Function newScanAllCmd

cmd/snix/scan.go:184–282

(g *globalFlags)

}

func newScanAllCmd(g *globalFlags) *cobra.Command {
	var sniTarget string
	cmd := &cobra.Command{
		Use:   "all",
		Short: "Run IP and SNI scans together and emit a suggested profile",
		Long: `Runs both scans and emits a ready-to-paste sni_pool plus the top CDN IPs.

Two scans run in parallel:

  1. IP scan     — TCP reachability + RTT for the Cloudflare IP pool.
  2. SNI scan    — TLS handshakes against --sni-target (default 1.1.1.1,
                   which uses a universal SSL cert and accepts any SNI).

The SNI scan's purpose is to find SNIs that the user's ISP does NOT block;
it does not tell you which IPs serve which customer domains. Use the IP
scan results for your profile's connect.host / fallback_ips.`,
		RunE: func(cmd *cobra.Command, args []string) error {
			ctx, cancel := installSignalCancel(cmd.Context())
			defer cancel()

			sniTargetAddr, err := netip.ParseAddr(sniTarget)
			if err != nil {
				return fmt.Errorf("invalid --sni-target: %w", err)
			}

			fmt.Fprintf(cmd.OutOrStdout(),
				"Scanning %d Cloudflare IPs and %d SNI candidates (SNI probes → %s)...\n",
				len(scanner.DefaultCloudflareIPs), len(scanner.DefaultSNICandidates), sniTarget)

			type ipOut struct {
				results []scanner.IPResult
			}
			type sniOut struct {
				results []scanner.Result
			}
			ipCh := make(chan ipOut, 1)
			sniCh := make(chan sniOut, 1)

			go func() {
				r := scanner.ProbeIPs(ctx, scanner.DefaultCloudflareIPs, 443,
					2*time.Second, 16, nil)
				ipCh <- ipOut{r}
			}()
			go func() {
				r := scanner.ProbeSNIs(ctx, scanner.DefaultSNICandidates,
					scanner.ProbeConfig{
						TargetIP:         sniTargetAddr,
						TargetPort:       443,
						ConnectTimeout:   4 * time.Second,
						HandshakeTimeout: 4 * time.Second,
						Concurrency:      16,
					}, nil)
				sniCh <- sniOut{r}
			}()
			ips := (<-ipCh).results
			snis := (<-sniCh).results

			rankedIPs := scanner.RankIPs(ips)