mirror of
https://github.com/kiddin9/op-packages.git
synced 2026-10-29 09:35:13 +08:00
🍓 Sync 2026-09-15 02:13:06
This commit is contained in:
github-actions[bot] committed
1 parent
0e5393594c
commit
1dd96ac2bb
146 files changed
+26541
-508
No files matched your search
@@ -0,0 +1,560 @@
|
||||
'use strict';
|
||||
'require form';
|
||||
'require uci';
|
||||
'require rpc';
|
||||
'require poll';
|
||||
'require view';
|
||||
'require dom';
|
||||
'require fs';
|
||||
'require ui';
|
||||
'require network';
|
||||
|
||||
var callGetStatus = rpc.declare({
|
||||
object: 'luci.flowproxy',
|
||||
method: 'get_status'
|
||||
});
|
||||
|
||||
var callGetLogs = rpc.declare({
|
||||
object: 'luci.flowproxy',
|
||||
method: 'get_logs',
|
||||
params: ['lines']
|
||||
});
|
||||
|
||||
var callClearLogs = rpc.declare({
|
||||
object: 'luci.flowproxy',
|
||||
method: 'clear_logs'
|
||||
});
|
||||
|
||||
var callGenerateNftConfig = rpc.declare({
|
||||
object: 'luci.flowproxy',
|
||||
method: 'generate_nft_config'
|
||||
});
|
||||
|
||||
var callGetRuntimeConfig = rpc.declare({
|
||||
object: 'luci.flowproxy',
|
||||
method: 'get_runtime_config'
|
||||
});
|
||||
|
||||
var callRestartService = rpc.declare({
|
||||
object: 'luci.flowproxy',
|
||||
method: 'restart_service'
|
||||
});
|
||||
|
||||
return L.view.extend({
|
||||
load: function() {
|
||||
return Promise.all([
|
||||
uci.load('flowproxy').catch(function() { return {}; }),
|
||||
network.getDevices(),
|
||||
callGetStatus().catch(function() { return {}; }),
|
||||
network.getNetworks().catch(function() { return []; })
|
||||
]);
|
||||
},
|
||||
|
||||
highlightNft: function(text) {
|
||||
if (!text || text.trim() === '') return '<span style="color: #999;">' + _('(no content / table not loaded)') + '</span>';
|
||||
var rules = [
|
||||
{ rex: /#(.*)/g, cls: 'comment' },
|
||||
{ rex: /\b(table|chain|set|elements|type)\b/g, cls: 'keyword' },
|
||||
{ rex: /\b(ip|ip6|tcp|udp|ether|meta|meta nfproto)\b/g, cls: 'proto' },
|
||||
{ rex: /\b(saddr|daddr|sport|dport|mark)\b/g, cls: 'match' },
|
||||
{ rex: /\b(return|accept|drop|reject|counter|set)\b/g, cls: 'action' },
|
||||
{ rex: /@[\w_]+/g, cls: 'variable' },
|
||||
{ rex: /\{|\}/g, cls: 'bracket' }
|
||||
];
|
||||
var html = text.replace(/[&<>"']/g, function(m) {
|
||||
return { '&': '&', '<': '<', '>': '>', '"': '"', "'": ''' }[m];
|
||||
});
|
||||
rules.forEach(function(r) {
|
||||
html = html.replace(r.rex, function(match) {
|
||||
return '<span class="nft-' + r.cls + '">' + match + '</span>';
|
||||
});
|
||||
});
|
||||
return html;
|
||||
},
|
||||
refreshStatus: function(map, node) {
|
||||
return callGetStatus().then(L.bind(function(status) {
|
||||
if (!status) return;
|
||||
var isRunning = (status.running == 1);
|
||||
var container = node || document;
|
||||
|
||||
var statusEl = container.querySelector('#service-status');
|
||||
if (statusEl) {
|
||||
var content = [];
|
||||
if (isRunning) {
|
||||
var chains = [];
|
||||
if (status.nft && status.nft.tcp) chains.push('TCP');
|
||||
if (status.nft && status.nft.udp) chains.push('UDP');
|
||||
var ip = status.proxy_server_ip_addr || '-';
|
||||
content.push(E('span', { 'style': 'color: green; font-weight: bold;' }, [ _('running') ]));
|
||||
content.push(' (' + ip + ':');
|
||||
content.push(E('span', { 'style': 'color: #FF9800; font-weight: bold;' }, [ chains.join('+') || '-' ]));
|
||||
content.push(') ');
|
||||
content.push(E('button', {
|
||||
'class': 'btn cbi-button cbi-button-apply',
|
||||
'style': 'margin-left: 10px;',
|
||||
'click': ui.createHandlerFn(this, 'handleRestart')
|
||||
