
|
||||
s := series{End: base.Unix(), Step: 5, Up: make([]int64, 120), Down: make([]int64, 120)}
|
||||
for i := 0; i < points; i++ {
|
||||
s.Down[i] = demoRate(i, seed, level, burst)
|
||||
s.Up[i] = demoRate(i, seed+1.7, level*upScale, burst*upScale)
|
||||
}
|
||||
return s
|
||||
}
|
||||
|
||||
func sum(a, b series) series {
|
||||
s := series{End: a.End, Step: a.Step}
|
||||
for i := range a.Up {
|
||||
s.Up = append(s.Up, a.Up[i]+b.Up[i])
|
||||
s.Down = append(s.Down, a.Down[i]+b.Down[i])
|
||||
}
|
||||
return s
|
||||
}
|
||||
|
||||
func obj(format string, args ...any) map[string]any {
|
||||
var m map[string]any
|
||||
if err := json.Unmarshal([]byte(fmt.Sprintf(format, args...)), &m); err != nil {
|
||||
log.Fatal(err)
|
||||
}
|
||||
return m
|
||||
}
|
||||
|
||||
func member(id, host string, port, conns int, firstAgo float64, connectedSec int, bytesIn, bytesOut int64) map[string]any {
|
||||
first := ""
|
||||
if firstAgo != 0 {
|
||||
first = fmt.Sprintf(`"first_connected_at":%q,`, at(firstAgo))
|
||||
}
|
||||
return obj(`{"id":%q,"name":"订单服务 (%s)","target":"%s:22","listen_port":%d,"whitelist":[],"enabled":true,"group_id":"g1","group_name":"订单服务",
|
||||
"owner":"运维组","started_at":%q,"effective_idle_close_minutes":30,"idle_close_minutes":30,%s"connected_sec":%d,
|
||||
"activity":{"in_use":true,"connected_sec":%d},
|
||||
"metrics":{"tunnel_id":%q,"status":"online","active_conns":%d,"total_conns":%d,"bytes_in":%d,"bytes_out":%d,"blocked_attempts":0}}`,
|
||||
id, host, host, port, at(-1800), first, connectedSec, connectedSec, id, conns, conns*5, bytesIn, bytesOut)
|
||||
}
|
||||
|
||||
func main() {
|
||||
if len(os.Args) != 2 {
|
||||
log.Fatal("usage: webpanel path/to/index.html")
|
||||
}
|
||||
page, err := os.ReadFile(os.Args[1])
|
||||
if err != nil {
|
||||
log.Fatal(err)
|
||||
}
|
||||
|
||||
tunnels := []map[string]any{
|
||||
obj(`{"id":"t1","name":"MySQL 数据库","target":"10.0.1.16:3306","listen_port":33660,"whitelist":[],"enabled":true,
|
||||
"owner":"数据组","duration_minutes":240,"started_at":%q,"expires_at":%q,"historical_bytes_in":1288490188,"historical_bytes_out":53687091200,
|
||||
"idle_close_minutes":30,"effective_idle_close_minutes":30,"first_connected_at":%q,"connected_sec":1520,
|
||||
"activity":{"in_use":true,"connected_sec":1525},
|
||||
"metrics":{"tunnel_id":"t1","status":"online","active_conns":3,"total_conns":1287,"bytes_in":245039104,"bytes_out":8703180,"blocked_attempts":12,
|
||||
"dynamic_leases":[{"ip":"192.168.1.21","expires_at":%q,"name":"张三","invite":"a1","duration":"2h","started_at":%q},
|
||||
{"ip":"192.168.1.35","expires_at":%q,"name":"王小明","invite":"a2","duration":"8h","awaiting_connect":true}],
|
||||
"pending":[{"id":"r1","tunnel_id":"t1","name":"李四","ip":"192.168.1.88","invite":"a3","at":%q,"status":"pending"}]},
|
||||
"renewals":[{"tunnel_id":"t1","ip":"192.168.1.47","name":"赵六","invite":"ab1","ended_at":%q,"renew_before":%q,
|
||||
"request":{"id":"rn1","tunnel_id":"t1","name":"赵六","ip":"192.168.1.47","invite":"ab1","at":%q,"status":"pending","renewal":true}},
|
||||
{"tunnel_id":"t1","ip":"192.168.1.36","name":"王五","invite":"ab2","ended_at":%q,"renew_before":%q}]}`,
|
||||
at(-3725), at(10675), at(-3300), at(7000), at(-200), at(80000), at(-60), at(-1200), at(6000), at(-60), at(-3000), at(4200)),
|
||||
member("g1a", "10.0.3.11", 33670, 1, -1500, 1320, 3203180, 18039104),
|
||||
member("g1b", "10.0.3.12", 33671, 2, -1400, 1100, 2203180, 12039104),
|
||||
member("g1c", "10.0.3.13", 33672, 0, 0, 0, 0, 0),
|
||||
obj(`{"id":"t2","name":"Grafana 监控面板","target":"10.0.2.30:3000","listen_port":33661,"whitelist":["192.168.1.0/24"],"enabled":true,
|
||||
"owner":"运维组","duration_minutes":0,"started_at":%q,"effective_idle_close_minutes":0,"idle_close_minutes":0,"first_connected_at":%q,"connected_sec":36120,
|
||||
"activity":{"in_use":true,"connected_sec":36120},
|
||||
