Function TestTerminating_DecryptsAndForwards

internal/sniproxy/terminating_test.go:36–96

(t *testing.T)

}

func TestTerminating_DecryptsAndForwards(t *testing.T) {
	// 模拟两个 xray 明文后端
	backendA := startEchoPlaintext(t)
	backendB := startEchoPlaintext(t)

	// 一张自签证书服务所有 SNI（测试用）
	cert := genSelfSigned(t)
	tlsCfg := &tls.Config{
		Certificates: []tls.Certificate{cert},
	}

	proxy := &TerminatingProxy{
		Addr:      "127.0.0.1:0",
		TLSConfig: tlsCfg,
	}
	proxy.SetRoutes([]TerminatingRoute{
		{SNI: "a.example.com", Backend: backendA},
		{SNI: "b.example.com", Backend: backendB},
	})

	// 提前分配端口
	ln, _ := net.Listen("tcp", "127.0.0.1:0")
	addr := ln.Addr().String()
	_ = ln.Close()
	proxy.Addr = addr

	ctx, cancel := context.WithCancel(context.Background())
	defer cancel()
	var wg sync.WaitGroup
	wg.Add(1)
	go func() { defer wg.Done(); _ = proxy.Serve(ctx) }()
	t.Cleanup(func() { cancel(); wg.Wait() })

	waitForListen(t, addr)

	for _, sni := range []string{"a.example.com", "b.example.com"} {
		t.Run(sni, func(t *testing.T) {
			conn, err := net.Dial("tcp", addr)
			if err != nil {
				t.Fatal(err)
			}
			defer conn.Close()
			tc := tls.Client(conn, &tls.Config{ServerName: sni, InsecureSkipVerify: true})
			_ = tc.SetDeadline(time.Now().Add(3 * time.Second))
			if err := tc.Handshake(); err != nil {
				t.Fatalf("handshake: %v", err)
			}
			want := []byte("hello-" + sni)
			if _, err := tc.Write(want); err != nil {
				t.Fatal(err)
			}
			got := make([]byte, len(want))
			if _, err := io.ReadFull(tc, got); err != nil {
				t.Fatal(err)
			}
			if string(got) != string(want) {
				t.Errorf("echo = %q, want %q", got, want)
			}