}, [ _('Restart') ]));
|
||||
} else {
|
||||
content.push(E('span', { 'style': 'color: red; font-weight: bold;' }, [ _('stopped') ]));
|
||||
}
|
||||
L.dom.content(statusEl, content);
|
||||
}
|
||||
|
||||
var dnsEl = container.querySelector('#dns-status');
|
||||
if (dnsEl) {
|
||||
var dcontent = [];
|
||||
if (status.dns_running == 1) {
|
||||
var ip = status.proxy_server_ip_addr || '-';
|
||||
var port = status.proxy_server_dns_port || '5353';
|
||||
dcontent.push(E('span', { 'style': 'color: green; font-weight: bold;' }, [ _('running') ]));
|
||||
dcontent.push(' (' + ip + ':');
|
||||
dcontent.push(E('span', { 'style': 'color: #FF9800; font-weight: bold;' }, [ port ]));
|
||||
dcontent.push(')');
|
||||
} else {
|
||||
dcontent.push(E('span', { 'style': 'color: red; font-weight: bold;' }, [ _('stopped') ]));
|
||||
}
|
||||
L.dom.content(dnsEl, dcontent);
|
||||
}
|
||||
}, this));
|
||||
},
|
||||
|
||||
refreshLogs: function() {
|
||||
return callGetLogs(500).then(L.bind(function(data) {
|
||||
var logEl = document.getElementById('log-content');
|
||||
if (logEl) {
|
||||
var logs = (data && Array.isArray(data.logs)) ? data.logs : [];
|
||||
logEl.value = logs.length > 0 ? logs.join('\n') : _('no logs available');
|
||||
if (logs.length > 0) logEl.scrollTop = logEl.scrollHeight;
|
||||
}
|
||||
}, this));
|
||||
},
|
||||
|
||||
handleRestart: function() {
|
||||
ui.showModal(null, [
|
||||
E('p', { 'class': 'spinning' }, _('Restarting FlowProxy service...'))
|
||||
]);
|
||||
|
||||
return callRestartService().then(L.bind(function(res) {
|
||||
ui.hideModal();
|
||||
if (res && res.result) {
|
||||
ui.addNotification(null, E('p', _('FlowProxy service restarted successfully.')), 'info');
|
||||
window.setTimeout(function() {
|
||||
location.reload();
|
||||
}, 1500);
|
||||
} else {
|
||||
ui.addNotification(null, E('p', _('Failed to restart FlowProxy service.')), 'error');
|
||||
}
|
||||
}, this)).catch(function(err) {
|
||||
ui.hideModal();
|
||||
ui.addNotification(null, E('p', _('RPC error: %s').format((err && (err.message || String(err))) || 'Unknown error')), 'error');
|
||||
});
|
||||
},
|
||||
render: function(data) {
|
||||
var self = this;
|
||||
var devices = data[1];
|
||||
var status = data[2];
|
||||
var ifaces = data[3] || [];
|
||||
var m, s, o;
|
||||
|
||||
m = new form.Map('flowproxy', _('FlowProxy'),
|
||||
_('Traffic diversion based on nftables rules. The service will automatically start/stop when you click "Save & Apply".'));
|
||||
|
||||
if (!document.getElementById('flowproxy-style')) {
|
||||
document.head.appendChild(E('style', { id: 'flowproxy-style' }, `
|
||||
#log-content { width: 100% !important; height: 60vh; min-height: 400px; font-family: monospace; font-size: 12px; background: #f5f5f5 !important; color: #333 !important; border: 1px solid #ccc !important; padding: 10px; resize: vertical; border-radius: 4px; box-sizing: border-box; }
|
||||
.nft-code-view { background: #f5f5f5 !important; color: #333333 !important; padding: 15px !important; font-family: monospace !important; font-size: 12px !important; overflow-x: auto !important; white-space: pre-wrap !important; width: 100% !important; border: 1px solid #cccccc !important; border-radius: 4px; box-sizing: border-box; max-height: 70vh; }
|
||||
.nft-comment { color: #777777; font-style: italic; } .nft-keyword { color: #a626a1; font-weight: bold; } .nft-proto { color: #4078f2; } .nft-match { color: #986801; } .nft-action { color: #e45649; font-weight: bold; } .nft-variable { color: #50a14f; font-weight: bold; }
|
||||
