mirror of
https://github.com/Buriburizaem0n/nezha_domains.git
synced 2026-09-19 09:40:12 +00:00
45 lines
1.6 KiB
Go
45 lines
1.6 KiB
Go
package rpc
|
|
|
|
import (
|
|
"net"
|
|
|
|
"google.golang.org/grpc"
|
|
|
|
"github.com/nezhahq/nezha/proto"
|
|
rpcService "github.com/nezhahq/nezha/service/rpc"
|
|
"github.com/nezhahq/nezha/service/singleton"
|
|
)
|
|
|
|
func SetReceiptGateListener(listener net.Listener) {
|
|
rpcService.SetReceiptGateListener(listener)
|
|
}
|
|
|
|
func CloseReceiptGate() {
|
|
rpcService.CloseReceiptGate()
|
|
}
|
|
|
|
// SetMCPKillSwitchObserver re-exports the service/rpc hook so cmd/dashboard
|
|
// can wire singleton.Conf.EnableMCP without importing the inner rpc package
|
|
// (cmd/dashboard already imports cmd/dashboard/rpc for ServeRPC).
|
|
func SetMCPKillSwitchObserver(fn func() bool) {
|
|
rpcService.SetMCPKillSwitchObserver(fn)
|
|
}
|
|
|
|
func ServeRPC() *grpc.Server {
|
|
// Streaming RPCs (RequestTask, IOStream) need the same real-IP + WAF
|
|
// gate as unary calls; without the stream interceptors authHandler.check
|
|
// sees an empty real IP, so brute-force BlockIP counters never key on a
|
|
// source and the WAF block table is bypassed at the stream entrypoint.
|
|
server := grpc.NewServer(
|
|
grpc.ChainUnaryInterceptor(getRealIp, waf),
|
|
grpc.ChainStreamInterceptor(getRealIpStream, wafStream),
|
|
)
|
|
rpcService.NezhaHandlerSingleton = rpcService.NewNezhaHandler()
|
|
// Install the IOStream revocation hook so ServerTransferShared can tear
|
|
// down terminal/FM/NAT sessions held by the previous owner on every
|
|
// ownership rotation (Register/revertTransition/OnServersDeleted).
|
|
singleton.ServerTransferStreamRevocationHook = rpcService.NezhaHandlerSingleton.RevokeStreamsForServer
|
|
proto.RegisterNezhaServiceServer(server, rpcService.NezhaHandlerSingleton)
|
|
return server
|
|
}
|