"metrics":{"tunnel_id":"t2","status":"online","active_conns":2,"total_conns":342,"bytes_in":52039104,"bytes_out":2703180,"blocked_attempts":0}}`,
|
||||
at(-50000), at(-49000)),
|
||||
obj(`{"id":"t3","name":"SSH 跳板机（测试环境）","target":"10.0.8.3:22","listen_port":33662,"whitelist":[],"enabled":true,
|
||||
"owner":"运维组","duration_minutes":0,"started_at":%q,"effective_idle_close_minutes":30,"idle_close_minutes":30,"first_connected_at":%q,"connected_sec":640,
|
||||
"activity":{"in_use":false,"idle_since":%q,"auto_close_at":%q,"connected_sec":640},
|
||||
"metrics":{"tunnel_id":"t3","status":"online","active_conns":0,"total_conns":4,"bytes_in":1983000,"bytes_out":204000,"blocked_attempts":0}}`,
|
||||
at(-2100), at(-2000), at(-720), at(1080)),
|
||||
obj(`{"id":"t4","name":"Redis 缓存","target":"10.0.1.20:6379","listen_port":33663,"whitelist":[],"enabled":false,"last_duration_sec":1905,"duration_minutes":0,
|
||||
"effective_idle_close_minutes":30,"last_connected_sec":742,"close_reason":"闲置 30 分钟自动关闭","historical_bytes_in":3145728,"historical_bytes_out":524288,
|
||||
"metrics":{"tunnel_id":"t4","status":"disabled"}}`),
|
||||
}
|
||||
rates := map[string]series{
|
||||
"t1": demoSeries(0.4, 26000, 150000, 0.08, 120),
|
||||
"t2": demoSeries(2.1, 9000, 30000, 0.15, 120),
|
||||
"t3": demoSeries(6, 1500, 9000, 0.2, 30), // 前一段时间有流量，之后闲置
|
||||
"g1a": demoSeries(3.3, 4000, 26000, 0.3, 120),
|
||||
"g1b": demoSeries(4.6, 4000, 26000, 0.3, 120),
|
||||
"g1c": demoSeries(0, 0, 0, 0, 0),
|
||||
}
|
||||
for _, t := range tunnels {
|
||||
if s, ok := rates[t["id"].(string)]; ok {
|
||||
t["rate_history"] = s
|
||||
m := t["metrics"].(map[string]any)
|
||||
m["rate_in"], m["rate_out"] = s.Up[len(s.Up)-1], s.Down[len(s.Down)-1]
|
||||
}
|
||||
}
|
||||
groups := []map[string]any{obj(`{"id":"g1","name":"订单服务","owner":"运维组","created_at":%q,"tunnel_ids":["g1a","g1b","g1c"],
|
||||
"metrics":{"group_id":"g1",
|
||||
"dynamic_leases":[{"ip":"192.168.1.42","expires_at":%q,"name":"小王","invite":"gx1","duration":"8h","started_at":%q}],
|
||||
"pending":[{"id":"gr1","tunnel_id":"","group_id":"g1","name":"小李","ip":"192.168.1.57","invite":"gx2","at":%q,"status":"pending"}]}}`,
|
||||
at(-1800), at(27000), at(-1500), at(-40))}
|
||||
groups[0]["rate_history"] = sum(rates["g1a"], rates["g1b"])
|
||||
|
||||
status := map[string]any{
|
||||
"connected": true, "server_addr": "192.168.1.10:33000", "public_host": "192.168.1.10",
|
||||
"invite_base": "http://192.168.1.10:33000/i/", "total_rate_history": sum(rates["t1"], rates["t2"]),
|
||||
"port_range": "33001 - 34000", "timestamp": base,
|
||||
}
|
||||
stream := map[string]any{"metrics": map[string]any{"active_conns": []any{}, "security_events": []any{}}, "tunnels": tunnels, "groups": groups}
|
||||
for k, v := range status {
|
||||
stream[k] = v
|
||||
}
|
||||
|
||||
serveJSON := func(v any) http.HandlerFunc {
|
||||
return func(w http.ResponseWriter, r *http.Request) {
|
||||
w.Header().Set("Content-Type", "application/json")
|
||||
_ = json.NewEncoder(w).Encode(v)
|
||||
}
|
||||
}
|
||||
mux := http.NewServeMux()
|
||||
mux.HandleFunc("/{$}", func(w http.ResponseWriter, r *http.Request) {
|
||||
w.Header().Set("Content-Type", "text/html; charset=utf-8")
|
||||
_, _ = w.Write(page)
|
||||
})
|
||||
mux.HandleFunc("/api/status", serveJSON(status))
|
||||
mux.HandleFunc("/api/tunnels", serveJSON(tunnels))
|
||||
mux.HandleFunc("/api/groups", serveJSON(groups))
|
||||
mux.HandleFunc("/api/stream", func(w http.ResponseWriter, r *http.Request) {
|
||||
w.Header().Set("Content-Type", "text/event-stream")
|
||||
b, _ := json.Marshal(stream)
|
||||
fmt.Fprintf(w, "data: %s\n\n", b)
|
||||
w.(http.Flusher).Flush()
|
||||
<-r.Context().Done()
|
||||
})
|
||||
|
||||
ln, err := net.Listen("tcp", "127.0.0.1:0")
|
||||
if err != nil {
|
||||
log.Fatal(err)
|
||||
}
|
||||
fmt.Printf("http://%s/\n", ln.Addr())
|
||||
log.Fatal(http.Serve(ln, mux))
|
||||
}
|
||||
Reference in new issue
Block a user