[ { "path": ".clang-format", "content": "# Use the Google style in this project.\nLanguage: Cpp\nBasedOnStyle: Google\nStandard: c++11\n# Some folks prefer to write \"int& foo\" while others prefer \"int &foo\". The\n# Google Style Guide only asks for consistency within a project, we chose\n# \"int& foo\" for this project:\nDerivePointerAlignment: false\nPointerAlignment: Left\n\nUseTab: Never\n\nAlignAfterOpenBracket: DontAlign\nAllowAllParametersOfDeclarationOnNextLine: true\nBinPackParameters: false\n# The Google Style Guide only asks for consistency w.r.t. \"east const\" vs.\n# \"const west\" alignment of cv-qualifiers. In this project we use \"const west\".\n#QualifierAlignment: Right\n\n# Adjust the include ordering\nIncludeCategories:\n - Regex: '^'\n Priority: 4\n - Regex: '^' # QT Core (QApplication, QWidget и т.д.)\n Priority: 3\n - Regex: '^' # QT Modules (QtCore, QtGui и т.д.)\n Priority: 3\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^'\n Priority: 2\n - Regex: '^\"(common/.*)\"'\n Priority: 5\n - Regex: '^<.*>'\n Priority: 1\n - Regex: '^\".*\"'\n Priority: 6\n\n# Format raw string literals with a `pb` or `proto` tag as proto.\nRawStringFormats:\n - Language: TextProto\n Delimiters:\n - 'pb'\n - 'proto'\n BasedOnStyle: Google\n\nCommentPragmas: '(@copydoc|@copybrief|@see|@overload|@snippet)'" }, { "path": ".clang-tidy", "content": "---\n# Configure clang-tidy for this project.\n\n# Here is an explanation for why some of the checks are disabled:\n#\n# -google-readability-namespace-comments: the *_CLIENT_NS is a macro, and\n# clang-tidy fails to match it against the initial value.\n#\n# -modernize-use-trailing-return-type: clang-tidy recommends using\n# `auto Foo() -> std::string { return ...; }`, we think the code is less\n# readable in this form.\n#\n# --modernize-concat-nested-namespaces: clang-tidy recommends\n# `namespace google::cloud {}` over `namespace google { namespace cloud { } }`\n# We need to support C++14, which does not supported nested namespaces.\n#\n# --modernize-use-nodiscard: clang-tidy recommends adding a nodiscard annotation\n# to functions where the return value should not be ignored.\n# We need to support C++14, which does not supported the annotation.\n#\n# -modernize-return-braced-init-list: We think removing typenames and using\n# only braced-init can hurt readability.\n#\n# -modernize-avoid-c-arrays: We only use C arrays when they seem to be the\n# right tool for the job, such as `char foo[] = \"hello\"`. In these cases,\n# avoiding C arrays often makes the code less readable, and std::array is\n# not a drop-in replacement because it doesn't deduce the size.\n#\n# -modernize-type-traits: clang-tidy recommands using c++17 style variable\n# templates. We will enable this check after we moved to c++17.\n#\n# -modernize-unary-static-assert: clang-tidy asks removing empty string in\n# static_assert(), the check is only applicable for c++17 and later code.\n# We will enable this check after we moved to c++17.\n#\n# -performance-move-const-arg: This warning requires the developer to\n# know/care more about the implementation details of types/functions than\n# should be necessary. For example, `A a; F(std::move(a));` will trigger a\n# warning IFF `A` is a trivial type (and therefore the move is\n# meaningless). It would also warn if `F` accepts by `const&`, which is\n# another detail that the caller need not care about.\n#\n# -performance-avoid-endl: we would like to turn this on, but there are too\n# many legitimate uses in our samples.\n#\n# -performance-enum-size: Smaller enums may or not may be faster, it depends on\n# the architechture. If data size was a consideration, we might decide to\n# enable the warnings.\n#\n# -readability-redundant-declaration: A friend declaration inside a class\n# counts as a declaration, so if we also declare that friend outside the\n# class in order to document it as part of the public API, that will\n# trigger a redundant declaration warning from this check.\n#\n# -readability-avoid-return-with-void-value: We believe this is idiomatic\n# and saves typing, and the intent is obvious.\n#\n# -readability-function-cognitive-complexity: too many false positives with\n# clang-tidy-12. We need to disable this check in macros, and that setting\n# only appears in clang-tidy-13.\n#\n# -bugprone-narrowing-conversions: too many false positives around\n# `std::size_t` vs. `*::difference_type`.\n#\n# -bugprone-easily-swappable-parameters: too many false positives.\n#\n# -bugprone-implicit-widening-of-multiplication-result: too many false positives.\n# Almost any expression of the form `2 * variable` or `long x = a_int * b_int;`\n# generates an error.\n#\n# -bugprone-unchecked-optional-access: too many false positives in tests.\n# Despite what the documentation says, this warning appears after\n# `ASSERT_TRUE(variable)` or `ASSERT_TRUE(variable.has_value())`.\n#\n# TODO(#14162): Enable clang-tidy checks. We initially omitted these checks\n# because they require large cleanup efforts or were blocking the clang-tidy\n# X update.\nChecks: >\n -*,\n abseil-*,\n bugprone-*,\n google-*,\n misc-*,\n modernize-*,\n performance-*,\n portability-*,\n readability-*,\n -google-readability-braces-around-statements,\n -google-readability-namespace-comments,\n -google-runtime-references,\n -misc-non-private-member-variables-in-classes,\n -misc-const-correctness,\n -misc-include-cleaner,\n -modernize-return-braced-init-list,\n -modernize-use-trailing-return-type,\n -modernize-use-nodiscard,\n -modernize-avoid-c-arrays,\n -modernize-type-traits,\n -modernize-unary-static-assert,\n -performance-move-const-arg,\n -performance-avoid-endl,\n -performance-enum-size,\n -readability-braces-around-statements,\n -readability-identifier-length,\n -readability-magic-numbers,\n -readability-named-parameter,\n -readability-redundant-declaration,\n -readability-avoid-return-with-void-value,\n -readability-function-cognitive-complexity,\n -bugprone-narrowing-conversions,\n -bugprone-easily-swappable-parameters,\n -bugprone-inc-dec-in-conditions,\n -bugprone-implicit-widening-of-multiplication-result,\n -bugprone-unchecked-optional-access,\n -bugprone-unused-local-non-trivial-variable,\n -bugprone-unused-return-value,\n -portability-template-virtual-member-function\n\n# Turn all the warnings from the checks above into errors.\nWarningsAsErrors: \"*\"\nHeaderFilterRegex: \"(google/cloud/|generator/).*\\\\.h$\"\n\nCheckOptions:\n - { key: readability-identifier-naming.NamespaceCase, value: lower_case }\n - { key: readability-identifier-naming.ClassCase, value: CamelCase }\n - { key: readability-identifier-naming.StructCase, value: CamelCase }\n - { key: readability-identifier-naming.TemplateParameterCase, value: CamelCase }\n - { key: readability-identifier-naming.FunctionCase, value: aNy_CasE }\n - { key: readability-identifier-naming.VariableCase, value: lower_case }\n - { key: readability-identifier-naming.ClassMemberCase, value: lower_case }\n - { key: readability-identifier-naming.ClassMemberSuffix, value: _ }\n - { key: readability-identifier-naming.PrivateMemberSuffix, value: _ }\n - { key: readability-identifier-naming.ProtectedMemberSuffix, value: _ }\n - { key: readability-identifier-naming.EnumConstantCase, value: CamelCase }\n - { key: readability-identifier-naming.EnumConstantPrefix, value: k }\n - { key: readability-identifier-naming.ConstexprVariableCase, value: CamelCase }\n - { key: readability-identifier-naming.ConstexprVariablePrefix, value: k }\n - { key: readability-identifier-naming.GlobalConstantCase, value: CamelCase }\n - { key: readability-identifier-naming.GlobalConstantPrefix, value: k }\n - { key: readability-identifier-naming.MemberConstantCase, value: CamelCase }\n - { key: readability-identifier-naming.MemberConstantPrefix, value: k }\n - { key: readability-identifier-naming.StaticConstantCase, value: CamelCase }\n - { key: readability-identifier-naming.StaticConstantPrefix, value: k }\n - { key: readability-implicit-bool-conversion.AllowIntegerConditions, value: 1 }\n - { key: readability-implicit-bool-conversion.AllowPointerConditions, value: 1 }\n - { key: readability-function-cognitive-complexity.IgnoreMacros, value: 1 }\n" }, { "path": ".cmake-format", "content": "_help_parse: Options affecting listfile parsing\r\nparse:\r\n _help_additional_commands:\r\n - Specify structure for custom cmake functions\r\n additional_commands:\r\n foo:\r\n flags:\r\n - BAR\r\n - BAZ\r\n kwargs:\r\n HEADERS: '*'\r\n SOURCES: '*'\r\n DEPENDS: '*'\r\n _help_override_spec:\r\n - Override configurations per-command where available\r\n override_spec: {}\r\n _help_vartags:\r\n - Specify variable tags.\r\n vartags: []\r\n _help_proptags:\r\n - Specify property tags.\r\n proptags: []\r\n_help_format: Options affecting formatting.\r\nformat:\r\n _help_disable:\r\n - Disable formatting entirely, making cmake-format a no-op\r\n disable: false\r\n _help_line_width:\r\n - How wide to allow formatted cmake files\r\n line_width: 150\r\n _help_tab_size:\r\n - How many spaces to tab for indent\r\n tab_size: 2\r\n _help_max_subgroups_hwrap:\r\n - If an argument group contains more than this many sub-groups\r\n - (parg or kwarg groups) then force it to a vertical layout.\r\n max_subgroups_hwrap: 2\r\n _help_max_pargs_hwrap:\r\n - If a positional argument group contains more than this many\r\n - arguments, then force it to a vertical layout.\r\n max_pargs_hwrap: 6\r\n _help_max_rows_cmdline:\r\n - If a cmdline positional group consumes more than this many\r\n - lines without nesting, then invalidate the layout (and nest)\r\n max_rows_cmdline: 2\r\n _help_separate_ctrl_name_with_space:\r\n - If true, separate flow control names from their parentheses\r\n - with a space\r\n separate_ctrl_name_with_space: false\r\n _help_separate_fn_name_with_space:\r\n - If true, separate function names from parentheses with a\r\n - space\r\n separate_fn_name_with_space: false\r\n _help_dangle_parens:\r\n - If a statement is wrapped to more than one line, than dangle\r\n - the closing parenthesis on its own line.\r\n dangle_parens: false\r\n _help_dangle_align:\r\n - If the trailing parenthesis must be 'dangled' on its on\r\n - 'line, then align it to this reference: `prefix`: the start'\r\n - 'of the statement, `prefix-indent`: the start of the'\r\n - 'statement, plus one indentation level, `child`: align to'\r\n - the column of the arguments\r\n dangle_align: prefix\r\n _help_min_prefix_chars:\r\n - If the statement spelling length (including space and\r\n - parenthesis) is smaller than this amount, then force reject\r\n - nested layouts.