yeyinlaoying/neutrino-proxy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

连接关闭、异常处理优化

Browse Source
This commit is contained in:
aoshiguchen
2026-01-15 15:17:27 +08:00
parent 7dc605ab7c
commit 810661d5f4
14 changed files with 540 additions and 98 deletions
Download Patch File Download Diff File Expand all files Collapse all files
neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/CmdChannelHandler.java
+24 -4
View File
@@ -1,5 +1,6 @@
package org.dromara.neutrinoproxy.client.core;
import io.netty.handler.codec.DecoderException;
import org.dromara.neutrinoproxy.client.config.ProxyConfig;
import org.dromara.neutrinoproxy.client.util.ProxyUtil;
import org.dromara.neutrinoproxy.core.Constants;
@@ -13,6 +14,7 @@ import io.netty.handler.timeout.IdleStateEvent;
import lombok.extern.slf4j.Slf4j;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.SocketException;
/**
@@ -60,11 +62,29 @@ public class CmdChannelHandler extends SimpleChannelInboundHandler<ProxyMessage>
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
ctx.channel().close();
return;
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[Cmd Channel] Client connection reset: {}", cause.getMessage());
} else {
log.error("[Cmd Channel] IO Error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[Cmd Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[Cmd Channel] error", cause);
}
log.error("[CMD Channel]Client CmdChannel Error channelId:{}", ctx.channel().id().asLongText(), cause);
}
@Override
neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/RealServerChannelHandler.java
+30 -11
View File
@@ -1,15 +1,15 @@
package org.dromara.neutrinoproxy.client.core;
import io.netty.buffer.Unpooled;
import io.netty.channel.*;
import io.netty.handler.codec.DecoderException;
import lombok.extern.slf4j.Slf4j;
import org.dromara.neutrinoproxy.client.util.ProxyUtil;
import org.dromara.neutrinoproxy.core.Constants;
import org.dromara.neutrinoproxy.core.ProxyMessage;
import io.netty.buffer.ByteBuf;
import io.netty.channel.Channel;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelOption;
import io.netty.channel.SimpleChannelInboundHandler;
import java.io.IOException;
import java.net.SocketException;
/**
@@ -57,9 +57,10 @@ public class RealServerChannelHandler extends SimpleChannelInboundHandler<ByteBu
Channel realServerChannel = ctx.channel();
String visitorId = ProxyUtil.getVisitorIdByRealServerChannel(realServerChannel);
ProxyUtil.removeRealServerChannel(visitorId);
Channel channel = realServerChannel.attr(Constants.NEXT_CHANNEL).get();
if (channel != null) {
channel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
Channel proxyChannel = realServerChannel.attr(Constants.NEXT_CHANNEL).get();
if (proxyChannel != null && proxyChannel.isActive()) {
// channel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
}
super.channelInactive(ctx);
@@ -78,10 +79,28 @@ public class RealServerChannelHandler extends SimpleChannelInboundHandler<ByteBu
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
ctx.channel().close();
return;
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[Real Server Channel] Client connection reset: {}", cause.getMessage());
} else {
log.error("[Real Server Channel] IO Error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[Real Server Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[Real Server Channel] error", cause);
}
log.error("Client ProxyChannel Error", cause);
}
}
neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/TcpProxyChannelHandler.java
+32 -10
View File
@@ -1,9 +1,8 @@
package org.dromara.neutrinoproxy.client.core;
import io.netty.channel.Channel;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelOption;
import io.netty.channel.SimpleChannelInboundHandler;
import io.netty.buffer.Unpooled;
import io.netty.channel.*;
import io.netty.handler.codec.DecoderException;
import io.netty.handler.timeout.IdleStateEvent;
import lombok.extern.slf4j.Slf4j;
import org.dromara.neutrinoproxy.client.util.ProxyUtil;
@@ -12,6 +11,7 @@ import org.dromara.neutrinoproxy.core.ProxyMessage;
import org.dromara.neutrinoproxy.core.dispatcher.Dispatcher;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.SocketException;
/**