.cbi-section-table-titles th[data-sortable-row]::after, .cbi-section-table-titles th[data-sortable-row]::before { display: none !important; }
|
||||
.cbi-section-table-titles th[data-sortable-row] { pointer-events: none !important; cursor: default !important; }
|
||||
`));
|
||||
}
|
||||
|
||||
s = m.section(form.NamedSection, 'global', 'flowproxy');
|
||||
s.tab('settings', _('Settings'));
|
||||
s.tab('rules', _('Rules'));
|
||||
s.tab('lists', _('Lists'));
|
||||
s.tab('preview', _('Preview'));
|
||||
s.tab('logs', _('Logs'));
|
||||
|
||||
// --- Settings ---
|
||||
o = s.taboption('settings', form.DummyValue, '_service_status', _('Current Status'));
|
||||
o.rawhtml = true;
|
||||
o.cfgvalue = function() { return '<div id="service-status" style="display:inline-block;"><em class="spinning">' + _('checking...') + '</em></div>'; };
|
||||
|
||||
o = s.taboption('settings', form.DummyValue, '_dns_status', _('DNS Redirection'));
|
||||
o.rawhtml = true;
|
||||
o.cfgvalue = function() { return '<div id="dns-status" style="display:inline-block;">-</div>'; };
|
||||
|
||||
s.taboption('settings', form.Flag, 'enabled', _('Enable FlowProxy')).rmempty = false;
|
||||
s.taboption('settings', form.Flag, 'dns_proxy_enabled', _('Force upstream DNS to proxy server')).rmempty = false;
|
||||
|
||||
o = s.taboption('settings', form.Value, 'proxy_server_ip_addr', _('Proxy server IP address'));
|
||||
o.datatype = 'ip4addr'; o.rmempty = false;
|
||||
o.placeholder = '192.168.1.254';
|
||||
o.validate = function(section_id, value) {
|
||||
var ipInCidr = function(ipStr, cidrStr) {
|
||||
if (!cidrStr || cidrStr.indexOf(':') !== -1 || !ipStr || ipStr.indexOf(':') !== -1) return false;
|
||||
var parts = cidrStr.split('/');
|
||||
var cidrIp = parts[0];
|
||||
var maskBits = parseInt(parts[1] || '32', 10);
|
||||
|
||||
var ipToNum = function(s) {
|
||||
var p = s.split('.');
|
||||
if (p.length !== 4) return 0;
|
||||
return (((parseInt(p[0], 10) << 24) |
|
||||
(parseInt(p[1], 10) << 16) |
|
||||
(parseInt(p[2], 10) << 8) |
|
||||
parseInt(p[3], 10)) >>> 0);
|
||||
};
|
||||
|
||||
var ipNum = ipToNum(ipStr);
|
||||
var cidrNum = ipToNum(cidrIp);
|
||||
|
||||
if (maskBits === 0) return true;
|
||||
|
||||
var mask = (0xffffffff << (32 - maskBits)) >>> 0;
|
||||
return (ipNum & mask) === (cidrNum & mask);
|
||||
};
|
||||
|
||||
var selected_interface = s.formvalue(section_id, 'interface');
|
||||
if (!value || !selected_interface) return true;
|
||||
|
||||
var target_iface = null;
|
||||
for (var i = 0; i < ifaces.length; i++) {
|
||||
var dev = ifaces[i].getL3Device() || ifaces[i].getDevice();
|
||||
if ((dev && dev.getName() === selected_interface) || ifaces[i].getName() === selected_interface) {
|
||||
target_iface = ifaces[i];
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if (!target_iface) return true;
|
||||
|
||||
var ips = target_iface.getIPAddrs();
|
||||
if (!ips || ips.length === 0) return true;
|
||||
|
||||
var inSubnet = false;
|
||||
for (var j = 0; j < ips.length; j++) {
|
||||
if (ipInCidr(value, ips[j])) {
|
||||
inSubnet = true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if (!inSubnet) {
|
||||
return _('The proxy server IP address must be within the subnet of the selected interface (%s).').format(ips.join(', '));
|
||||
}
|
||||
|
||||
return true;
|
||||
};
|
||||
|
||||
o = s.taboption('settings', form.Value, 'proxy_server_dns_port', _('Proxy server DNS port'));
|
||||
o.datatype = 'port'; o.default = '5353'; o.rmempty = false;
|
||||
|
||||
o = s.taboption('settings', form.ListValue, 'interface', _('Proxy server interface'));
|
||||
devices.forEach(function(d) { o.value(d.getName(), d.getName()); });
|