\r\n min_prefix_chars: 4\r\n _help_max_prefix_chars:\r\n - If the statement spelling length (including space and\r\n - parenthesis) is larger than the tab width by more than this\r\n - amount, then force reject un-nested layouts.\r\n max_prefix_chars: 10\r\n _help_max_lines_hwrap:\r\n - If a candidate layout is wrapped horizontally but it exceeds\r\n - this many lines, then reject the layout.\r\n max_lines_hwrap: 2\r\n _help_line_ending:\r\n - What style line endings to use in the output.\r\n line_ending: unix\r\n _help_command_case:\r\n - Format command names consistently as 'lower' or 'upper' case\r\n command_case: canonical\r\n _help_keyword_case:\r\n - Format keywords consistently as 'lower' or 'upper' case\r\n keyword_case: unchanged\r\n _help_always_wrap:\r\n - A list of command names which should always be wrapped\r\n always_wrap: []\r\n _help_enable_sort:\r\n - If true, the argument lists which are known to be sortable\r\n - will be sorted lexicographicall\r\n enable_sort: true\r\n _help_autosort:\r\n - If true, the parsers may infer whether or not an argument\r\n - list is sortable (without annotation).\r\n autosort: false\r\n _help_require_valid_layout:\r\n - By default, if cmake-format cannot successfully fit\r\n - everything into the desired linewidth it will apply the\r\n - last, most agressive attempt that it made. If this flag is\r\n - True, however, cmake-format will print error, exit with non-\r\n - zero status code, and write-out nothing\r\n require_valid_layout: false\r\n _help_layout_passes:\r\n - A dictionary mapping layout nodes to a list of wrap\r\n - decisions. See the documentation for more information.\r\n layout_passes: {}\r\n_help_markup: Options affecting comment reflow and formatting.\r\nmarkup:\r\n _help_bullet_char:\r\n - What character to use for bulleted lists\r\n bullet_char: '*'\r\n _help_enum_char:\r\n - What character to use as punctuation after numerals in an\r\n - enumerated list\r\n enum_char: .\r\n _help_first_comment_is_literal:\r\n - If comment markup is enabled, don't reflow the first comment\r\n - block in each listfile. Use this to preserve formatting of\r\n - your copyright/license statements.\r\n first_comment_is_literal: false\r\n _help_literal_comment_pattern:\r\n - If comment markup is enabled, don't reflow any comment block\r\n - which matches this (regex) pattern. Default is `None`\r\n - (disabled).\r\n literal_comment_pattern: null\r\n _help_fence_pattern:\r\n - Regular expression to match preformat fences in comments\r\n - default= ``r'^\\s*([`~]{3}[`~]*)(.*)$'``\r\n fence_pattern: ^\\s*([`~]{3}[`~]*)(.*)$\r\n _help_ruler_pattern:\r\n - Regular expression to match rulers in comments default=\r\n - '``r''^\\s*[^\\w\\s]{3}.*[^\\w\\s]{3}$''``'\r\n ruler_pattern: ^\\s*[^\\w\\s]{3}.*[^\\w\\s]{3}$\r\n _help_explicit_trailing_pattern:\r\n - If a comment line matches starts with this pattern then it\r\n - is explicitly a trailing comment for the preceeding\r\n - argument. Default is '#<'\r\n explicit_trailing_pattern: '#<'\r\n _help_hashruler_min_length:\r\n - If a comment line starts with at least this many consecutive\r\n - hash characters, then don't lstrip() them off. This allows\r\n - for lazy hash rulers where the first hash char is not\r\n - separated by space\r\n hashruler_min_length: 10\r\n _help_canonicalize_hashrulers:\r\n - If true, then insert a space between the first hash char and\r\n - remaining hash chars in a hash ruler, and normalize its\r\n - length to fill the column\r\n canonicalize_hashrulers: true\r\n _help_enable_markup:\r\n - enable comment markup parsing and reflow\r\n enable_markup: false\r\n_help_lint: Options affecting the linter\r\nlint:\r\n _help_disabled_codes:\r\n - a list of lint codes to disable\r\n disabled_codes: []\r\n _help_function_pattern:\r\n - regular expression pattern describing valid function names\r\n function_pattern: '[0-9a-z_]+'\r\n _help_macro_pattern:\r\n - regular expression pattern describing valid macro names\r\n macro_pattern: '[0-9A-Z_]+'\r\n _help_global_var_pattern:\r\n - regular expression pattern describing valid names for\r\n - variables with global (cache) scope\r\n global_var_pattern: '[A-Z][0-9A-Z_]+'\r\n _help_internal_var_pattern:\r\n - regular expression pattern describing valid names for\r\n - variables with global scope (but internal semantic)\r\n internal_var_pattern: _[A-Z][0-9A-Z_]+\r\n _help_local_var_pattern:\r\n - regular expression pattern describing valid names for\r\n - variables with local scope\r\n local_var_pattern: '[a-z][a-z0-9_]+'\r\n _help_private_var_pattern:\r\n - regular expression pattern describing valid names for\r\n - privatedirectory variables\r\n private_var_pattern: _[0-9a-z_]+\r\n _help_public_var_pattern:\r\n - regular expression pattern describing valid names for public\r\n - directory variables\r\n public_var_pattern: '[A-Z][0-9A-Z_]+'\r\n _help_argument_var_pattern:\r\n - regular expression pattern describing valid names for\r\n - function/macro arguments and loop variables.\r\n argument_var_pattern: '[a-z][a-z0-9_]+'\r\n _help_keyword_pattern:\r\n - regular expression pattern describing valid names for\r\n - keywords used in functions or macros\r\n keyword_pattern: '[A-Z][0-9A-Z_]+'\r\n _help_max_conditionals_custom_parser:\r\n - In the heuristic for C0201, how many conditionals to match\r\n - within a loop in before considering the loop a parser.\r\n max_conditionals_custom_parser: 2\r\n _help_min_statement_spacing:\r\n - Require at least this many newlines between statements\r\n min_statement_spacing: 1\r\n _help_max_statement_spacing:\r\n - Require no more than this many newlines between statements\r\n max_statement_spacing: 2\r\n max_returns: 6\r\n max_branches: 12\r\n max_arguments: 5\r\n max_localvars: 15\r\n max_statements: 50\r\n_help_encode: Options affecting file encoding\r\nencode:\r\n _help_emit_byteorder_mark:\r\n - If true, emit the unicode byte-order mark (BOM) at the start\r\n - of the file\r\n emit_byteorder_mark: false\r\n _help_input_encoding:\r\n - Specify the encoding of the input file. Defaults to utf-8\r\n input_encoding: utf-8\r\n _help_output_encoding:\r\n - Specify the encoding of the output file. Defaults to utf-8.\r\n - Note that cmake only claims to support utf-8 so be careful\r\n - when using anything else\r\n output_encoding: utf-8\r\n_help_misc: Miscellaneous configurations options.\r\nmisc:\r\n _help_per_command:\r\n - A dictionary containing any per-command configuration\r\n - overrides. Currently only `command_case` is supported.\r\n per_command: {}" }, { "path": ".conan/recipes/boringssl/conanfile.py", "content": "from conan import ConanFile\nfrom conan.tools.files import get\nfrom conan.tools.cmake import CMake, CMakeToolchain, cmake_layout\n\n\nclass BoringSSLConan(ConanFile):\n name = \"openssl\"\n version = \"boringssl\"\n\n settings = \"os\", \"arch\", \"compiler\", \"build_type\"\n options = {\"shared\": [True, False], \"fPIC\": [True, False]}\n default_options = {\"shared\": False, \"fPIC\": True}\n\n def config_options(self):\n if self.settings.os == \"Windows\":\n del self.options.fPIC\n\n def layout(self):\n cmake_layout(self)\n\n def source(self):\n url = \"https://github.com/batchar2/boringssl/archive/refs/heads/working-russia-tls-handshake.tar.gz\"\n get(self, url, strip_root=True)\n\n def generate(self):\n tc = CMakeToolchain(self)\n tc.variables[\"BUILD_TESTING\"] = False\n tc.variables[\"ENABLE_EXPRESSION_TESTS\"] = False\n\n # Правильная настройка для iOS\n if self.settings.os == \"iOS\":\n tc.variables[\"CMAKE_SYSTEM_NAME\"] = \"iOS\"\n tc.variables[\"CMAKE_OSX_DEPLOYMENT_TARGET\"] = str(self.settings.os.version)\n tc.variables[\"CMAKE_OSX_ARCHITECTURES\"] = self.settings.arch\n tc.variables[\"CMAKE_MACOSX_BUNDLE\"] = False\n if \"simulator\" in str(self.settings.os.sdk).lower():\n tc.variables[\"CMAKE_OSX_SYSROOT\"] = \"iphonesimulator\"\n else:\n tc.variables[\"CMAKE_OSX_SYSROOT\"] = \"iphoneos\"\n tc.variables[\"CMAKE_XCODE_ATTRIBUTE_CODE_SIGNING_REQUIRED\"] = \"NO\"\n tc.variables[\"CMAKE_XCODE_ATTRIBUTE_CODE_SIGNING_ALLOWED\"] = \"NO\"\n tc.variables[\"CMAKE_XCODE_ATTRIBUTE_ENABLE_BITCODE\"] = \"YES\"\n tc.variables[\"CMAKE_XCODE_ATTRIBUTE_ONLY_ACTIVE_ARCH\"] = \"NO\"\n\n tc.generate()\n\n def build(self):\n cmake = CMake(self)\n cmake.configure()\n cmake.build()\n\n def package(self):\n cmake = CMake(self)\n cmake.install()\n\n def package_info(self):\n self.cpp_info.components[\"ssl\"].libs = [\"ssl\"]\n self.cpp_info.components[\"crypto\"].libs = [\"crypto\"]\n\n # include dir\n self.cpp_info.includedirs = [\"include\"]\n self.cpp_info.components[\"ssl\"].includedirs = [\"include\"]\n self.cpp_info.components[\"crypto\"].includedirs = [\"include\"]\n\n # for CMake find_package(OpenSSL)\n self.cpp_info.set_property(\"cmake_file_name\", \"OpenSSL\")\n self.cpp_info.components[\"ssl\"].set_property(\"cmake_target_name\", \"OpenSSL::SSL\")\n self.cpp_info.components[\"crypto\"].set_property(\"cmake_target_name\", \"OpenSSL::Crypto\")\n\n if self.settings.os == \"iOS\":\n self.cpp_info.frameworks = [\"Security\", \"Foundation\", \"CoreFoundation\"]\n self.cpp_info.system_libs = [\"c++\"]\n" }, { "path": ".dockerignore", "content": ".cache\n.vscode\n.vsconan\n.git/\nREADME.md\nLICENSE\nCMakeUserPresets.json\nCI/\ntmp/\nkeys/\n" }, { "path": ".github/ISSUE_TEMPLATE/bug_report.md", "content": "---\nname: Bug report\nabout: Create a report to help us improve\ntitle: ''\nlabels: ''\nassignees: ''\n\n---\n\n**Describe the bug**\nA clear and concise description of what the bug is.\n\n**To Reproduce**\nSteps to reproduce the behavior:\n1. Go to '...'\n2. Click on '....'\n3. Scroll down to '....'\n4. See error\n\n**Expected behavior**\nA clear and concise description of what you expected to happen.\n\n**Screenshots**\nIf applicable, add screenshots to help explain your problem.\n\n**Desktop (please complete the following information):**\n - OS: [e.g. iOS]\n - Browser [e.g. chrome, safari]\n - Version [e.g. 22]\n\n**Smartphone (please complete the following information):**\n - Device: [e.g. iPhone6]\n - OS: [e.g. iOS8.1]\n - Browser [e.g. stock browser, safari]\n - Version [e.g. 22]\n\n**Additional context**\nAdd any other context about the problem here.\n" }, { "path": ".github/ISSUE_TEMPLATE/custom.md", "content": "---\nname: Custom issue template\nabout: Describe this issue template's purpose here.