@@ -45,21 +45,43 @@ public class TcpProxyChannelHandler extends SimpleChannelInboundHandler<ProxyMes
public void channelInactive(ChannelHandlerContext ctx) throws Exception {
// 数据传输连接
Channel realServerChannel = ctx.channel().attr(Constants.NEXT_CHANNEL).get();
if (realServerChannel != null && realServerChannel.isActive()) {
realServerChannel.close();
if (null != realServerChannel && realServerChannel.isActive()) {
// realServerChannel.close();
realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
}
ProxyUtil.returnTcpProxyChanel(ctx.channel());
ctx.channel().attr(Constants.NEXT_CHANNEL).remove();
ProxyUtil.removeTcpProxyChanel(ctx.channel());
super.channelInactive(ctx);
}
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
ctx.channel().close();
return;
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[TCP Proxy Channel] Client connection reset: {}", cause.getMessage());
} else {
log.error("[TCP Proxy Channel] IO Error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[TCP Proxy Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[TCP Proxy Channel] error", cause);
}
log.error("[TCP Proxy Channel]Client ProxyChannel Error channelId:{}", ctx.channel().id().asLongText(), cause);
}
@Override
neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpProxyChannelHandler.java
+30 -10
View File
@@ -1,9 +1,8 @@
package org.dromara.neutrinoproxy.client.core;
import io.netty.channel.Channel;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelOption;
import io.netty.channel.SimpleChannelInboundHandler;
import io.netty.buffer.Unpooled;
import io.netty.channel.*;
import io.netty.handler.codec.DecoderException;
import io.netty.handler.timeout.IdleStateEvent;
import lombok.extern.slf4j.Slf4j;
import org.dromara.neutrinoproxy.client.util.ProxyUtil;
@@ -12,6 +11,7 @@ import org.dromara.neutrinoproxy.core.ProxyMessage;
import org.dromara.neutrinoproxy.core.dispatcher.Dispatcher;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.SocketException;
/**
@@ -46,20 +46,40 @@ public class UdpProxyChannelHandler extends SimpleChannelInboundHandler<ProxyMes
// 数据传输连接
Channel realServerChannel = ctx.channel().attr(Constants.NEXT_CHANNEL).get();
if (realServerChannel != null && realServerChannel.isActive()) {
realServerChannel.close();
// realServerChannel.close();
realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
}
ProxyUtil.removeTcpProxyChanel(ctx.channel());
ProxyUtil.returnUdpProxyChanel(ctx.channel());
ProxyUtil.removeUdpProxyChanel(ctx.channel());
super.channelInactive(ctx);
}
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
ctx.channel().close();
return;
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[UDP Proxy Channel] Client connection reset: {}", cause.getMessage());
} else {
log.error("[UDP Proxy Channel] IO Error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[UDP Proxy Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[UDP Proxy Channel] error", cause);
}
log.error("[UDP Proxy Channel]Client ProxyChannel Error channelId:{}", ctx.channel().id().asLongText(), cause);
}
@Override
neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpRealServerHandler.java
+43
View File
@@ -3,12 +3,15 @@ package org.dromara.neutrinoproxy.client.core;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.SimpleChannelInboundHandler;
import io.netty.channel.socket.DatagramPacket;
import io.netty.handler.codec.DecoderException;
import lombok.extern.slf4j.Slf4j;
import org.dromara.neutrinoproxy.client.constant.Constants;
import org.dromara.neutrinoproxy.client.util.UdpChannelBindInfo;
import org.dromara.neutrinoproxy.core.ProxyMessage;
import java.io.IOException;
import java.net.InetSocketAddress;
import java.net.SocketException;
import java.util.Date;
/**
@@ -40,4 +43,44 @@ public class UdpRealServerHandler extends SimpleChannelInboundHandler<DatagramPa
udpChannelBindInfo.getLockChannel().setLastActiveTime(new Date());
}
}
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[UDP RealServer Channel] Client connection reset: {}", cause.getMessage());
} else {
log.error("[UDP RealServer Channel] IO Error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[UDP RealServer Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[UDP RealServer Channel] error", cause);
