62 lines
1.3 KiB
Go
62 lines
1.3 KiB
Go
|
package main
|
||
|
|
|
||
|
|
import (
|
||
|
|
"crypto/tls"
|
||
|
|
"flag"
|
||
|
|
"fmt"
|
||
|
|
"log"
|
||
|
|
"net/http"
|
||
|
|
"net/http/httputil"
|
||
|
|
"net/url"
|
||
|
|
|
||
|
|
"tailscale.com/client/tailscale"
|
||
|
|
"tailscale.com/tsnet"
|
||
|
|
)
|
||
|
|
|
||
|
|
func main() {
|
||
|
|
sName := flag.String("name", "", "server name we will be reverse proxying for")
|
||
|
|
cIP := flag.String("ip", "127.0.0.1", "ip address to reverse proxy to")
|
||
|
|
cPort := flag.Int("port", 5000, "port to revres proxy to")
|
||
|
|
flag.Parse()
|
||
|
|
|
||
|
|
tsServer := &tsnet.Server{
|
||
|
|
Hostname: *sName,
|
||
|
|
}
|
||
|
|
tsLocalClient := &tailscale.LocalClient{}
|
||
|
|
tsLocalClient, err := tsServer.LocalClient()
|
||
|
|
if err != nil {
|
||
|
|
log.Fatal("can't get ts local client: ", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
ln, err := tsServer.Listen("tcp", ":443")
|
||
|
|
if err != nil {
|
||
|
|
log.Fatal("can't listen: ", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
rpURL, err := url.Parse(fmt.Sprintf("http://%s:%d", *cIP, *cPort))
|
||
|
|
if err != nil {
|
||
|
|
log.Fatal(err)
|
||
|
|
}
|
||
|
|
|
||
|
|
proxy := &httputil.ReverseProxy{Director: func(req *http.Request) {
|
||
|
|
req.Header.Add("X-Forwarded-Host", req.Host)
|
||
|
|
req.Header.Add("X-Origin-Host", rpURL.Host)
|
||
|
|
req.URL.Scheme = rpURL.Scheme
|
||
|
|
req.URL.Host = rpURL.Host
|
||
|
|
}}
|
||
|
|
|
||
|
|
mux := http.NewServeMux()
|
||
|
|
mux.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
|
||
|
|
proxy.ServeHTTP(w, r)
|
||
|
|
})
|
||
|
|
|
||
|
|
hs := &http.Server{
|
||
|
|
Handler: mux,
|
||
|
|
TLSConfig: &tls.Config{
|
||
|
|
GetCertificate: tsLocalClient.GetCertificate,
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
log.Panic(hs.ServeTLS(ln, "", ""))
|
||
|
|
}
|