\ntitle: ''\nlabels: ''\nassignees: ''\n\n---\n\n\n" }, { "path": ".github/ISSUE_TEMPLATE/feature_request.md", "content": "---\nname: Feature request\nabout: Suggest an idea for this project\ntitle: ''\nlabels: ''\nassignees: ''\n\n---\n\n**Is your feature request related to a problem? Please describe.**\nA clear and concise description of what the problem is. Ex. I'm always frustrated when [...]\n\n**Describe the solution you'd like**\nA clear and concise description of what you want to happen.\n\n**Describe alternatives you've considered**\nA clear and concise description of any alternative solutions or features you've considered.\n\n**Additional context**\nAdd any other context or screenshots about the feature request here.\n" }, { "path": ".github/workflows/main.yml", "content": "name: Build and Test\n\non:\n push:\n branches:\n - '**'\n tags:\n - '*'\n release:\n types: [ published ]\nenv:\n DOCKER_REGISTRY: fptnvpn\n IMAGE_NAME: fptn-vpn-server\njobs:\n build_ubuntu_x86_64:\n runs-on: Ubuntu_x86_64\n steps:\n - name: Checkout code\n uses: actions/checkout@v3\n with:\n submodules: true\n - name: Set env\n if: github.event_name == 'release'\n run: echo \"RELEASE_VERSION=${GITHUB_REF#refs/*/}\" >> $GITHUB_ENV\n - name: Print Release Version\n if: github.event_name == 'release'\n run: |\n echo \"Release Version: $RELEASE_VERSION\"\n - name: Update FPTN_VERSION in conanfile.py\n if: github.event_name == 'release'\n run: |\n sed -i \"s/^FPTN_VERSION = \\\".*\\\"/FPTN_VERSION = \\\"$RELEASE_VERSION\\\"/\" conanfile.py\n - name: Install dependencies\n run: |\n conan install . --output-folder=build --build=missing -o with_gui_client=True --settings build_type=Release -s compiler.cppstd=17\n - name: Run cpplint\n run: |\n python3 cpplint.py --recursive --filter=-build/c++17,-whitespace/newline,-readability/braces --counting=total ./src/ ./tests/\n - name: Run cppcheck\n run: |\n cppcheck --error-exitcode=1 --enable=all --check-level=exhaustive --language=c++ --suppress=unusedFunction --inline-suppr --suppress=missingIncludeSystem --suppress=unknownMacro --suppress=unmatchedSuppression -I ./src/fptn-client/ -I ./src/fptn-server/ -I ./src/fptn-passwd/ -I ./src/fptn-client-protocol-lib -I ./src/ ./src/ ./tests/\n - name: Run cmake-format\n run: |\n cmake-format -i CMakeLists.txt src/fptn-client/CMakeLists.txt src/fptn-passwd/CMakeLists.txt src/fptn-server/CMakeLists.txt src/fptn-protocol-lib/CMakeLists.txt depends/cmake/FetchBase64.cmake depends/cmake/FetchLibTunTap.cmake depends/cmake/FetchWintun.cmake\n - name: Build\n run: |\n cd build\n cmake .. -DCMAKE_TOOLCHAIN_FILE=conan_toolchain.cmake -DCMAKE_BUILD_TYPE=Release\n cmake --build .\n - name: Test\n run: |\n cd build\n ctest -C Release\n - name: Build Debian package\n run: |\n cd build\n cmake --build . --target build-deb\n cmake --build . --target build-deb-gui\n - name: Upload deb RELEASE\n if: github.event_name == 'release'\n uses: AButler/upload-release-assets@v3.0\n with:\n files: \"fptn-*.deb\"\n repo-token: ${{ secrets.CI_TOKEN }}\n - name: Upload Build Artifacts\n uses: actions/upload-artifact@v4\n with:\n name: Ubuntu86_64Artifacts\n path: |\n *.deb\n if-no-files-found: warn\n - name: Build and Push Docker Image (amd64)\n if: github.event_name == 'release'\n run: |\n echo \"${{ secrets.DOCKER_PASSWORD }}\" | docker login -u \"${{ secrets.DOCKER_USERNAME }}\" --password-stdin\n docker buildx create --name amd64-builder --platform linux/amd64 --use || true\n docker buildx build \\\n --platform linux/amd64 \\\n -f ./deploy/docker/Dockerfile \\\n -t \"$DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION-amd64\" \\\n --build-arg FPTN_SERVER_PATH=build/src/fptn-server/fptn-server \\\n --build-arg FPTN_PASSWD_PATH=build/src/fptn-passwd/fptn-passwd \\\n --push \\\n --provenance=false \\\n --sbom=false .\n\n build_ubuntu_arm64:\n runs-on: Ubuntu_ARM64_Desktop\n steps:\n - name: Checkout code\n uses: actions/checkout@v3\n with:\n submodules: true\n - name: Set env\n if: github.event_name == 'release'\n run: echo \"RELEASE_VERSION=${GITHUB_REF#refs/*/}\" >> $GITHUB_ENV\n - name: Print Release Version\n if: github.event_name == 'release'\n run: |\n echo \"Release Version: $RELEASE_VERSION\"\n - name: Update FPTN_VERSION in conanfile.py\n if: github.event_name == 'release'\n run: |\n sed -i \"s/^FPTN_VERSION = \\\".*\\\"/FPTN_VERSION = \\\"$RELEASE_VERSION\\\"/\" conanfile.py\n - name: Install dependencies\n run: |\n conan install . --output-folder=build --build=missing -o with_gui_client=True --settings build_type=Release -s compiler.cppstd=17\n - name: Run cpplint\n run: |\n python3 cpplint.py --recursive --filter=-build/c++17,-whitespace/newline,-readability/braces --counting=total ./src/ ./tests/\n - name: Run cppcheck\n run: |\n cppcheck --error-exitcode=1 --enable=all --check-level=exhaustive --language=c++ --suppress=unusedFunction --inline-suppr --suppress=missingIncludeSystem --suppress=unmatchedSuppression -I ./src/fptn-client/ -I ./src/fptn-server/ -I ./src/fptn-passwd/ -I ./src/fptn-client-protocol-lib -I ./src/ ./src/ ./tests/\n - name: Run cmake-format\n run: |\n cmake-format -i CMakeLists.txt src/fptn-client/CMakeLists.txt src/fptn-passwd/CMakeLists.txt src/fptn-server/CMakeLists.txt src/fptn-protocol-lib/CMakeLists.txt depends/cmake/FetchBase64.cmake depends/cmake/FetchLibTunTap.cmake depends/cmake/FetchWintun.cmake\n - name: Build\n run: |\n cd build\n cmake .. -DCMAKE_TOOLCHAIN_FILE=conan_toolchain.cmake -DCMAKE_BUILD_TYPE=Release\n cmake --build .\n - name: Test\n run: |\n cd build\n ctest -C Release\n - name: Build Debian package\n run: |\n cd build\n cmake --build . --target build-deb\n cmake --build . --target build-deb-gui\n - name: Upload deb\n if: github.event_name == 'release'\n uses: AButler/upload-release-assets@v3.0\n with:\n files: \"fptn-*.deb\"\n repo-token: ${{ secrets.CI_TOKEN }}\n - name: Upload Build Artifacts\n uses: actions/upload-artifact@v4\n with:\n name: UbuntuArmArtifacts\n path: |\n *.deb\n if-no-files-found: warn\n - name: Build and Push Docker Image (arm64)\n if: github.event_name == 'release'\n run: |\n echo \"${{ secrets.DOCKER_PASSWORD }}\" | docker login -u \"${{ secrets.DOCKER_USERNAME }}\" --password-stdin\n docker buildx create --name arm64-builder --platform linux/arm64 --use || true\n docker buildx build \\\n --platform linux/arm64 \\\n -f ./deploy/docker/Dockerfile \\\n -t \"$DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION-arm64\" \\\n --build-arg FPTN_SERVER_PATH=build/src/fptn-server/fptn-server \\\n --build-arg FPTN_PASSWD_PATH=build/src/fptn-passwd/fptn-passwd \\\n --push \\\n --provenance=false \\\n --sbom=false .\n\n build_macos_arm64:\n runs-on: MacOS_ARM64\n steps:\n - name: Checkout code\n uses: actions/checkout@v3\n with:\n submodules: true\n - name: Set env\n if: github.event_name == 'release'\n run: echo \"RELEASE_VERSION=${GITHUB_REF#refs/*/}\" >> $GITHUB_ENV\n - name: Print Release Version\n if: github.event_name == 'release'\n run: |\n echo \"Release Version: $RELEASE_VERSION\"\n - name: Update FPTN_VERSION in conanfile.py\n if: github.event_name == 'release'\n run: |\n sed -i '' \"s/^FPTN_VERSION = \\\".*\\\"/FPTN_VERSION = \\\"$RELEASE_VERSION\\\"/\" conanfile.py\n - name: Install dependencies\n run: |\n conan install . --output-folder=build --build=missing -o with_gui_client=True --settings build_type=Release -s compiler.cppstd=17\n - name: Run cpplint\n run: |\n python3 cpplint.py --recursive --filter=-build/c++17,-whitespace/newline,-readability/braces --counting=total ./src/ ./tests/\n - name: Run cppcheck\n run: |\n cppcheck --error-exitcode=1 --enable=all --check-level=exhaustive --language=c++ --suppress=unusedFunction --inline-suppr --suppress=missingIncludeSystem --suppress=unknownMacro --suppress=unmatchedSuppression -I ./src/fptn-client/ -I ./src/fptn-server/ -I ./src/fptn-passwd/ -I ./src/fptn-client-protocol-lib -I ./src/ ./src/ ./tests/\n - name: Run cmake-format\n run: |\n cmake-format -i CMakeLists.txt src/fptn-client/CMakeLists.txt src/fptn-passwd/CMakeLists.txt src/fptn-server/CMakeLists.txt src/fptn-protocol-lib/CMakeLists.txt depends/cmake/FetchBase64.cmake depends/cmake/FetchLibTunTap.cmake depends/cmake/FetchWintun.cmake\n - name: Build\n run: |\n cd build\n cmake .. -DCMAKE_TOOLCHAIN_FILE=conan_toolchain.cmake -DCMAKE_BUILD_TYPE=Release\n cmake --build .\n - name: Test\n run: |\n cd build\n ctest -C Release\n - name: Build MacOS pkg\n run: |\n cd build\n cmake --build . --target build-pkg\n - name: Upload macOS pkg\n if: github.event_name == 'release'\n uses: AButler/upload-release-assets@v3.0\n with:\n files: \"*.pkg\"\n repo-token: ${{ secrets.CI_TOKEN }}\n - name: Upload Build Artifacts\n uses: actions/upload-artifact@v4\n with:\n name: MacOsAppleSiliconArtifacts\n path: |\n *.pkg\n if-no-files-found: warn\n\n build_windows_AMD64:\n runs-on: Windows11_AMD64\n steps:\n - name: Checkout code\n uses: actions/checkout@v3\n with:\n submodules: true\n - name: Set env\n shell: powershell\n if: github.event_name == 'release'\n run: |\n $releaseVersion = \"${{ github.ref_name }}\"\n echo \"RELEASE_VERSION=$releaseVersion\" >> $env:GITHUB_ENV\n - name: Print Release Version\n shell: powershell\n if: github.event_name == 'release'\n run: |\n Write-Output \"Release Version: $env:RELEASE_VERSION\"\n - name: Update FPTN_VERSION in conanfile.py\n shell: powershell\n if: github.event_name == 'release'\n run: |\n python.exe deploy\\windows\\conan-replace-version.py conanfile.py \"$env:RELEASE_VERSION\"\n - name: Install dependencies\n shell: powershell\n run: |\n conan install . --output-folder=build --build=missing -o with_gui_client=True --settings build_type=Release -s compiler.cppstd=17\n - name: Run cpplint\n run: |\n python cpplint.py --recursive --filter=-build/c++17,-whitespace/newline,-readability/braces --counting=total ./src/ ./tests/\n - name: Run cppcheck\n shell: powershell\n run: |\n cppcheck --error-exitcode=1 --enable=all --check-level=exhaustive --language=c++ --suppress=unusedFunction --inline-suppr --suppress=missingIncludeSystem --suppress=unknownMacro --suppress=unmatchedSuppression -I ./src/fptn-client/ -I ./src/fptn-server/ -I ./src/fptn-passwd/ -I ./src/fptn-client-protocol-lib -I ./src/ ./src/ ./tests/\n - name: Run cmake-format\n shell: powershell\n run: |\n cmake-format -i CMakeLists.txt src/fptn-client/CMakeLists.txt src/fptn-passwd/CMakeLists.txt src/fptn-server/CMakeLists.txt src/fptn-protocol-lib/CMakeLists.txt depends/cmake/FetchBase64.cmake depends/cmake/FetchLibTunTap.cmake depends/cmake/FetchWintun.cmake\n - name: Build\n shell: powershell\n run: |\n cd build\n cmake .. -G \"Visual Studio 17 2022\" -DCMAKE_TOOLCHAIN_FILE=\"conan_toolchain.cmake\" -DCMAKE_BUILD_TYPE=Release\n cmake --build . --config Release\n - name: Test\n shell: powershell\n run: |\n cd build\n ctest -C Release\n - name: Build Windows installer\n shell: powershell\n run: |\n cd build\n cmake --build . --config Release --target build-installer\n - name: Zip the .exe\n shell: powershell\n run: |\n $exePath = Get-ChildItem -Path \".