||||
o.default = 'br-lan';
|
||||
|
||||
s.taboption('settings', form.Value, 'traffic_mark', _('Traffic Mark')).datatype = 'or(uinteger, hex)';
|
||||
s.taboption('settings', form.Value, 'routing_table', _('Routing Table ID')).datatype = 'and(uinteger,range(1, 4294967295))';
|
||||
s.taboption('settings', form.Value, 'rule_priority', _('Rule Priority')).datatype = 'and(uinteger,range(0, 4294967295))';
|
||||
|
||||
// --- Rules ---
|
||||
var nftsets = uci.sections('flowproxy', 'nftset').map(function(ss) { return '@' + ss['.name']; });
|
||||
|
||||
var setupRuleTable = function(type, title, switch_opt) {
|
||||
var st = s.taboption('rules', form.SectionValue, '_tab_' + type, form.TableSection, type, title);
|
||||
var ss = st.subsection;
|
||||
ss.addremove = true; ss.anonymous = true; ss.sortable = true;
|
||||
|
||||
var refreshTable = function() {
|
||||
return ss.render().then(function(newNode) {
|
||||
var el = document.getElementById('flowproxy-table-' + type);
|
||||
if (el && el.parentNode) {
|
||||
el.parentNode.replaceChild(newNode, el);
|
||||
}
|
||||
});
|
||||
};
|
||||
|
||||
var createTemplateButtons = function() {
|
||||
var presets = {
|
||||
'priv': { name: 'private (dst)', type: 'dst_ip', val: '@private_dst_ip_v4' },
|
||||
'china': { name: 'china (dst)', type: 'dst_ip', val: '@chnroute_dst_ip_v4' },
|
||||
'src_ip': { name: 'ip (src)', type: 'src_ip', val: '@no_proxy_src_ip_v4' },
|
||||
'dst_ip': { name: 'ip (dst)', type: 'dst_ip', val: '@no_proxy_dst_ip_v4' },
|
||||
'mac': { name: 'mac (src)', type: 'src_mac', val: '@no_proxy_src_mac' },
|
||||
'ports': { name: 'ports (dst)', type: 'dst_port', val: (type === 'tcp_rule') ? '@no_proxy_dst_tcp_ports' : '@no_proxy_dst_udp_ports' }
|
||||
};
|
||||
var btnGroup = E('div', { 'style': 'display: flex; flex-wrap: wrap; gap: 4px; margin-top: 8px; align-items: center;' }, [ E('small', { 'style': 'margin-right: 5px; color: #888;' }, _('Quick add:')) ]);
|
||||
Object.keys(presets).forEach(function(k) {
|
||||
var p = presets[k];
|
||||
|
||||
var bgColors = {
|
||||
'dst_ip': '#2196F3',
|
||||
'src_ip': '#2196F3',
|
||||
'custom': '#2196F3',
|
||||
'src_mac': '#9C27B0',
|
||||
'dst_port': '#FF9800'
|
||||
};
|
||||
var btnStyle = 'padding: 0 6px; font-size: 0.75rem; height: 22px; line-height: 22px; opacity: 0.9; margin-bottom: 4px; border: none; color: #fff; border-radius: 3px; cursor: pointer;';
|
||||
var bgColor = bgColors[p.type] || '#607d8b';
|
||||
btnStyle += ' background-color: ' + bgColor + ';';
|
||||
|
||||
btnGroup.appendChild(E('button', {
|
||||
'style': btnStyle,
|
||||
'title': p.val,
|
||||
'click': ui.createHandlerFn(self, function() {
|
||||
var sid = uci.add('flowproxy', type);
|
||||
uci.set('flowproxy', sid, 'enabled', '1');
|
||||
uci.set('flowproxy', sid, 'match_type', p.type);
|
||||
uci.set('flowproxy', sid, 'match_value', p.val);
|
||||
uci.set('flowproxy', sid, 'action', 'return');
|
||||
uci.set('flowproxy', sid, 'counter', '0');
|
||||
return Promise.resolve().then(function() {
|
||||
return m.load().then(function() {
|
||||
return refreshTable();
|
||||
});
|
||||
});
|
||||
})
|
||||
}, [ E('em', { 'class': 'icon-plus' }), ' ', p.name ]));
|
||||
});
|
||||
return btnGroup;
|
||||
};
|
||||
|
||||
ss.render = function() {
|
||||
return form.TableSection.prototype.render.apply(ss).then(function(node) {
|
||||
node.id = 'flowproxy-table-' + type;
|
||||
var titleEl = node.querySelector('h3');
|
||||
if (titleEl) {
|
||||
titleEl.style.display = 'block';
|
||||
var headerRow = E('div', { 'style': 'display: flex; align-items: center; gap: 10px;' }, [
|
||||
E('span', {}, title),