}
}
// @Override
// public void channelInactive(ChannelHandlerContext ctx) throws Exception {
// // 数据传输连接
// Channel realServerChannel = ctx.channel().attr(org.dromara.neutrinoproxy.core.Constants.NEXT_CHANNEL).get();
// if (realServerChannel != null && realServerChannel.isActive()) {
// // realServerChannel.close();
// realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
// }
//
// ProxyUtil.removeUdpProxyChanel(ctx.channel());
// super.channelInactive(ctx);
// }
}
neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/handler/ProxyMessageDisconnectHandler.java
+6 -10
View File
@@ -1,14 +1,10 @@
package org.dromara.neutrinoproxy.client.handler;
import org.dromara.neutrinoproxy.client.util.ProxyUtil;
import org.dromara.neutrinoproxy.core.Constants;
import org.dromara.neutrinoproxy.core.ProxyDataTypeEnum;
import org.dromara.neutrinoproxy.core.ProxyMessage;
import org.dromara.neutrinoproxy.core.ProxyMessageHandler;
import org.dromara.neutrinoproxy.core.dispatcher.Match;
import io.netty.buffer.Unpooled;
import io.netty.channel.Channel;
import io.netty.channel.ChannelFutureListener;
import io.netty.channel.ChannelHandlerContext;
import org.noear.solon.annotation.Component;
@@ -23,12 +19,12 @@ public class ProxyMessageDisconnectHandler implements ProxyMessageHandler {
@Override
public void handle(ChannelHandlerContext ctx, ProxyMessage proxyMessage) {
Channel realServerChannel = ctx.channel().attr(Constants.NEXT_CHANNEL).get();
if (null != realServerChannel) {
ctx.channel().attr(Constants.NEXT_CHANNEL).remove();
ProxyUtil.returnTcpProxyChanel(ctx.channel());
realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
}
// Channel realServerChannel = ctx.channel().attr(Constants.NEXT_CHANNEL).get();
// if (null != realServerChannel) {
// ctx.channel().attr(Constants.NEXT_CHANNEL).remove();
// ProxyUtil.returnTcpProxyChanel(ctx.channel());
// realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
// }
ctx.close();
}
neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/ProxyTunnelChannelHandler.java
+25 -9
View File
@@ -1,5 +1,6 @@
package org.dromara.neutrinoproxy.server.proxy.core;
import io.netty.handler.codec.DecoderException;
import org.dromara.neutrinoproxy.core.Constants;
import org.dromara.neutrinoproxy.core.ProxyMessage;
import org.dromara.neutrinoproxy.core.dispatcher.Dispatcher;
@@ -17,6 +18,7 @@ import io.netty.handler.timeout.IdleStateEvent;
import lombok.extern.slf4j.Slf4j;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.InetSocketAddress;
import java.net.SocketException;
import java.util.Date;
@@ -82,7 +84,7 @@ public class ProxyTunnelChannelHandler extends SimpleChannelInboundHandler<Proxy
if (visitorChannel.isActive() && null == isUdp) {
// 数据发送完成后再关闭连接，解决http1.0数据传输问题
visitorChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
visitorChannel.close();
// visitorChannel.close();
}
} else {
CmdChannelAttachInfo cmdChannelAttachInfo = ProxyUtil.getAttachInfo(ctx.channel());
@@ -112,15 +114,29 @@ public class ProxyTunnelChannelHandler extends SimpleChannelInboundHandler<Proxy
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
// super.exceptionCaught(ctx, cause);
// if (ctx.channel().isActive()) {
// ctx.channel().close();
// }
if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
ctx.channel().close();
return;
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[Tunnel Channel] Connection reset: {}", cause.getMessage());
} else {
log.error("[Tunnel Channel] IO error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[Tunnel Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[Tunnel Channel] error", cause);
}
log.error("[Tunnel Channel] error", cause);
}
@Override
neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/TcpVisitorChannelHandler.java
+29 -13
View File
@@ -2,10 +2,9 @@ package org.dromara.neutrinoproxy.server.proxy.core;
import cn.hutool.core.util.StrUtil;
import io.netty.buffer.ByteBuf;
import io.netty.channel.Channel;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelOption;
import io.netty.channel.SimpleChannelInboundHandler;
import io.netty.buffer.Unpooled;
import io.netty.channel.*;
import io.netty.handler.codec.DecoderException;