\" -Filter \"FptnClientInstaller-*-windows-x64_x86.exe\" | Select-Object -First 1\n Compress-Archive -Path $exePath.FullName -DestinationPath \"FptnClientInstaller-$env:RELEASE_VERSION-windows-x64_x86.zip\"\n - name: Upload Windows installer\n if: github.event_name == 'release'\n uses: AButler/upload-release-assets@v3.0\n with:\n files: \"*.zip\"\n repo-token: ${{ secrets.CI_TOKEN }}\n - name: Upload Build Artifacts\n uses: actions/upload-artifact@v4\n with:\n name: WindowsArtifacts\n path: |\n *.zip\n if-no-files-found: warn\n\n create_multiarch_manifest:\n needs: [build_ubuntu_x86_64, build_ubuntu_arm64]\n runs-on: ubuntu-latest\n steps:\n - name: Get release version\n if: github.event_name == 'release'\n run: |\n RELEASE_VERSION=\"${GITHUB_REF#refs/*/}\"\n echo \"RELEASE_VERSION=$RELEASE_VERSION\" >> $GITHUB_ENV\n echo \"Version: $RELEASE_VERSION\"\n\n - name: Login to Docker Hub\n if: github.event_name == 'release'\n run: |\n echo \"${{ secrets.DOCKER_PASSWORD }}\" | docker login -u \"${{ secrets.DOCKER_USERNAME }}\" --password-stdin\n\n - name: Create multi-arch manifests\n if: github.event_name == 'release'\n run: |\n docker pull --quiet $DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION-amd64\n docker pull --quiet $DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION-arm64\n \n docker manifest rm $DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION 2>/dev/null || true\n docker manifest rm $DOCKER_REGISTRY/$IMAGE_NAME:latest 2>/dev/null || true\n \n docker buildx imagetools create \\\n -t $DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION \\\n $DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION-amd64 \\\n $DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION-arm64\n \n docker buildx imagetools create \\\n -t \"$DOCKER_REGISTRY/$IMAGE_NAME\":latest \\\n $DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION-amd64 \\\n $DOCKER_REGISTRY/$IMAGE_NAME:$RELEASE_VERSION-arm64\n" }, { "path": ".gitignore", "content": ".env\n.cache/\n.vsconan/\nTesting/\nconan_provider.cmake\n.conan_provider.cmake\nlogs/\n*.dmg\n*.deb\n*.pkg\n.vs/\n.vscode/\ntmp/\nkeys/\nbuild*/\ncmake-build-*/\n.idea/\nlibhv.*\nmacos-build/\nlinux-build/\nlinux-build22/\nlinux-build24/\nCMakeUserPresets.json\n.env\n\n# Prerequisites\n*.d\n\n# Compiled Object files\n*.slo\n*.lo\n*.o\n*.obj\n\n# Precompiled Headers\n*.gch\n*.pch\n\n# Compiled Dynamic libraries\n*.so\n*.dylib\n*.dll\n\n# Fortran module files\n*.mod\n*.smod\n\n# Compiled Static libraries\n*.lai\n*.la\n*.a\n*.lib\n\n# Executables\n*.exe\n*.out\n*.app\nbuild/\n\n# General\n.DS_Store\n.AppleDouble\n.LSOverride\n\n# Icon must end with two \\r\nIcon\n\n# Thumbnails\n._*\n\n# Files that might appear in the root of a volume\n.DocumentRevisions-V100\n.fseventsd\n.Spotlight-V100\n.TemporaryItems\n.Trashes\n.VolumeIcon.icns\n.com.apple.timemachine.donotpresent\n\n# Directories potentially created on remote AFP share\n.AppleDB\n.AppleDesktop\nNetwork Trash Folder\nTemporary Items\n.apdisk\n" }, { "path": "CLAUDE.md", "content": "# CLAUDE.md\n\nBehavioral guidelines to reduce common LLM coding mistakes. Merge with project-specific instructions as needed.\n\n**Tradeoff:** These guidelines bias toward caution over speed. For trivial tasks, use judgment.\n\n## 1. Think Before Coding\n\n**Don't assume. Don't hide confusion. Surface tradeoffs.**\n\nBefore implementing:\n- State your assumptions explicitly. If uncertain, ask.\n- If multiple interpretations exist, present them - don't pick silently.\n- If a simpler approach exists, say so. Push back when warranted.\n- If something is unclear, stop. Name what's confusing. Ask.\n\n## 2. Simplicity First\n\n**Minimum code that solves the problem. Nothing speculative.**\n\n- No features beyond what was asked.\n- No abstractions for single-use code.\n- No \"flexibility\" or \"configurability\" that wasn't requested.\n- No error handling for impossible scenarios.\n- If you write 200 lines and it could be 50, rewrite it.\n\nAsk yourself: \"Would a senior engineer say this is overcomplicated?\" If yes, simplify.\n\n## 3. Surgical Changes\n\n**Touch only what you must. Clean up only your own mess.**\n\nWhen editing existing code:\n- Don't \"improve\" adjacent code, comments, or formatting.\n- Don't refactor things that aren't broken.\n- Match existing style, even if you'd do it differently.\n- If you notice unrelated dead code, mention it - don't delete it.\n\nWhen your changes create orphans:\n- Remove imports/variables/functions that YOUR changes made unused.\n- Don't remove pre-existing dead code unless asked.\n\nThe test: Every changed line should trace directly to the user's request.\n\n## 4. Goal-Driven Execution\n\n**Define success criteria. Loop until verified.**\n\nTransform tasks into verifiable goals:\n- \"Add validation\" → \"Write tests for invalid inputs, then make them pass\"\n- \"Fix the bug\" → \"Write a test that reproduces it, then make it pass\"\n- \"Refactor X\" → \"Ensure tests pass before and after\"\n\nFor multi-step tasks, state a brief plan:\n```\n1. [Step] → verify: [check]\n2. [Step] → verify: [check]\n3. [Step] → verify: [check]\n```\n\nStrong success criteria let you loop independently. Weak criteria (\"make it work\") require constant clarification.\n\n---\n\n**These guidelines are working if:** fewer unnecessary changes in diffs, fewer rewrites due to overcomplication, and clarifying questions come before implementation rather than after mistakes." }, { "path": "CMakeLists.txt", "content": "cmake_minimum_required(VERSION 3.16)\nproject(fptn VERSION \"${FPTN_VERSION}\" LANGUAGES CXX)\n\n# project settings\nset(CMAKE_INCLUDE_CURRENT_DIR ON)\nset(CMAKE_CXX_STANDARD 20)\nset(CMAKE_CXX_STANDARD_REQUIRED ON)\n\nif (APPLE)\n set(CMAKE_CXX_STANDARD 20)\nelse ()\n add_definitions(-DBOOST_ASIO_HAS_CO_AWAIT)\n add_definitions(-DBOOST_ASIO_HAS_CO_SPAWN)\n add_definitions(-DBOOST_ASIO_HAS_COROUTINES)\n set(CMAKE_INCLUDE_CURRENT_DIR ON)\n set(CMAKE_CXX_STANDARD 20)\n set(CMAKE_CXX_STANDARD_REQUIRED ON)\n if (CMAKE_CXX_COMPILER_ID STREQUAL \"Clang\")\n set(CMAKE_CXX_FLAGS \"${CMAKE_CXX_FLAGS} -Wno-unused-command-line-argument\")\n endif ()\nendif ()\n\nif(MSVC)\n add_compile_options(\"/bigobj\")\n add_compile_options(\"/std:c++20\")\n add_compile_options(\"/Zc:inline-\")\n add_compile_options(\"/permissive-\")\n add_compile_options(\"/Zc:__cplusplus\")\n add_compile_options(\"/d2SSAOptimizer-\")\n add_compile_definitions(_WIN32_WINNT=0x0A00) # Windows 10\nendif()\n\n# Global project definitions\n\nif (FPTN_BUILD_ONLY_FPTN_LIB)\n # build fptnlib without pcappp\n set(FPTN_IP_ADDRESS_WITHOUT_PCAP ON)\n add_compile_definitions(FPTN_IP_ADDRESS_WITHOUT_PCAP)\nelse()\n set(FPTN_WITH_LIBIDN2 ON)\n add_compile_definitions(FPTN_WITH_LIBIDN2)\nendif()\n\nadd_compile_definitions(FPTN_VERSION=\\\"${FPTN_VERSION}\\\")\nadd_compile_definitions(FPTN_MTU_SIZE=1500)\nadd_compile_definitions(FPTN_DEFAULT_SNI=\\\"rutube.ru\\\")\nadd_compile_definitions(FPTN_IP_PACKET_MAX_SIZE=1500)\nadd_compile_definitions(FPTN_ENABLE_PACKET_PADDING=1)\nadd_compile_definitions(FPTN_PROTOBUF_PROTOCOL_VERSION=0x01)\n# client\nadd_compile_definitions(FPTN_CLIENT_DEFAULT_ADDRESS_IP6=\\\"fd00::1\\\")\nadd_compile_definitions(FPTN_CLIENT_DEFAULT_ADDRESS_IP4=\\\"10.0.0.1\\\")\nadd_compile_definitions(FPTN_CLIENT_DEFAULT_EXCLUDE_NETWORKS=\\\"10.0.0.0/8,192.168.0.0/16\\\")\nadd_compile_definitions(FPTN_CLIENT_DEFAULT_SPLIT_TUNNEL_DOMAINS=\\\"domain:ru,domain:su,domain:рф,domain:vk.com,domain:yandex.com,domain:userapi.com,domain:yandex.net,domain:clstorage.net\\\")\nadd_compile_definitions(FPTN_CLIENT_DEFAULT_BLACKLIST_DOMAINS=\\\"domain:solovev-live.ru,domain:ria.ru,domain:tass.ru,domain:1tv.ru,domain:ntv.ru,domain:rt.com,domain:lenta.ru\\\")\n# server\nadd_compile_definitions(FPTN_SERVER_DEFAULT_ADDRESS_IP6=\\\"fc00:1::1\\\")\nadd_compile_definitions(FPTN_SERVER_DEFAULT_NET_ADDRESS_IP6=\\\"fc00:1::\\\")\nadd_compile_definitions(FPTN_SERVER_DEFAULT_ADDRESS_IP4=\\\"172.20.0.1\\\")\nadd_compile_definitions(FPTN_SERVER_DEFAULT_NET_ADDRESS_IP4=\\\"172.20.0.0\\\")\n# github\nadd_compile_definitions(FPTN_GITHUB_USERNAME=\\\"fptn-project\\\")\nadd_compile_definitions(FPTN_GITHUB_REPOSITORY=\\\"fptn\\\")\nadd_compile_definitions(FPTN_GITHUB_PAGE_LINK=\\\"https://storage.googleapis.com/fptn.org/index.html\\\")\n# Boost\nadd_compile_definitions(BOOST_MPL_CFG_NO_PREPROCESSED_HEADERS)\nadd_compile_definitions(BOOST_IOSTREAMS_USE_BZIP2)\nadd_compile_definitions(BOOST_IOSTREAMS_USE_ZLIB)\n# Fix boringssl build for windows\nadd_definitions(-DNOMINMAX)\nadd_definitions(-DWIN32_LEAN_AND_MEAN)\n# Minimize Windows headers and avoid NOMINMAX conflict (needed for BoringSSL)\nadd_definitions(-DNOMINMAX)\nadd_definitions(-DWIN32_LEAN_AND_MEAN)\n\nset(FPTN_SERVER_PATH \"${CMAKE_CURRENT_SOURCE_DIR}/src/fptn-server\")\n\n# --- depends ---\ninclude(depends/cmake/FetchBase64.cmake)\ninclude(depends/cmake/NtpClient.cmake)\ninclude(depends/cmake/CamouflageTLS.cmake)\n\nif (NOT FPTN_BUILD_ONLY_FPTN_LIB)\n if (APPLE OR UNIX)\n include(depends/cmake/FetchLibTunTap.cmake)\n elseif (WIN32)\n include(depends/cmake/FetchWintun.cmake)\n else ()\n message(FATAL_ERROR \"Unsupported platform\")\n endif ()\nendif ()\n\n# --- project ---\nset(CMAKE_COMPILE_WARNING_AS_ERROR ON) # check all warnings!\nif (MSVC)\n set(CMAKE_WINDOWS_EXPORT_ALL_SYMBOLS TRUE)\n add_compile_options(/W4 /WX)\nelse ()\n add_compile_options(-Wall -Werror -pedantic)\nendif ()\n\n# --- clang-tidy setup ---\nset(CMAKE_EXPORT_COMPILE_COMMANDS ON)\n# search clang-tidy\nfind_program(\n CLANG_TIDY_EXE\n NAMES clang-tidy-22\n clang-tidy-21\n clang-tidy-20\n clang-tidy-19\n clang-tidy-18\n clang-tidy-17\n clang-tidy-16\n clang-tidy-15\n clang-tidy)\nif (CLANG_TIDY_EXE)\n execute_process(\n COMMAND ${CLANG_TIDY_EXE} --version\n OUTPUT_VARIABLE CLANG_TIDY_VERSION_STRING\n OUTPUT_STRIP_TRAILING_WHITESPACE)\n message(STATUS \"[CLANG-TIDY] clang-tidy version: ${CLANG_TIDY_VERSION_STRING}\")\n if (CLANG_TIDY_VERSION_STRING MATCHES \"version ([0-9]+)\")\n set(CLANG_TIDY_VERSION ${CMAKE_MATCH_1})\n if (CLANG_TIDY_VERSION GREATER_EQUAL 20)\n message(STATUS \"[CLANG-TIDY] clang-tidy ${CLANG_TIDY_VERSION} accepted, enabling\")\n set(CMAKE_CXX_CLANG_TIDY \"${CLANG_TIDY_EXE};-extra-arg=-std=c++20\")\n else ()\n message(WARNING \"[CLANG-TIDY] clang-tidy version ${CLANG_TIDY_VERSION} is too old (<15), disabling\")\n endif ()\n else ()\n message(WARNING \"[CLANG-TIDY] Could not parse clang-tidy version, disabling\")\n endif ()\nelse ()\n message(WARNING \"[CLANG-TIDY] clang-tidy not found, skipping clang-tidy checks.