|
||||
E('div', { 'style': 'font-size: 0.8em; font-weight: normal; display: inline-flex; align-items: center; gap: 5px; color: #666;' }, [
|
||||
(function() {
|
||||
var val = uci.get('flowproxy', 'global', switch_opt);
|
||||
return E('input', { 'type': 'checkbox', 'style': 'width: 16px; height: 18px; cursor: pointer;', 'checked': (val !== '0') ? 'checked' : null,
|
||||
'change': function(ev) { uci.set('flowproxy', 'global', switch_opt, ev.target.checked ? '1' : '0'); ui.addNotification(null, E('p', _('Master switch updated.')), 'info'); }
|
||||
});
|
||||
})(),
|
||||
E('span', {}, _('enable protocol'))
|
||||
])
|
||||
]);
|
||||
L.dom.content(titleEl, [ headerRow, createTemplateButtons() ]);
|
||||
}
|
||||
return node;
|
||||
});
|
||||
};
|
||||
|
||||
ss.renderSectionAdd = function(extra_class) {
|
||||
var node = form.TableSection.prototype.renderSectionAdd.apply(this, [extra_class]);
|
||||
var label = (type === 'tcp_rule') ? 'TCP' : 'UDP';
|
||||
var addBtn = node.querySelector('.cbi-button-add'); if (addBtn) addBtn.innerText = _('Add rule');
|
||||
var resetBtn = E('button', { 'class': 'cbi-button cbi-button-reset', 'style': 'margin-left: 10px; border: 1px solid #cc0000; color: #cc0000;',
|
||||
'click': ui.createHandlerFn(self, function() {
|
||||
if (confirm(_('this will delete ALL current %s rules and generate default templates. are you sure?').format(label))) {
|
||||
uci.sections('flowproxy', type).forEach(function(r) { uci.remove('flowproxy', r['.name']); });
|
||||
var defs = [ { t: 'src_mac', v: '@no_proxy_src_mac' }, { t: 'dst_ip', v: '@private_dst_ip_v4' }, { t: 'dst_ip', v: '@chnroute_dst_ip_v4' } ];
|
||||
if (type === 'tcp_rule') defs.push({ t: 'dst_port', v: '@no_proxy_dst_tcp_ports' }); else if (type === 'udp_rule') defs.push({ t: 'dst_port', v: '@no_proxy_dst_udp_ports' });
|
||||
defs.forEach(function(r) { var sid = uci.add('flowproxy', type); uci.set('flowproxy', sid, 'enabled', '1'); uci.set('flowproxy', sid, 'match_type', r.t); uci.set('flowproxy', sid, 'match_value', r.v); uci.set('flowproxy', sid, 'action', 'return'); uci.set('flowproxy', sid, 'counter', '0'); });
|
||||
return Promise.resolve().then(function() {
|
||||
return m.load().then(function() {
|
||||
return refreshTable();
|
||||
});
|
||||
});
|
||||
}
|
||||
})
|
||||
}, [ E('em', { 'class': 'icon-reload' }), ' ', _('reset %s templates').format(label) ]);
|
||||
node.appendChild(resetBtn); return node;
|
||||
};
|
||||
|
||||
ss.option(form.Flag, 'enabled', _('Enabled')).width = '8%';
|
||||
var match_type = ss.option(form.ListValue, 'match_type', _('Match Type'));
|
||||
match_type.value('dst_ip', 'dest ip'); match_type.value('src_ip', 'src ip'); match_type.value('src_mac', 'src mac');
|
||||
match_type.value('dst_port', 'dest port'); match_type.value('src_port', 'src port'); match_type.value('custom', 'custom (raw)');
|
||||
match_type.default = 'dst_ip'; match_type.rmempty = false; match_type.width = '15%';
|
||||
|
||||
var match_value = ss.option(form.Value, 'match_value', _('Match Value'));
|
||||
match_value.rmempty = false; match_value.width = '45%';
|
||||
nftsets.forEach(function(set) { match_value.value(set); });
|
||||
match_value.validate = function(sid, val) {
|
||||
if (!val || val === '') return _('Expecting: %s').format(_('Match Value'));
|
||||
|
||||
var type = match_type.formvalue(sid);
|
||||
if (!type) {
|
||||
var typeEl = document.querySelector('[name="cbid.flowproxy.' + sid + '.match_type"]');
|
||||
if (typeEl && typeEl.value) type = typeEl.value;
|
||||
}
|
||||
if (!type) type = uci.get('flowproxy', sid, 'match_type');
|
||||
|
||||