import lombok.extern.slf4j.Slf4j;
import org.dromara.neutrinoproxy.core.Constants;
import org.dromara.neutrinoproxy.core.ProxyMessage;
@@ -15,6 +14,7 @@ import org.dromara.neutrinoproxy.server.service.FlowReportService;
import org.dromara.neutrinoproxy.server.util.ProxyUtil;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.InetSocketAddress;
import java.net.SocketException;
@@ -28,11 +28,29 @@ public class TcpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteBu
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) {
if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
ctx.channel().close();
return;
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[TCP Visitor Channel] connection reset: {}", cause.getMessage());
} else {
log.error("[TCP Visitor Channel] IO error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[TCP Visitor Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[TCP Visitor Channel] error", cause);
}
log.error("VisitorChannel error", cause);
}
@Override
@@ -98,11 +116,7 @@ public class TcpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteBu
InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
if (null == cmdChannel) {
// 该端口还没有代理客户端
ctx.channel().close();
} else {
if (null != cmdChannel) {
// 用户连接断开，从控制连接中移除
String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
@@ -119,6 +133,8 @@ public class TcpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteBu
proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
// 通知客户端，用户连接已经断开
proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
}
}
neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/UdpVisitorChannelHandler.java
+28 -8
View File
@@ -6,6 +6,7 @@ import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelOption;
import io.netty.channel.SimpleChannelInboundHandler;
import io.netty.channel.socket.DatagramPacket;
import io.netty.handler.codec.DecoderException;
import lombok.extern.slf4j.Slf4j;
import org.dromara.neutrinoproxy.core.Constants;
import org.dromara.neutrinoproxy.core.ProxyMessage;
@@ -16,6 +17,7 @@ import org.dromara.neutrinoproxy.server.service.FlowReportService;
import org.dromara.neutrinoproxy.server.util.ProxyUtil;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.InetSocketAddress;
import java.net.SocketException;
@@ -122,14 +124,32 @@ public class UdpVisitorChannelHandler extends SimpleChannelInboundHandler<Datagr
super.channelActive(ctx);
}
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) {
if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
ctx.channel().close();
return;
}
log.error("[UDP Visitor Channel]VisitorChannel error", cause);
}
// @Override
// public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) {
// // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// // 对于其他异常（可能是可恢复的业务异常），只记录日志
// if (cause instanceof IOException) {
// // IOException及其子类（包括SocketException）都是致命的网络异常
// if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// // Connection reset是常见的客户端断开，使用debug级别
// log.debug("[UDP Visitor Channel] Connection reset: {}", cause.getMessage());
// } else {
// log.error("[UDP Visitor Channel] IO error", cause);
// }
// if (ctx.channel().isActive()) {
// ctx.channel().close();
// }
// } else if(cause instanceof DecoderException) {
// // 协议解析错误，为防止数据污染，立即关闭
// log.debug("[UDP Visitor Channel] decoder error: {}", cause.getMessage());
// if (ctx.channel().isActive()) {
// ctx.channel().close();
// }
// } else {
// // 其他异常只记录日志，不关闭channel，让Netty自己处理
// log.error("[UDP Visitor Channel] error", cause);
// }
// }
@Override
public void channelWritabilityChanged(ChannelHandlerContext ctx) throws Exception {
neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/enhance/HttpVisitorChannelHandler.java
+31 -11
View File
@@ -1,10 +1,9 @@
package org.dromara.neutrinoproxy.server.proxy.enhance;
import io.netty.buffer.ByteBuf;
import io.netty.channel.Channel;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelOption;
import io.netty.channel.SimpleChannelInboundHandler;
import io.netty.buffer.Unpooled;
import io.netty.channel.*;
import io.netty.handler.codec.DecoderException;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.dromara.neutrinoproxy.core.Constants;
