Function BuildXrayConfig

internal/proxycfg/xray.go:239–690

BuildXrayConfig 根据节点 inbound 配置和用户凭据生成 Xray 配置 JSON。

(nodeInbounds []inbounds.Inbound, userAccesses []users.UserInbound, userMap map[string]users.User, opts BuildOptions)

// BuildXrayConfig 根据节点 inbound 配置和用户凭据生成 Xray 配置 JSON。
func BuildXrayConfig(nodeInbounds []inbounds.Inbound, userAccesses []users.UserInbound, userMap map[string]users.User, opts BuildOptions) (string, error) {
	if len(nodeInbounds) == 0 {
		return "", fmt.Errorf("at least one inbound is required")
	}

	// 过滤已启用的用户访问记录
	activeAccesses := make([]users.UserInbound, 0, len(userAccesses))
	for _, acc := range userAccesses {
		u, ok := userMap[acc.UserID]
		if ok && u.EffectiveEnabled() {
			activeAccesses = append(activeAccesses, acc)
		}
	}
	// 端口转发 inbound 不需要用户列表；只有当节点存在非 portforward 的 inbound 时才要求活跃用户
	hasProxyInbound := false
	for _, ib := range nodeInbounds {
		if ib.Protocol != "portforward" {
			hasProxyInbound = true
			break
		}
	}
	if hasProxyInbound && len(activeAccesses) == 0 {
		return "", fmt.Errorf("at least one active user is required")
	}

	// in-process 模式：api.listen 留空，commander 不对外暴露 gRPC 端口。
	// 流量统计通过 in-process API 直接访问，不走网络。
	const apiListenAddr = ""

	xrayInbounds := make([]xrayInbound, 0, len(nodeInbounds))
	var routingRules []xrayRoutingRule

	// 收集用于 V2Ray Stats 的用户 email 列表
	seenUsers := make(map[string]struct{})

	for _, ib := range nodeInbounds {
		tag := ib.Tag
		if tag == "" {
			tag = fmt.Sprintf("%s-%d", ib.Protocol, ib.Port)
		}

		// 过滤出被分配到此 inbound 的用户凭据，按 UserID 去重（同一用户可能同时有直接分配和组分配）
		ibAccesses := make([]users.UserInbound, 0, len(activeAccesses))
		seenUserID := make(map[string]struct{})
		for _, acc := range activeAccesses {
			if acc.InboundID == "" || acc.InboundID == ib.ID {
				if _, dup := seenUserID[acc.UserID]; !dup {
					seenUserID[acc.UserID] = struct{}{}
					ibAccesses = append(ibAccesses, acc)
				}
			}
		}

		// portforward：由 NodeGate layer4 处理，Xray 不需要生成任何配置。
		if ib.Protocol == "portforward" {
			continue
		}