\")\nendif ()\n\n# --- include ---\ninclude_directories(src/)\n\n# --- build ---\nadd_subdirectory(src/fptn-protocol-lib)\nif (NOT FPTN_BUILD_ONLY_FPTN_LIB)\n if (APPLE OR UNIX)\n add_subdirectory(src/fptn-server)\n add_subdirectory(src/fptn-passwd)\n endif ()\n add_subdirectory(src/fptn-client)\n # --- install ---\n install(TARGETS fptn-client-cli DESTINATION bin)\n if (APPLE OR UNIX)\n install(TARGETS fptn-server DESTINATION bin)\n install(TARGETS fptn-passwd DESTINATION bin)\n endif ()\n # --- packaging ---\n if (CMAKE_SYSTEM_NAME STREQUAL \"Linux\") # deb\n add_custom_target(\n build-deb\n WORKING_DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR}\n COMMAND\n bash -c\n \"${CMAKE_CURRENT_SOURCE_DIR}/deploy/linux/deb/create-client-cli-deb-package.sh ${CMAKE_BINARY_DIR}/src/fptn-client/fptn-client-cli ${FPTN_VERSION}; ${CMAKE_CURRENT_SOURCE_DIR}/deploy/linux/deb/create-server-deb-package.sh ${CMAKE_BINARY_DIR}/src/fptn-server/fptn-server ${CMAKE_BINARY_DIR}/src/fptn-passwd/fptn-passwd ${FPTN_VERSION}\"\n COMMENT \"Building .deb package\"\n VERBATIM)\n if (\"${FPTN_BUILD_WITH_GUI_CLIENT}\")\n add_custom_target(\n build-deb-gui\n WORKING_DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR}\n COMMAND\n bash -c\n \"${CMAKE_CURRENT_SOURCE_DIR}/deploy/linux/deb/create-client-gui-deb-package.sh ${CMAKE_BINARY_DIR}/src/fptn-client/fptn-client-gui ${CMAKE_CURRENT_SOURCE_DIR}/deploy/linux/deb/assets/FptnClient512x512.png ${FPTN_VERSION} ${CMAKE_CURRENT_SOURCE_DIR}/deploy/sni\"\n COMMENT \"Building .deb package\"\n VERBATIM)\n endif ()\n elseif (CMAKE_SYSTEM_NAME STREQUAL \"Darwin\") # MacOS\n if (\"${FPTN_BUILD_WITH_GUI_CLIENT}\")\n add_custom_target(\n build-pkg\n WORKING_DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR}\n COMMAND\n bash -c\n \"python3 \\\"${CMAKE_CURRENT_SOURCE_DIR}/deploy/macos/create-pkg.py\\\" --fptn-client-cli=\\\"${CMAKE_BINARY_DIR}/src/fptn-client/fptn-client-cli\\\" --fptn-client-gui=\\\"${CMAKE_BINARY_DIR}/src/fptn-client/fptn-client-gui\\\" --version=\\\"${FPTN_VERSION}\\\"\"\n COMMENT \"Building .dmg package\"\n VERBATIM)\n endif ()\n elseif (WIN32)\n if (\"${FPTN_BUILD_WITH_GUI_CLIENT}\")\n add_custom_target(\n build-installer\n WORKING_DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR}\n COMMAND ${CMAKE_COMMAND} -E echo \"Building installer for Windows...\"\n COMMAND\n python ${CMAKE_CURRENT_SOURCE_DIR}/deploy/windows/create-installer.py --wintun-dll=${CMAKE_BINARY_DIR}/wintun/wintun.dll\n --fptn-client=${CMAKE_BINARY_DIR}/src/fptn-client/Release/fptn-client-gui.exe\n --fptn-client-cli=${CMAKE_BINARY_DIR}/src/fptn-client/Release/fptn-client-cli.exe --output-folder=${CMAKE_CURRENT_SOURCE_DIR}\n --version=${FPTN_VERSION}\n COMMENT \"Building .exe installer\"\n VERBATIM)\n endif ()\n endif ()\n # --- tests ---\n enable_testing()\n add_subdirectory(tests)\nendif ()\n" }, { "path": "LICENSE", "content": "MIT License\n\nCopyright (c) 2024 Stas Skokov\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n" }, { "path": "README.md", "content": "
\r\n\r\n

FPTN

\r\n
Custom VPN technology
\r\n\r\n[\\[English\\]](README.md)\r\n•\r\n[\\[Русский\\]](README_RU.md)\r\n\r\n\r\n[![Ubuntu](https://img.shields.io/badge/Ubuntu-E95420?style=for-the-badge&logo=ubuntu&logoColor=white)](https://github.com/batchar2/fptn/releases)\r\n[![Mac OS](https://img.shields.io/badge/mac%20os-000000?style=for-the-badge&logo=macos&logoColor=F0F0F0)](https://github.com/batchar2/fptn/releases)\r\n[![Windows](https://img.shields.io/badge/Windows-0078D6?style=for-the-badge&logo=windows&logoColor=white)](https://github.com/batchar2/fptn/releases)\r\n[![Android](https://img.shields.io/badge/Android-3DDC84?style=for-the-badge&logo=android&logoColor=white)](https://github.com/batchar2/fptn/releases)\r\n[![Build and Test](https://img.shields.io/github/actions/workflow/status/batchar2/fptn/main.yml?style=for-the-badge&logo=github-actions&logoColor=white&label=Build&labelColor=2088FF)](https://github.com/batchar2/fptn/actions/workflows/main.yml)\r\n[![GitHub All Releases](https://img.shields.io/github/downloads/batchar2/fptn/total.svg?style=for-the-badge&logo=github&logoColor=white&label=Downloads&labelColor=181717)](https://github.com/batchar2/fptn/releases)\r\n
\r\n\r\n---\r\n\r\n### Core Features of FPTN\r\n\r\nFPTN is a VPN technology engineered from the ground up to provide secure, robust, and censorship-resistant connections capable of bypassing network filtering and deep packet inspection (DPI).\r\n\r\nProject website: [https://storage.googleapis.com/fptn.org/index.html](https://storage.googleapis.com/fptn.org/index.html)\r\n\r\nKey Technical Features:\r\n\r\n1. **L3 Tunnel (Network Layer)**\r\n - **IP Packet Tunneling:** Encapsulates and transmits raw IP packets (IPv4/IPv6) over a secure tunnel to the VPN server.\r\n - **Split Tunneling:** Provides granular control over routing policies. Users can define rules (based on domains or IP networks) to specify which traffic is routed through the VPN tunnel; all other traffic uses the direct internet connection.\r\n - **Server-side NAT:** Implements Network Address Translation (NAT) on the server. Future roadmap includes support for user grouping into virtual LANs (VLANs) for peer-to-peer communication within the VPN.\r\n\r\n2. **Traffic Obfuscation and Blocking Evasion**\r\n - **Resistance to active Deep Packet Inspection (DPI):** The server can identify FPTN clients during the TLS handshake by analyzing the session_id (which the FPTN client can set using a special time-based method). If the client is not recognized as an FPTN client, the server acts as a transparent proxy and returns legitimate content for the requested domain.\r\n - The VPN connection is masqueraded as regular HTTPS traffic (a mode for short-lived HTTPS connections is also under development).\r\n - Three implemented methods for bypassing blocks:\r\n - **SNI Spoofing:** A fake domain name is set in the TLS ClientHello packet that initiates the connection. Traffic analysis systems observe a legitimate TLS connection, while the traffic is actually routed to the VPN server.\r\n - **Obfuscation:** The traffic is disguised as an already established TLS session, hiding the initial TLS handshake and preventing detection by DPI systems.\r\n - **Reality Mode with SNI Spoofing:** The client initiates a connection to the VPN server using a spoofed Server Name Indication (SNI), receives a genuine TLS handshake response from the actual (spoofed) website, and then continues data exchange with the VPN server within the same connection.\r\n - The desktop client includes an integrated `SNI scanner utility`.\r\n\r\n3. Transport Protocol\r\n - Uses a proprietary transport protocol based on Protocol Buffers (Protobuf) for data exchange between the client and server.\r\n - **Protocol-level padding:** Data packets are padded with random data to randomize traffic patterns and complicate analysis.\r\n - The server provides a **REST API** for client authentication and retrieving specific configuration settings.\r\n\r\n4. **Advanced Functionality**\r\n - Built-in filtering of unwanted traffic (e.g., the BitTorrent protocol).\r\n - Per-user bandwidth and traffic control: The server employs a traffic shaper based on the **Leaky Bucket** algorithm, allowing for granular bandwidth policy configuration.\r\n - Support for a multi-server architecture with a single master server that stores all user data and configuration.\r\n - System monitoring via **Prometheus** and visualization dashboards in **Grafana**.\r\n - Ability for users to connect and manage their service via a **Telegram bot**.\r\n\r\n5. **Cross-Platform Clients**\r\n - A cross-platform core library, **libfptn**, has been developed for use across various operating systems. It implements the FPTN network protocol, connection management, and data transmission mechanisms for the VPN tunnel.\r\n - **Desktop Clients**: Windows, macOS, Linux — a minimalist client focused on ease of use.\r\n - **Mobile Clients**: Android, iOS (under development).\r\n\r\n6. **Simple Token-Based Configuration**\r\n - A **Token** is a specially generated configuration file containing all necessary settings for the system.\r\n - Enables connection to the VPN without manual configuration: the user simply imports the token into the client application to begin using the service.\r\n\r\n---\r\n\r\n### Demonstration\r\n\r\nDownload the FPTN client from the [website](http://batchar2.github.io/fptn/) or [GitHub](https://github.com/batchar2/fptn/releases). After downloading, install and launch the client.\r\n\r\nThe client is a compact application whose icon resides in the system tray.\r\n\r\nSimply click the icon to open the context menu.\r\n\r\n\"Application\"/\r\n\r\nNavigate to the \"Settings\" menu, where you need to add an access token.\r\nObtain a token by contacting our Telegram bot,\r\n\r\n\"Settings\"/\r\n\r\nCopy the token, click the \"Add Token\" button, paste it into the form, and save.\r\n\r\n\"Settings\"/\r\n\r\nAfter this, available servers will appear in the list.\r\n\r\n\"Settings\"/\r\n\r\nEase of use:\r\n\r\n\"Settings\"/\r\n\r\nYou can also easily turn your Raspberry Pi or Orange Pi into a WiFi access point and install the FPTN client on it.\r\nIn this case, all devices connected to this WiFi network will be able to access the internet, bypassing any restrictions.\r\n[Read more here](https://github.com/batchar2/fptn/blob/master/deploy/linux/wifi/README.md)\r\n\r\n\"Settings\"/\r\n\r\n---\r\n\r\n### Installation, Building, and Configuration\r\n\r\n\r\n
\r\n Installing and Configuring the FPTN Server\r\n\r\nSetting up and running your own FPTN server is done via Docker.\r\nThis ensures easy deployment, convenient updates, and environment isolation.\r\nInstructions are available on [DockerHub](https://hub.docker.com/r/fptnvpn/fptn-vpn-server).\r\n\r\nYou can also deploy your own management and monitoring tools:\r\n- **Telegram bot** – issuing tokens to users [sysadmin-tools/telegram-bot/README.md](sysadmin-tools/telegram-bot/README.md).\r\n- **Grafana + Prometheus** – monitoring server and user status [sysadmin-tools/grafana/README.md](sysadmin-tools/grafana/README.md)\r\n\r\n