@@ -16,7 +15,9 @@ import org.dromara.neutrinoproxy.server.service.FlowReportService;
import org.dromara.neutrinoproxy.server.util.ProxyUtil;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.InetSocketAddress;
import java.net.SocketException;
/**
* @author: aoshiguchen
@@ -82,11 +83,7 @@ public class HttpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteB
InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
if (cmdChannel == null) {
// 该端口还没有代理客户端
ctx.channel().close();
} else {
if (null != cmdChannel) {
// 用户连接断开，从控制连接中移除
String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
@@ -103,6 +100,8 @@ public class HttpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteB
proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
// 通知客户端，用户连接已经断开
proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
}
}
@@ -116,8 +115,29 @@ public class HttpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteB
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) {
// 当出现异常就关闭连接
ctx.close();
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[HTTP Visitor Channel] Connection reset: {}", cause.getMessage());
} else {
log.error("[HTTP Visitor Channel] IO error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[HTTP Visitor Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[HTTP Visitor Channel] error", cause);
}
}
@Override
neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/HttpVisitorSecurityChannelHandler.java
+67 -2
View File
@@ -2,13 +2,14 @@ package org.dromara.neutrinoproxy.server.proxy.security;
import io.netty.buffer.ByteBuf;
import io.netty.buffer.Unpooled;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelInboundHandlerAdapter;
import io.netty.channel.*;
import io.netty.handler.codec.DecoderException;
import io.netty.util.CharsetUtil;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.checkerframework.checker.i18nformatter.qual.I18nFormat;
import org.dromara.neutrinoproxy.core.Constants;
import org.dromara.neutrinoproxy.core.ProxyMessage;
import org.dromara.neutrinoproxy.core.util.HttpUtil;
import org.dromara.neutrinoproxy.core.util.IpUtil;
import org.dromara.neutrinoproxy.server.service.DomainService;
@@ -17,6 +18,10 @@ import org.dromara.neutrinoproxy.server.service.SecurityGroupService;
import org.dromara.neutrinoproxy.server.util.ProxyUtil;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.InetSocketAddress;
import java.net.SocketException;
/**
* @author: aoshiguchen
* @date: 2023/12/14
@@ -109,4 +114,64 @@ public class HttpVisitorSecurityChannelHandler extends ChannelInboundHandlerAdap
// 继续传播
ctx.fireChannelRead(cumulationBuf);
}
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[HTTP Visitor Security Channel] Connection reset: {}", cause.getMessage());
} else {
log.error("[HTTP Visitor Security Channel] IO error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[HTTP Visitor Security Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[HTTP Visitor Security Channel] error", cause);
}
}
@Override
public void channelInactive(ChannelHandlerContext ctx) throws Exception {
// 通知代理客户端
Channel visitorChannel = ctx.channel();
InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
if (null != cmdChannel) {
// 用户连接断开，从控制连接中移除
String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
// 删除代理附加对象
ProxyUtil.remoteProxyConnectAttachment(visitorId);
Channel proxyChannel = visitorChannel.attr(Constants.NEXT_CHANNEL).get();
if (proxyChannel != null && proxyChannel.isActive()) {
proxyChannel.attr(Constants.NEXT_CHANNEL).remove();
proxyChannel.attr(Constants.LICENSE_ID).remove();
proxyChannel.attr(Constants.VISITOR_ID).remove();
proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
// 通知客户端，用户连接已经断开
proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
}
}
super.channelInactive(ctx);
}
}
neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/TcpVisitorSecurityChannelHandler.java
+67 -3
View File
@@ -1,18 +1,22 @@
package org.dromara.neutrinoproxy.server.proxy.security;
import io.netty.buffer.ByteBuf;
import io.netty.channel.Channel;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelInboundHandlerAdapter;
import io.netty.buffer.Unpooled;
import io.netty.channel.*;