if (val.match(/^@/)) {
|
||||
var setName = val.substring(1);
|
||||
// 仅当 section 确实存在时才尝试获取 type，否则不进行类型校验
|
||||
var section = uci.get('flowproxy', setName);
|
||||
var setType = (section && section['.type'] === 'nftset') ? uci.get('flowproxy', setName, 'type') : null;
|
||||
if (!setType) return true;
|
||||
|
||||
var expectedType = '';
|
||||
if (type === 'dst_ip' || type === 'src_ip') expectedType = 'ipv4_addr';
|
||||
else if (type === 'src_mac') expectedType = 'ether_addr';
|
||||
else if (type === 'dst_port' || type === 'src_port') expectedType = 'inet_service';
|
||||
|
||||
if (expectedType && setType !== expectedType && type !== 'custom') {
|
||||
return _('Set type mismatch: expected %s, got %s').format(expectedType, setType);
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
switch (type) {
|
||||
case 'dst_ip':
|
||||
case 'src_ip':
|
||||
if (!val.match(/^([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]{1,2})?$/)) return _('Invalid IPv4 address or CIDR');
|
||||
break;
|
||||
case 'src_mac':
|
||||
if (!val.match(/^([0-9a-fA-F]{2}:){5}[0-9a-fA-F]{2}$/)) return _('Invalid MAC address');
|
||||
break;
|
||||
case 'dst_port':
|
||||
case 'src_port':
|
||||
if (!val.match(/^[0-9]+(-[0-9]+)?$/)) return _('Invalid port or range');
|
||||
break;
|
||||
}
|
||||
return true;
|
||||
};
|
||||
// 联动：当 match_type 改变时，强制触发 match_value 的校验
|
||||
match_type.onchange = function(ev, sid, val) {
|
||||
var value_input = m.lookupOption('match_value', sid)[0];
|
||||
if (value_input) setTimeout(function() {
|
||||
var el = document.getElementById(value_input.cbid(sid));
|
||||
if (el) {
|
||||
var inputEl = el.tagName === 'INPUT' ? el : el.querySelector('input');
|
||||
if (inputEl) {
|
||||
inputEl.dispatchEvent(new CustomEvent('change', { bubbles: true }));
|
||||
inputEl.dispatchEvent(new CustomEvent('blur', { bubbles: true }));
|
||||
inputEl.dispatchEvent(new CustomEvent('input', { bubbles: true }));
|
||||
}
|
||||
}
|
||||
}, 0);
|
||||
};
|
||||
ss.option(form.Flag, 'counter', _('Counter')).width = '8%';
|
||||
o = ss.option(form.ListValue, 'action', _('Action')); o.value('return', 'return'); o.value('accept', 'accept'); o.value('drop', 'drop'); o.default = 'return'; o.width = '12%';
|
||||
};
|
||||
setupRuleTable('tcp_rule', _('TCP Matching Rules'), 'tcp_enabled');
|
||||
setupRuleTable('udp_rule', _('UDP Matching Rules'), 'udp_enabled');
|
||||
|
||||
// --- Lists ---
|
||||
var predefined = [ { id: 'no_proxy_src_mac', name: _('no_proxy_src_mac'), type: 'macaddr' }, { id: 'no_proxy_src_ip_v4', name: _('no_proxy_src_ip_v4'), type: 'or(ip4addr, cidr4)' }, { id: 'no_proxy_dst_ip_v4', name: _('no_proxy_dst_ip_v4'), type: 'or(ip4addr, cidr4)' }, { id: 'no_proxy_dst_tcp_ports', name: _('no_proxy_dst_tcp_ports'), type: 'or(port, portrange)' }, { id: 'no_proxy_dst_udp_ports', name: _('no_proxy_dst_udp_ports'), type: 'or(port, portrange)' } ];
|
||||
predefined.forEach(function(p) {
|
||||
var sl = s.taboption('lists', form.SectionValue, '_list_' + p.id, form.NamedSection, p.id, 'nftset', p.name + ' (@' + p.id + ')');
|
||||
sl.subsection.option(form.Flag, 'enabled', _('Enabled')).default = '1';
|
||||
sl.subsection.option(form.DynamicList, 'elements', _('Elements')).datatype = p.type;
|
||||
});
|
||||
var spriv = s.taboption('lists', form.SectionValue, '_list_priv', form.NamedSection, 'private_dst_ip_v4', 'nftset', _('private_dst_ip_v4') + ' (@private_dst_ip_v4)');
|
||||
spriv.subsection.option(form.Flag, 'enabled', _('Enabled')).default = '1';
|
||||
spriv.subsection.option(form.Flag, 'auto_generate', _('auto_generate')).default = '1';
|
||||