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n Building the Project from Source\r\n\r\n1. Install required dependencies\r\n- For [Windows](deploy/windows/README.md)\r\n- For [Ubuntu](deploy/linux/deb/README.md)\r\n- For [macOS](deploy/macos/README.md)\r\n\r\n2. Install Conan (version 2.24.0):\r\n\r\n```bash\r\npip install conan==2.24.0\r\n```\r\n\r\n3. Detect and configure the Conan profile:\r\n\r\n```bash\r\nconan profile detect --force\r\n```\r\n\r\n4. Install dependencies, build, and install:\r\n\r\n*(For debugging and development purposes, use Debug instead of Release.)*\r\n\r\n```bash\r\nconan install . --output-folder=build --build=missing -s compiler.cppstd=17 -o with_gui_client=True --settings build_type=Debug\r\n\r\ncd build\r\n\r\n# Linux & macOS only\r\ncmake .. -DCMAKE_TOOLCHAIN_FILE=conan_toolchain.cmake -DCMAKE_BUILD_TYPE=Debug\r\n# Windows only\r\ncmake .. -G \"Visual Studio 17 2022\" -DCMAKE_TOOLCHAIN_FILE=\"conan_toolchain.cmake\" -DCMAKE_BUILD_TYPE=Debug\r\n\r\ncmake --build . --config Debug\r\nctest\r\n```\r\n\r\n5. Building the Installer\r\n\r\n*(For debugging and development purposes, use Debug instead of Release.)*\r\n\r\n- Windows\r\n\r\n ```bash\r\n cmake --build . --config Release --target build-installer\r\n ```\r\n\r\n- Ubuntu\r\n\r\n ```bash\r\n cmake --build . --config Release --target build-deb-gui\r\n ```\r\n \r\n- macOS\r\n\r\n ```bash\r\n cmake --build . --target build-pkg\r\n ```\r\n\r\n
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n\r\nUsing CLion IDE for Development\r\n\r\nRun the following command in the project's root folder:\r\n\r\n```bash\r\nconan install . --output-folder=cmake-build-debug --build=missing -s compiler.cppstd=17 -o with_gui_client=True --settings build_type=Debug\r\n```\r\n\r\nOpen the project in CLion. After opening, the Open Project Wizard window will appear automatically. In it, you need to add the following CMake parameter:\r\n\r\n```bash\r\n-DCMAKE_TOOLCHAIN_FILE=conan_toolchain.cmake\r\n```\r\n\r\n
\r\n\r\n---\r\n\r\n### About the Project\r\n\r\nFPTN is developed by a team of volunteers and independent developers.\r\n\r\nIf you wish to support the project, you can donate via [Boosty](https://boosty.to/fptn). Project sponsors have speed limits removed on our servers and (optionally) have their usernames published in FPTN clients.\r\n\r\nOur Telegram chat for users and developers: [FPTN Project](https://t.me/fptn_project)\r\n\r\nJoin the community and the development team!\r\n\r\n---\r\n\r\n## Community Tools\r\n\r\nThe following tools are built and maintained by the community to extend or simplify working with FPTN.\r\n\r\n### fptn-manager\r\n\r\nA small external management tool built around FPTN, focused on simplifying deployment and common day-to-day administrative tasks.\r\n\r\nIt is especially useful for users who prefer not to work directly with Docker commands or internal configuration details.\r\n\r\nIt provides:\r\n- A Docker-based installer\r\n- An interactive CLI for user, password, and token management\r\n- Easier initial setup and repeated operations\r\n\r\nProject repository: \r\nhttps://github.com/FarazFe/fptn-manager\r\n" }, { "path": "README_RU.md", "content": "
\r\n\r\n

FPTN

\r\n
Custom VPN technology
\r\n\r\n[\\[English\\]](README.md)\r\n•\r\n[\\[Русский\\]](README_RU.md)\r\n\r\n\r\n[![Ubuntu](https://img.shields.io/badge/Ubuntu-E95420?style=for-the-badge&logo=ubuntu&logoColor=white)](https://github.com/batchar2/fptn/releases)\r\n[![Mac OS](https://img.shields.io/badge/mac%20os-000000?style=for-the-badge&logo=macos&logoColor=F0F0F0)](https://github.com/batchar2/fptn/releases)\r\n[![Windows](https://img.shields.io/badge/Windows-0078D6?style=for-the-badge&logo=windows&logoColor=white)](https://github.com/batchar2/fptn/releases)\r\n[![Android](https://img.shields.io/badge/Android-3DDC84?style=for-the-badge&logo=android&logoColor=white)](https://github.com/batchar2/fptn/releases)\r\n[![Build and Test](https://img.shields.io/github/actions/workflow/status/batchar2/fptn/main.yml?style=for-the-badge&logo=github-actions&logoColor=white&label=Build&labelColor=2088FF)](https://github.com/batchar2/fptn/actions/workflows/main.yml)\r\n[![GitHub All Releases](https://img.shields.io/github/downloads/batchar2/fptn/total.svg?style=for-the-badge&logo=github&logoColor=white&label=Downloads&labelColor=181717)](https://github.com/batchar2/fptn/releases)\r\n
\r\n\r\n---\r\n\r\n### Основные возможности FPTN\r\n\r\n\r\nFPTN — это VPN-технология, созданная с нуля для безопасного и устойчивого к блокировкам соединения, позволяющего обходить цензуру и сетевую фильтрацию.\r\n\r\nСайт проекта: [https://storage.googleapis.com/fptn.org/index.html](https://storage.googleapis.com/fptn.org/index.html)\r\n\r\nОсновные возможности включают:\r\n\r\n1. **L3-туннель (IP-уровень)**\r\n - Передача IP-пакетов (IPv4 и IPv6) через VPN-туннель до сервера.\r\n - Поддержка **split-tunneling** — возможность направлять через VPN только определённый трафик, а остальной трафик идёт напрямую. Позволяет гибко настраивать политику маршрутизации на основе указания правил для доменов и сетей.\r\n - На серверной стороне реализован **NAT**. В дальнейшем планируется поддержка объединения пользователей в группы с созданием виртуальных локальных сетей для совместного взаимодействия.\r\n\r\n2. **Маскировка трафика и обход блокировок**\r\n - **Устойчивость к активному DPI**: сервер способен идентифицировать клиентов по TLS-handshake, анализируя session_id (значение которого умеет устанавливать FPTN-клиент по специальному методу от времени). Если определяется, что клиент не является FPTN-клиентом, сервер возвращает легитимный контент запрашиваемого домена, выступая в роли прозрачного прокси.\r\n - VPN-соединение маскируется под обычный HTTPS-трафик (еще в разработке — режим короткоживущих HTTPS-соединений).\r\n - Реализованы три метода обхода блокировок:\r\n 1. **Подмена SNI**: в инициирующем соединение TLS-пакете устанавливается поддельный домен. Системы анализа трафика видят легитимное соединение, а на самом деле трафик направляется на VPN-сервер.\r\n 2. **Обфускация**: трафик выглядит как уже установленная TLS-сессия, скрывая TLS-handshake и предотвращая детектирование DPI.\r\n 3. **Reality Mode + SNI**: клиент инициирует соединение с VPN-сервером с подменой SNI, получает реальный TLS-handshake от настоящего сайта, после чего в том же соединении продолжается обмен данными с VPN-сервером.\r\n - В десктопной версии клиента реализован `сканнер SNI`.\r\n\r\n3. **Транспортный протокол**\r\n - Используется собственный транспортный протокол на основе **Protobuf** для передачи данных между клиентом и сервером.\r\n - **Padding на уровне протокола**: пакеты данных дополняются случайными данными для рандомизации трафика и затруднения анализа.\r\n - Сервер предоставляет **REST API** для авторизации клиентов и получения специальных настроек.\r\n\r\n4. **Специальные возможности**\r\n - Встроенная фильтрация нежелательного трафика (например, протокол BitTorrent).\r\n - Контроль скорости и трафика каждого пользователя: сервер включает шейпер на основе алгоритма **Leaky Bucket**, что позволяет гибко настраивать политику скорости.\r\n - Поддержка многосерверной архитектуры с одним мастер-сервером, где хранится вся информация о пользователях.\r\n - Мониторинг работы системы через **Prometheus** и визуализация в **Grafana**.\r\n - Возможность подключения пользователей через **Telegram-бота**.\r\n\r\n5. **Кроссплатформенные клиенты**\r\n - Разработана кроссплатформенная библиотека **`libfptn`**, которая может использоваться на различных операционных системах. Внутри реализованы сетевой протокол FPTN, управление соединением и механизмы передачи данных через VPN-туннель.\r\n - **Десктоп:** Windows, macOS, Linux — минималистичный клиент с акцентом на простоту использования.\r\n - **Мобильные устройства:** Android, iOS (в разработке).\r\n\r\n6. **Простая настройка через токен**\r\n - **Токен** — это специально сгенерированный конфигурационный файл, который содержит все необходимые настройки системы.\r\n - Позволяет подключаться к VPN без ручной конфигурации и лишних действий: достаточно добавить токен в клиент, чтобы начать работу.\r\n\r\n---\r\n\r\n### Демонстрация работы\r\n\r\n*🍏🍎Пользователям MacOS рекомендуется ознакомиться с [руководством по установке для macOS](docs/macos/README.md), так как в macOS присутствуют дополнительные меры безопасности, которые могут потребовать особых действий.*\r\n\r\nСкачайте клиент FPTN с [веб-сайта](http://batchar2.github.io/fptn/) или [GitHub](https://github.com/batchar2/fptn/releases). После скачивания установите и запустите клиент.\r\n\r\nКлиент представляет собой компактное приложение, значок которого находится в системном трее.\r\n\r\nПросто нажмите на значок, чтобы открыть контекстное меню.\r\n\r\n\"Приложение\"/\r\n\r\nПерейдите в меню \"Настройки\", где необходимо добавить токен доступа.\r\nПолучите токен, обратившись к нашему Telegram-боту,\r\n\r\n\"Настройки\"/\r\n\r\nСкопируйте токен, нажмите кнопку \"Добавить токен\", вставьте его в форму и сохраните.\r\n\r\n\"Настройки\"/\r\n\r\nПосле этого в списке появятся доступные серверы.\r\n\r\n\"Настройки\"/\r\n\r\nПростота использования:\r\n\r\n\"Настройки\"/\r\n\r\nВы также можете легко превратить свой Raspberry Pi или Orange Pi в точку доступа WiFi и установить на него клиент FPTN.\r\nВ этом случае все устройства, подключенные к этой WiFi-сети, смогут выходить в интернет, обходя любые ограничения.\r\n[Подробнее читайте здесь](https://github.com/batchar2/fptn/blob/master/deploy/linux/wifi/README.md)\r\n\r\n\"Настройки\"/\r\n\r\n\r\n---\r\n\r\n### Установка, сборка и настройка\r\n\r\n\r\n
\r\n Установка и настройка FPTN сервера\r\n\r\nНастройка и запуск собственного сервера FPTN выполняются через Docker. \r\nЭто обеспечивает простое развертывание, удобное обновление и изоляцию окружения.\r\nИнструкция доступна в [DockerHub](https://hub.docker.com/r/fptnvpn/fptn-vpn-server).\r\n\r\nТак же вы можете развернуть собственные инструменты для управления и мониторинга:\r\n- **Telegram-бот** — выдача токенов пользователмм [sysadmin-tools/telegram-bot/README.md](sysadmin-tools/telegram-bot/README.md).\r\n- **Grafana + Prometheus** — мониторинг состояния серверов и пользователей [sysadmin-tools/grafana/README.md](sysadmin-tools/grafana/README.md)\r\n\r\n