import io.netty.handler.codec.DecoderException;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.dromara.neutrinoproxy.core.Constants;
import org.dromara.neutrinoproxy.core.ProxyMessage;
import org.dromara.neutrinoproxy.core.util.IpUtil;
import org.dromara.neutrinoproxy.server.service.PortMappingService;
import org.dromara.neutrinoproxy.server.service.SecurityGroupService;
import org.dromara.neutrinoproxy.server.util.ProxyUtil;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.InetSocketAddress;
import java.net.SocketException;
/**
* @author: aoshiguchen
@@ -65,4 +69,64 @@ public class TcpVisitorSecurityChannelHandler extends ChannelInboundHandlerAdapt
ctx.fireChannelActive();
}
@Override
public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
// 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// 对于其他异常（可能是可恢复的业务异常），只记录日志
if (cause instanceof IOException) {
// IOException及其子类（包括SocketException）都是致命的网络异常
if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// Connection reset是常见的客户端断开，使用debug级别
log.debug("[TCP Visitor Security Channel] Connection reset: {}", cause.getMessage());
} else {
log.error("[TCP Visitor Security Channel] IO error", cause);
}
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else if(cause instanceof DecoderException) {
// 协议解析错误，为防止数据污染，立即关闭
log.debug("[TCP Visitor Security Channel] decoder error: {}", cause.getMessage());
if (ctx.channel().isActive()) {
ctx.channel().close();
}
} else {
// 其他异常只记录日志，不关闭channel，让Netty自己处理
log.error("[TCP Visitor Security Channel] error", cause);
}
}
@Override
public void channelInactive(ChannelHandlerContext ctx) throws Exception {
// 通知代理客户端
Channel visitorChannel = ctx.channel();
InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
if (null != cmdChannel) {
// 用户连接断开，从控制连接中移除
String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
// 删除代理附加对象
ProxyUtil.remoteProxyConnectAttachment(visitorId);
Channel proxyChannel = visitorChannel.attr(Constants.NEXT_CHANNEL).get();
if (proxyChannel != null && proxyChannel.isActive()) {
proxyChannel.attr(Constants.NEXT_CHANNEL).remove();
proxyChannel.attr(Constants.LICENSE_ID).remove();
proxyChannel.attr(Constants.VISITOR_ID).remove();
proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
// 通知客户端，用户连接已经断开
proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
}
}
super.channelInactive(ctx);
}
}
neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/UdpVisitorSecurityChannelHandler.java
+67 -3
View File
@@ -1,16 +1,20 @@
package org.dromara.neutrinoproxy.server.proxy.security;
import io.netty.channel.Channel;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelInboundHandlerAdapter;
import io.netty.buffer.Unpooled;
import io.netty.channel.*;
import io.netty.channel.socket.DatagramPacket;
import io.netty.handler.codec.DecoderException;
import lombok.extern.slf4j.Slf4j;
import org.dromara.neutrinoproxy.core.Constants;
import org.dromara.neutrinoproxy.core.ProxyMessage;
import org.dromara.neutrinoproxy.server.service.PortMappingService;
import org.dromara.neutrinoproxy.server.service.SecurityGroupService;
import org.dromara.neutrinoproxy.server.util.ProxyUtil;
import org.noear.solon.Solon;
import java.io.IOException;
import java.net.InetSocketAddress;
import java.net.SocketException;
/**
* @author: aoshiguchen
@@ -36,4 +40,64 @@ public class UdpVisitorSecurityChannelHandler extends ChannelInboundHandlerAdapt
ctx.channel().attr(Constants.SERVER_PORT).set(sa.getPort());
ctx.fireChannelRead(msg);
}
// @Override
// public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
// // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// // 对于其他异常（可能是可恢复的业务异常），只记录日志
// if (cause instanceof IOException) {
// // IOException及其子类（包括SocketException）都是致命的网络异常
// if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// // Connection reset是常见的客户端断开，使用debug级别
// log.debug("[UDP Visitor Security Channel] Connection reset: {}", cause.getMessage());
// } else {
// log.error("[UDP Visitor Security Channel] IO error", cause);
// }
// if (ctx.channel().isActive()) {
// ctx.channel().close();
// }
// } else if(cause instanceof DecoderException) {
// // 协议解析错误，为防止数据污染，立即关闭
// log.debug("[UDP Visitor Security Channel] decoder error: {}", cause.getMessage());