o = spriv.subsection.option(form.DynamicList, 'elements', _('elements')); o.datatype = 'cidr4'; o.depends('auto_generate', '0');
|
||||
|
||||
var sc = s.taboption('lists', form.SectionValue, '_list_chnroute', form.NamedSection, 'chnroute_dst_ip_v4', 'nftset', _('chnroute_dst_ip_v4') + ' (@chnroute_dst_ip_v4)');
|
||||
sc.subsection.option(form.Flag, 'enabled', _('Enabled')).default = '1';
|
||||
o = sc.subsection.option(form.Value, 'file_path', _('File Path')); o.default = '/usr/share/flowproxy/chnroute.txt';
|
||||
o.render = function(sid) {
|
||||
return form.Value.prototype.render.apply(this, arguments).then(function(node) {
|
||||
var path = uci.get('flowproxy', sid, 'file_path') || '/usr/share/flowproxy/chnroute.txt';
|
||||
var resNode = E('span', { 'style': 'margin-left: 10px; font-weight: bold; color: #444;', 'id': 'line-count-status' }, [ '...' ]);
|
||||
var input = node.querySelector('input'); if (input) input.parentNode.appendChild(resNode);
|
||||
fs.exec('/usr/bin/wc', ['-l', path]).then(function(res) { L.dom.content(resNode, (res.code === 0) ? [ _('(%d lines)').format(res.stdout.trim().split(' ')[0]) ] : [ _('(n/a)') ]); });
|
||||
return node;
|
||||
});
|
||||
};
|
||||
sc.subsection.option(form.Value, 'download_url', _('Download URL'));
|
||||
o = sc.subsection.option(form.Button, '_download', _('Update Chnroute')); o.inputstyle = 'apply';
|
||||
o.onclick = function(ev, sid) {
|
||||
var urlOpt = m.lookupOption('download_url', sid)[0];
|
||||
var url = urlOpt ? urlOpt.formvalue(sid) : uci.get('flowproxy', sid, 'download_url');
|
||||
var pathOpt = m.lookupOption('file_path', sid)[0];
|
||||
var path = pathOpt ? pathOpt.formvalue(sid) : uci.get('flowproxy', sid, 'file_path');
|
||||
if (!path) path = '/usr/share/flowproxy/chnroute.txt';
|
||||
if (!url) { ui.addNotification(null, E('p', _('Please set download_url first')), 'error'); return; }
|
||||
ui.showModal(null, [ E('p', { 'class': 'spinning', 'id': 'download-msg' }, [ _('Downloading chnroute data...') ]) ]);
|
||||
return fs.exec('/usr/bin/wget', ['-q', '-O', path, url, '--timeout=10', '--no-check-certificate']).then(function(res) {
|
||||
var msgEl = document.getElementById('download-msg');
|
||||
if (res.code === 0) {
|
||||
if (msgEl) { msgEl.classList.remove('spinning'); L.dom.content(msgEl, [ _('Updated successfully.') ]); }
|
||||
var cn = document.getElementById('line-count-status'); if (cn) fs.exec('/usr/bin/wc', ['-l', path]).then(function(r) { L.dom.content(cn, (r.code === 0) ? [ _('(%d lines)').format(r.stdout.trim().split(' ')[0]) ] : [ _('(n/a)') ]); });
|
||||
setTimeout(ui.hideModal, 1500);
|
||||
} else { ui.hideModal(); ui.addNotification(null, E('p', _('Download failed')), 'error'); }
|
||||
}).catch(function(e) { ui.hideModal(); ui.addNotification(null, E('p', _('Error: %s').format(e.message)), 'error'); });
|
||||
};
|
||||
|
||||
var sg = s.taboption('lists', form.SectionValue, '_list_custom', form.GridSection, 'nftset', _('Custom nftables sets'));
|
||||
sg.subsection.addremove = true; sg.subsection.anonymous = false; sg.subsection.nodescription = true;
|
||||
sg.subsection.filter = function(sid) { var pre = predefined.map(function(p){return p.id}); pre.push('private_dst_ip_v4','chnroute_dst_ip_v4'); return pre.indexOf(sid) === -1; };
|
||||
sg.subsection.option(form.Flag, 'enabled', _('Enabled')).default = '1';
|
||||
o = sg.subsection.option(form.ListValue, 'type', _('Element Type')); o.value('ipv4_addr', 'IPv4 Address/CIDR'); o.value('ether_addr', 'MAC Address'); o.value('inet_service', 'Port/Service'); o.default = 'ipv4_addr';
|
||||
sg.subsection.option(form.DynamicList, 'elements', _('Elements'));