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n Сборка проекта из исходников\r\n\r\n1. Установите требуемые зависимости\r\n- Для [Windows](deploy/windows/README.md)\r\n- Для [Ubuntu](deploy/linux/deb/README.md)\r\n- Для [macOS](deploy/macos/README.md)\r\n\r\n2. Установите Conan (версия 2.24.0):\r\n\r\n```bash\r\npip install conan==2.24.0\r\n```\r\n\r\n3. Определите и настройте профиль Conan:\r\n\r\n```bash\r\nconan profile detect --force\r\n```\r\n\r\n4. Установите зависимости, выполните сборку и установку:\r\n\r\n```bash\r\nconan install . --output-folder=build --build=missing -s compiler.cppstd=17 -o with_gui_client=True --settings build_type=Release\r\n\r\ncd build\r\n\r\n# Только Linux & macOS\r\ncmake .. -DCMAKE_TOOLCHAIN_FILE=conan_toolchain.cmake -DCMAKE_BUILD_TYPE=Debug\r\n# Только для Windows\r\ncmake .. -G \"Visual Studio 17 2022\" -DCMAKE_TOOLCHAIN_FILE=\"conan_toolchain.cmake\" -DCMAKE_BUILD_TYPE=Debug\r\n\r\ncmake --build . --config Release\r\nctest\r\n````\r\n\r\n5. Сборка установщика\r\n - Windows\r\n \r\n ```bash\r\n cmake --build . --config Release --target build-installer\r\n ```\r\n \r\n - Ubuntu\r\n \r\n ```bash\r\n cmake --build . --config Release --target build-deb-gui\r\n ```\r\n \r\n - macOS\r\n \r\n ```bash\r\n cmake --build . --target build-pkg\r\n ```\r\n\r\n
\r\n\r\n
\r\n Использование CLion IDE для разработки\r\n\r\nВыполните следующую команду в корневой папке проекта:\r\n\r\n```bash\r\nconan install . --output-folder=cmake-build-debug --build=missing -s compiler.cppstd=17 -o with_gui_client=True --settings build_type=Debug\r\n```\r\n\r\nОткройте проект в CLion. После открытия автоматически появится окно **Open Project Wizard**. В нём необходимо добавить следующий параметр CMake:\r\n\r\n\r\n```bash\r\n-DCMAKE_TOOLCHAIN_FILE=conan_toolchain.cmake\r\n```\r\n\r\n
\r\n\r\n---\r\n\r\n### О проекте\r\n\r\nFPTN развивается командой волонтёров и независимых разработчиков.\r\n\r\nЕсли вы хотите поддержать проект, вы можете оформить донат на [Boosty](https://boosty.to/fptn). Спонсорам проекта снимаем ограничения скорости на наших серверах и (по желанию) публикуем их ники в FPTN-клиентах.\r\n\r\nНаш Telegram-чат для пользователей и разработчиков [FPTN Project](https://t.me/fptn_project)\r\n\r\nПрисоединяйтесь к сообществу и команде разработчиков!\r\n\r\n---\r\n\r\n## Инструменты сообщества\r\n\r\nСледующие инструменты разработаны и поддерживаются сообществом для расширения возможностей или упрощения работы с FPTN.\r\n\r\n### fptn-manager\r\n\r\nНебольшой внешний инструмент управления, построенный вокруг FPTN и ориентированный на упрощение развёртывания и повседневных административных задач.\r\n\r\nОсобенно полезен для пользователей, которые не хотят работать напрямую с Docker-командами или внутренними настройками конфигурации.\r\n\r\nВозможности:\r\n- Установщик на базе Docker\r\n- Интерактивный CLI для управления пользователями, паролями и токенами\r\n- Упрощённая первичная настройка и повторяющиеся операции\r\n\r\nРепозиторий проекта: https://github.com/FarazFe/fptn-manager\r\n" }, { "path": "conanfile.py", "content": "import os\nimport subprocess\n\nfrom conan import ConanFile\nfrom conan.tools.cmake import CMakeToolchain, CMake\nfrom conan.tools.files import copy\n\n# CI will replace this automatically\nFPTN_VERSION = \"0.0.0\"\n\n\nclass FPTN(ConanFile):\n name = \"fptn\"\n version = FPTN_VERSION\n requires = (\n \"argparse/3.2\",\n \"boost/1.90.0\",\n \"brotli/1.2.0\",\n \"cpp-httplib/0.30.0\",\n \"fmt/12.1.0\",\n \"jwt-cpp/0.7.1\",\n \"nlohmann_json/3.12.0\",\n \"protobuf/5.29.3\",\n \"re2/20251105\",\n \"spdlog/1.17.0\",\n \"zlib/1.3.1\",\n )\n settings = (\n \"os\",\n \"arch\",\n \"compiler\",\n \"build_type\",\n )\n generators = (\"CMakeDeps\",)\n options = {\n \"setup\": [True, False],\n \"with_gui_client\": [True, False],\n \"build_only_fptn_lib\": [True, False],\n }\n default_options = {\n # --- program ---\n \"setup\": False,\n \"with_gui_client\": False,\n \"build_only_fptn_lib\": False,\n # -- depends --\n \"*:fPIC\": True,\n \"*:shared\": False,\n # --- protobuf options ---\n \"protobuf/*:lite\": True,\n \"protobuf/*:upb\": False,\n \"protobuf/*:with_rtti\": False,\n \"protobuf/*:with_zlib\": False,\n \"protobuf/*:upb\": False,\n \"protobuf/*:debug_suffix\": False,\n # --- boost options ---\n \"boost/*:without_atomic\": False,\n \"boost/*:without_system\": False,\n \"boost/*:without_process\": False,\n \"boost/*:without_exception\": False,\n \"boost/*:without_container\": False,\n \"boost/*:without_filesystem\": False,\n \"boost/*:without_coroutine\": False,\n \"boost/*:without_context\": False,\n \"boost/*:without_timer\": False,\n \"boost/*:without_json\": False,\n \"boost/*:without_random\": False,\n \"boost/*:without_iostreams\": False,\n \"boost/*:without_chrono\": False,\n \"boost/*:without_regex\": False,\n \"boost/*:without_zlib\": False,\n \"boost/*:without_nowide\": False,\n \"boost/*:without_locale\": False,\n \"boost/*:without_thread\": False,\n \"boost/*:without_python\": True,\n \"boost/*:without_contract\": True,\n \"boost/*:without_fiber\": True,\n \"boost/*:without_graph\": True,\n \"boost/*:without_graph_parallel\": True,\n \"boost/*:without_log\": True,\n \"boost/*:without_math\": True,\n \"boost/*:without_mpi\": True,\n \"boost/*:without_program_options\": True,\n \"boost/*:without_serialization\": True,\n \"boost/*:without_stacktrace\": True,\n \"boost/*:without_test\": True,\n \"boost/*:without_url\": True,\n \"boost/*:without_type_erasure\": True,\n \"boost/*:without_wave\": True,\n # --- Qt ---\n \"qt/*:shared\": True,\n \"qt/*:openssl\": False,\n \"qt/*:qttools\": True,\n \"qt/*:with_harfbuzz\": False,\n \"qt/*:with_mysql\": False,\n \"qt/*:with_pq\": False,\n \"qt/*:with_odbc\": False,\n \"qt/*:with_zstd\": False,\n \"qt/*:with_brotli\": False,\n \"qt/*:with_dbus\": False,\n \"qt/*:with_openal\": False,\n \"qt/*:with_gstreamer\": False,\n \"qt/*:with_pulseaudio\": False,\n # --- prometheuscpp dependency ---\n \"prometheus-cpp/*:with_compression\": False,\n \"prometheus-cpp/*:with_push\": False,\n \"civetweb/*:with_ssl\": False,\n \"civetweb/*:disable_werror\": True,\n # --- freetype ---\n \"freetype/*:with_brotli\": False,\n }\n exports_sources = (\n \"CMakeLists.txt\",\n \"src/*\",\n \"depends/*\",\n \"tests/*\",\n )\n\n def requirements(self):\n self._register_local_recipe(\"boringssl\", \"openssl\", \"boringssl\", True, False)\n if self.options.with_gui_client:\n self.requires(\"qt/6.7.3\")\n if self.settings.os != \"Windows\":\n self.requires(\"meson/1.10.0\", override=True, force=True)\n if not self.options.build_only_fptn_lib:\n self.requires(\"libidn2/2.3.8\")\n self.requires(\"prometheus-cpp/1.3.0\")\n # pcap++ does not support iOS and Android.\n # Since libfptn is built as a detached part of the whole project, we don't use pcap++ in that case.\n self.requires(\"pcapplusplus/25.05\")\n\n def build_requirements(self):\n self.build_requires(\"cmake/3.22.0\", override=True)\n self.tool_requires(\"protobuf/5.29.3\")\n\n self.test_requires(\"gtest/1.17.0\")\n\n if self.settings.os != \"Windows\":\n self.build_requires(\"meson/1.10.0\", override=True)\n\n def generate(self):\n tc = CMakeToolchain(self)\n tc.variables[\"FPTN_VERSION\"] = FPTN_VERSION\n if self.options.with_gui_client:\n tc.variables[\"FPTN_BUILD_WITH_GUI_CLIENT\"] = \"True\"\n if self.options.build_only_fptn_lib:\n tc.variables[\"FPTN_BUILD_ONLY_FPTN_LIB\"] = \"True\"\n\n # setup protobuf compiler\n protobuf_build = self.dependencies.build[\"protobuf\"]\n protoc_path = os.path.join(protobuf_build.package_folder, \"bin\", \"protoc\")\n tc.cache_variables[\"Protobuf_PROTOC_EXECUTABLE\"] = protoc_path\n tc.generate()\n\n def build(self):\n cmake = CMake(self)\n cmake.configure()\n cmake.build()\n\n def package(self):\n if self.options.build_only_fptn_lib:\n copy(\n self,\n \"*.h\",\n src=os.path.join(self.source_folder, \"src\", \"fptn-protocol-lib\"),\n dst=os.path.join(self.package_folder, \"include\", \"fptn\"),\n )\n copy(\n self,\n \"*.h\",\n src=os.path.join(self.source_folder, \"src\", \"common\"),\n dst=os.path.join(self.package_folder, \"include\", \"fptn\", \"common\"),\n )\n copy(\n self,\n \"*.h\",\n src=os.path.join(self.build_folder, \"src\", \"fptn-protocol-lib\", \"protobuf\"),\n dst=os.path.join(self.package_folder, \"include\", \"fptn\", \"protobuf\"),\n )\n # copy lib\n copy(\n self,\n \"*.a\",\n src=os.path.join(self.build_folder, \"src\", \"fptn-protocol-lib\"),\n dst=os.path.join(self.package_folder, \"lib\"),\n )\n copy(\n self,\n \"*.lib\",\n src=os.path.join(self.build_folder, \"src\", \"fptn-protocol-lib\"),\n dst=os.path.join(self.package_folder, \"lib\"),\n )\n ntp_client_build_include = os.path.join(self.build_folder, \"_deps\", \"ntp_client-src\", \"include\")\n # copy NTP depends\n if os.path.exists(ntp_client_build_include):\n copy(\n self,\n \"*.h\",\n src=ntp_client_build_include,\n dst=os.path.join(self.package_folder, \"include\", \"ntp_client\"),\n )\n ntp_client_lib_src = os.path.join(self.build_folder, \"_deps\", \"ntp_client-build\")\n if os.path.exists(ntp_client_lib_src):\n copy(\n self,\n \"*.a\",\n src=ntp_client_lib_src,\n dst=os.path.join(self.package_folder, \"lib\"),\n )\n copy(\n self,\n \"*.lib\",\n src=ntp_client_lib_src,\n dst=os.path.join(self.package_folder, \"lib\"),\n )\n # copy camouflage-tls depends\n camouflage_tls_build_include = os.path.join(self.build_folder, \"_deps\", \"camouflagetls-src\", \"include\")\n if os.path.exists(camouflage_tls_build_include):\n copy(\n self,\n \"*.h\",\n src=camouflage_tls_build_include,\n dst=os.path.join(self.package_folder, \"include\", \"camouflage\"),\n )\n camouflage_tls_lib_src = os.path.join(self.build_folder, \"_deps\", \"camouflagetls-build\")\n if os.path.exists(camouflage_tls_lib_src):\n copy(\n self,\n \"*.a\",\n src=camouflage_tls_lib_src,\n dst=os.path.join(self.package_folder, \"lib\"),\n )\n copy(\n self,\n \"*.lib\",\n src=camouflage_tls_lib_src,\n dst=os.path.join(self.package_folder, \"lib\"),\n )\n\n def package_info(self):\n if self.options.build_only_fptn_lib:\n self.cpp_info.libs = [\n \"fptn-protocol-lib_static\",\n \"ntp_client\",\n ]\n self.cpp_info.includedirs = [\"include\"]\n self.cpp_info.libdirs = [\"lib\"]\n\n self.cpp_info.set_property(\"cmake_file_name\", \"fptn\")\n self.cpp_info.set_property(\"cmake_target_name\", \"fptn::fptn\")\n self.cpp_info.set_property(\"cmake_find_mode\", \"both\")\n\n # Add depends\n self.cpp_info.requires = [\n \"argparse::argparse\",\n \"cpp-httplib::cpp-httplib\",\n \"boost::boost\",\n \"fmt::fmt\",\n \"jwt-cpp::jwt-cpp\",\n \"nlohmann_json::nlohmann_json\",\n \"protobuf::protobuf\",\n \"spdlog::spdlog\",\n \"zlib::zlib\",\n \"re2::re2\",\n \"brotli::brotli\",\n ]\n if self.settings.os == \"iOS\":\n self.cpp_info.frameworks = [\"Security\", \"CFNetwork\", \"SystemConfiguration\"]\n self.cpp_info.system_libs = [\"resolv\"]\n\n def config_options(self):\n if self.settings.os == \"Windows\":\n self.options.rm_safe(\"fPIC\")\n if self.settings.os in [\"iOS\", \"Android\"] or self.options.build_only_fptn_lib:\n self.options[\"boost\"].without_process = True\n\n def export(self):\n copy(self, f\"*\", src=self.recipe_folder, dst=self.export_folder)\n\n def _register_local_recipe(self, recipe, name, version, override=False, force=False):\n script_dir = os.path.dirname(os.path.abspath(__file__))\n recipe_rel_path = os.path.join(script_dir, \".conan\", \"recipes\", recipe)\n subprocess.run(\n [\n \"conan\",\n \"export\",\n recipe_rel_path,\n f\"--name={name}\",\n f\"--version={version}\",\n \"--user=local\",\n \"--channel=local\",\n ],\n check=True,\n )\n self.requires(f\"{name}/{version}@local/local\", override=override, force=force)\n" }, { "path": "cpplint.py", "content": "#!