// if (ctx.channel().isActive()) {
// ctx.channel().close();
// }
// } else {
// // 其他异常只记录日志，不关闭channel，让Netty自己处理
// log.error("[UDP Visitor Security Channel] error", cause);
// }
// }
// @Override
// public void channelInactive(ChannelHandlerContext ctx) throws Exception {
//
// // 通知代理客户端
// Channel visitorChannel = ctx.channel();
// InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
// Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
//
// if (null != cmdChannel) {
// // 用户连接断开，从控制连接中移除
// String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
// ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
//
// // 删除代理附加对象
// ProxyUtil.remoteProxyConnectAttachment(visitorId);
//
// Channel proxyChannel = visitorChannel.attr(Constants.NEXT_CHANNEL).get();
// if (proxyChannel != null && proxyChannel.isActive()) {
// proxyChannel.attr(Constants.NEXT_CHANNEL).remove();
// proxyChannel.attr(Constants.LICENSE_ID).remove();
// proxyChannel.attr(Constants.VISITOR_ID).remove();
//
// proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
// // 通知客户端，用户连接已经断开
// proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
//
// proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
// }
// }
//
// super.channelInactive(ctx);
// }
}
neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/VisitorFlowLimiterChannelHandler.java
+61 -4
View File
@@ -1,16 +1,14 @@
package org.dromara.neutrinoproxy.server.proxy.security;
import io.netty.channel.ChannelHandlerContext;
import io.netty.channel.ChannelInboundHandlerAdapter;
import io.netty.channel.*;
import io.netty.handler.traffic.ChannelTrafficShapingHandler;
import lombok.extern.slf4j.Slf4j;
import org.dromara.neutrinoproxy.core.Constants;
import org.dromara.neutrinoproxy.server.service.LicenseService;
import org.dromara.neutrinoproxy.server.service.PortMappingService;
import org.dromara.neutrinoproxy.server.service.SecurityGroupService;
import org.dromara.neutrinoproxy.server.service.bo.FlowLimitBO;
import org.noear.solon.Solon;
/**
* 访问者流量限制器
* @author: aoshiguchen
@@ -47,4 +45,63 @@ public class VisitorFlowLimiterChannelHandler extends ChannelInboundHandlerAdapt
ctx.fireChannelRead(msg);
}
// @Override
// public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
// // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
// // 对于其他异常（可能是可恢复的业务异常），只记录日志
// if (cause instanceof IOException) {
// // IOException及其子类（包括SocketException）都是致命的网络异常
// if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
// // Connection reset是常见的客户端断开，使用debug级别
// log.debug("[Visitor FlowLimit Channel] Connection reset: {}", cause.getMessage());
// } else {
// log.error("[Visitor FlowLimit Channel] IO error", cause);
// }
// if (ctx.channel().isActive()) {
// ctx.channel().close();
// }
// } else if(cause instanceof DecoderException) {
// // 协议解析错误，为防止数据污染，立即关闭
// log.debug("[Visitor FlowLimit Channel] decoder error: {}", cause.getMessage());
// if (ctx.channel().isActive()) {
// ctx.channel().close();
// }
// } else {
// // 其他异常只记录日志，不关闭channel，让Netty自己处理
// log.error("[Visitor FlowLimit Channel] error", cause);
// }
// }
// @Override
// public void channelInactive(ChannelHandlerContext ctx) throws Exception {
//
// // 通知代理客户端
// Channel visitorChannel = ctx.channel();
// InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
// Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
//
// if (null != cmdChannel) {
// // 用户连接断开，从控制连接中移除
// String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
// ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
//
// // 删除代理附加对象
// ProxyUtil.remoteProxyConnectAttachment(visitorId);
//
// Channel proxyChannel = visitorChannel.attr(Constants.NEXT_CHANNEL).get();
// if (proxyChannel != null && proxyChannel.isActive()) {
// proxyChannel.attr(Constants.NEXT_CHANNEL).remove();
// proxyChannel.attr(Constants.LICENSE_ID).remove();
// proxyChannel.attr(Constants.VISITOR_ID).remove();
//
// proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
// // 通知客户端，用户连接已经断开
// proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
//
// proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
// }
// }
//
// super.channelInactive(ctx);
// }
}