|
||||
|
||||
// --- Preview & Logs ---
|
||||
var sp = s.taboption('preview', form.SectionValue, '_preview_section', form.NamedSection, 'global', 'flowproxy');
|
||||
sp.subsection.tab('generated', _('Generated Config')); sp.subsection.tab('runtime', _('Live Runtime State'));
|
||||
|
||||
o = sp.subsection.taboption('generated', form.DummyValue, '_preview_gen');
|
||||
o.render = function() {
|
||||
var node = E('div', { 'style': 'width:100%; box-sizing:border-box; margin-top: 10px;' }, [
|
||||
E('div', { 'style': 'margin-bottom: 10px' }, [
|
||||
E('button', { 'class': 'cbi-button cbi-button-apply', 'click': function() {
|
||||
var el = document.getElementById('gen-code');
|
||||
if (el) { navigator.clipboard.writeText(el.innerText); ui.addNotification(null, E('p', _('Copied')), 'info'); }
|
||||
} }, [ _('Copy Config') ])
|
||||
]),
|
||||
E('pre', { 'class': 'nft-code-view', 'id': 'gen-code' }, [ _('loading...') ])
|
||||
]);
|
||||
callGenerateNftConfig().then(function(res) {
|
||||
var el = node.querySelector('#gen-code');
|
||||
if (el) el.innerHTML = self.highlightNft(res.config || '');
|
||||
});
|
||||
return node;
|
||||
};
|
||||
|
||||
o = sp.subsection.taboption('runtime', form.DummyValue, '_preview_run');
|
||||
o.render = function() {
|
||||
var node = E('div', { 'style': 'width:100%; box-sizing:border-box; margin-top: 10px;' }, [
|
||||
E('div', { 'style': 'margin-bottom: 10px' }, [
|
||||
E('button', { 'class': 'cbi-button cbi-button-refresh', 'click': function() { location.reload(); } }, [ _('Refresh Status') ])
|
||||
]),
|
||||
E('pre', { 'class': 'nft-code-view', 'id': 'run-code' }, [ _('loading...') ])
|
||||
]);
|
||||
callGetRuntimeConfig().then(function(res) {
|
||||
var el = node.querySelector('#run-code');
|
||||
if (el) el.innerHTML = self.highlightNft(res.runtime || '');
|
||||
});
|
||||
return node;
|
||||
};
|
||||
|
||||
o = s.taboption('logs', form.ListValue, 'log_level', _('Log Level'));
|
||||
o.value('debug'); o.value('info'); o.value('warn'); o.value('error'); o.default = 'info';
|
||||
s.taboption('logs', form.Value, 'log_size', _('Log Size (KB)')).datatype = 'uinteger';
|
||||
o = s.taboption('logs', form.DummyValue, '_log_view');
|
||||
o.render = function() {
|
||||
var node = E('div', { 'style': 'width:100%; box-sizing:border-box; margin-top: 15px;' }, [
|
||||
E('div', { 'style': 'margin-bottom: 5px; text-align: left;' }, [
|
||||
E('button', { 'class': 'cbi-button cbi-button-refresh', 'click': L.bind(self.refreshLogs, self) }, [ _('Refresh Logs') ]),
|
||||
E('button', { 'class': 'cbi-button cbi-button-reset', 'style': 'margin-left: 10px;', 'click': L.bind(function() { if(confirm(_('Clear logs?'))) callClearLogs().then(L.bind(self.refreshLogs, self)); }, self) }, [ _('Clear Logs') ])
|
||||
]),
|
||||
E('textarea', { 'id': 'log-content', 'readonly': true }, [ _('loading logs...') ])
|
||||
]);
|
||||
callGetLogs(500).then(function(data) {
|
||||
var logEl = node.querySelector('#log-content');
|
||||
if (logEl) {
|
||||
var logs = (data && Array.isArray(data.logs)) ? data.logs : [];
|
||||
logEl.value = logs.length > 0 ? logs.join('\n') : _('no logs available');
|
||||
if (logs.length > 0) logEl.scrollTop = logEl.scrollHeight;
|
||||
}
|
||||
});
|
||||
return node;
|
||||
};
|
||||
|
||||
return m.render().then(L.bind(function(node) {
|
||||
this.refreshStatus(m, node);
|
||||
poll.add(L.bind(function() { if (!document.body.contains(node)) return false; return this.refreshStatus(m, node); }, this), 5);
|
||||
return node;
|
||||
}, this));
|
||||
}
|
||||
});
|
||||
Reference in new issue
Block a user