/usr/bin/env python\n#\n# Copyright (c) 2009 Google Inc. All rights reserved.\n#\n# Redistribution and use in source and binary forms, with or without\n# modification, are permitted provided that the following conditions are\n# met:\n#\n# * Redistributions of source code must retain the above copyright\n# notice, this list of conditions and the following disclaimer.\n# * Redistributions in binary form must reproduce the above\n# copyright notice, this list of conditions and the following disclaimer\n# in the documentation and/or other materials provided with the\n# distribution.\n# * Neither the name of Google Inc. nor the names of its\n# contributors may be used to endorse or promote products derived from\n# this software without specific prior written permission.\n#\n# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n# \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\n# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\n# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\n# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\n# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\n# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\n# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\n# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\n# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n\"\"\"Does google-lint on c++ files.\n\nThe goal of this script is to identify places in the code that *may*\nbe in non-compliance with google style. It does not attempt to fix\nup these problems -- the point is to educate. It does also not\nattempt to find all problems, or to ensure that everything it does\nfind is legitimately a problem.\n\nIn particular, we can get very confused by /* and // inside strings!\nWe do a small hack, which is to ignore //'s with \"'s after them on the\nsame line, but it is far from perfect (in either direction).\n\"\"\"\n\nfrom __future__ import annotations # PEP 604 not in 3.9\n\nimport codecs\nimport collections\nimport copy\nimport getopt\nimport glob\nimport itertools\nimport math # for log\nimport os\nimport re\nimport string\nimport sys\nimport sysconfig\nimport unicodedata\nimport xml.etree.ElementTree\n\n# if empty, use defaults\n_valid_extensions: set[str] = set()\n\n__VERSION__ = \"2.0.2\"\n\n_USAGE = \"\"\"\nSyntax: cpplint.py [--verbose=#] [--output=emacs|eclipse|vs7|junit|sed|gsed]\n [--filter=-x,+y,...]\n [--counting=total|toplevel|detailed] [--root=subdir]\n [--repository=path]\n [--linelength=digits] [--headers=x,y,...]\n [--recursive]\n [--exclude=path]\n [--extensions=hpp,cpp,...]\n [--includeorder=default|standardcfirst]\n [--config=filename]\n [--quiet]\n [--version]\n [file] ...\n\n Style checker for C/C++ source files.\n This is a fork of the Google style checker with minor extensions.\n\n The style guidelines this tries to follow are those in\n https://google.github.io/styleguide/cppguide.html\n\n Every problem is given a confidence score from 1-5, with 5 meaning we are\n certain of the problem, and 1 meaning it could be a legitimate construct.\n This will miss some errors, and is not a substitute for a code review.\n\n To suppress false-positive errors of certain categories, add a\n 'NOLINT(category[, category...])' comment to the line. NOLINT or NOLINT(*)\n suppresses errors of all categories on that line. To suppress categories\n on the next line use NOLINTNEXTLINE instead of NOLINT. To suppress errors in\n a block of code 'NOLINTBEGIN(category[, category...])' comment to a line at\n the start of the block and to end the block add a comment with 'NOLINTEND'.\n NOLINT blocks are inclusive so any statements on the same line as a BEGIN\n or END will have the error suppression applied.\n\n The files passed in will be linted; at least one file must be provided.\n Default linted extensions are %s.\n Other file types will be ignored.\n Change the extensions with the --extensions flag.\n\n Flags:\n\n output=emacs|eclipse|vs7|junit|sed|gsed\n By default, the output is formatted to ease emacs parsing. Visual Studio\n compatible output (vs7) may also be used. Further support exists for\n eclipse (eclipse), and JUnit (junit). XML parsers such as those used\n in Jenkins and Bamboo may also be used.\n The sed format outputs sed commands that should fix some of the errors.\n Note that this requires gnu sed. If that is installed as gsed on your\n routing (common e.g. on macOS with homebrew) you can use the gsed output\n format. Sed commands are written to stdout, not stderr, so you should be\n able to pipe output straight to a shell to run the fixes.\n\n verbose=#\n Specify a number 0-5 to restrict errors to certain verbosity levels.\n Errors with lower verbosity levels have lower confidence and are more\n likely to be false positives.\n\n quiet\n Don't print anything if no errors are found.\n\n filter=-x,+y,...\n Specify a comma-separated list of category-filters to apply: only\n error messages whose category names pass the filters will be printed.\n (Category names are printed with the message and look like\n \"[whitespace/indent]\".) Filters are evaluated left to right.\n \"-FOO\" means \"do not print categories that start with FOO\".\n \"+FOO\" means \"do print categories that start with FOO\".\n\n Examples: --filter=-whitespace,+whitespace/braces\n --filter=-whitespace,-runtime/printf,+runtime/printf_format\n --filter=-,+build/include_what_you_use\n\n To see a list of all the categories used in cpplint, pass no arg:\n --filter=\n\n Filters can directly be limited to files and also line numbers. The\n syntax is category:file:line , where line is optional. The filter limitation\n works for both + and - and can be combined with ordinary filters:\n\n Examples: --filter=-whitespace:foo.h,+whitespace/braces:foo.h\n --filter=-whitespace,-runtime/printf:foo.h:14,+runtime/printf_format:foo.h\n --filter=-,+build/include_what_you_use:foo.h:321\n\n counting=total|toplevel|detailed\n The total number of errors found is always printed. If\n 'toplevel' is provided, then the count of errors in each of\n the top-level categories like 'build' and 'whitespace' will\n also be printed. If 'detailed' is provided, then a count\n is provided for each category like 'legal/copyright'.\n\n repository=path\n The top level directory of the repository, used to derive the header\n guard CPP variable. By default, this is determined by searching for a\n path that contains .git, .hg, or .svn. When this flag is specified, the\n given path is used instead. This option allows the header guard CPP\n variable to remain consistent even if members of a team have different\n repository root directories (such as when checking out a subdirectory\n with SVN). In addition, users of non-mainstream version control systems\n can use this flag to ensure readable header guard CPP variables.\n\n Examples:\n Assuming that Alice checks out ProjectName and Bob checks out\n ProjectName/trunk and trunk contains src/chrome/ui/browser.h, then\n with no --repository flag, the header guard CPP variable will be:\n\n Alice => TRUNK_SRC_CHROME_BROWSER_UI_BROWSER_H_\n Bob => SRC_CHROME_BROWSER_UI_BROWSER_H_\n\n If Alice uses the --repository=trunk flag and Bob omits the flag or\n uses --repository=. then the header guard CPP variable will be:\n\n Alice => SRC_CHROME_BROWSER_UI_BROWSER_H_\n Bob => SRC_CHROME_BROWSER_UI_BROWSER_H_\n\n root=subdir\n The root directory used for deriving header guard CPP variable.\n This directory is relative to the top level directory of the repository\n which by default is determined by searching for a directory that contains\n .git, .hg, or .svn but can also be controlled with the --repository flag.\n If the specified directory does not exist, this flag is ignored.\n\n Examples:\n Assuming that src is the top level directory of the repository (and\n cwd=top/src), the header guard CPP variables for\n src/chrome/browser/ui/browser.h are:\n\n No flag => CHROME_BROWSER_UI_BROWSER_H_\n --root=chrome => BROWSER_UI_BROWSER_H_\n --root=chrome/browser => UI_BROWSER_H_\n --root=.. => SRC_CHROME_BROWSER_UI_BROWSER_H_\n\n linelength=digits\n This is the allowed line length for the project. The default value is\n 80 characters.\n\n Examples:\n --linelength=120\n\n recursive\n Search for files to lint recursively. Each directory given in the list\n of files to be linted is replaced by all files that descend from that\n directory. Files with extensions not in the valid extensions list are\n excluded.\n\n exclude=path\n Exclude the given path from the list of files to be linted. Relative\n paths are evaluated relative to the current directory and shell globbing\n is performed. This flag can be provided multiple times to exclude\n multiple files.\n\n Examples:\n --exclude=one.cc\n --exclude=src/*.cc\n --exclude=src/*.cc --exclude=test/*.cc\n\n extensions=extension,extension,...\n The allowed file extensions that cpplint will check\n\n Examples:\n --extensions=%s\n\n includeorder=default|standardcfirst\n For the build/include_order rule, the default is to blindly assume angle\n bracket includes with file extension are c-routing-headers (default),\n even knowing this will have false classifications.\n The default is established at google.\n standardcfirst means to instead use an allow-list of known c headers and\n treat all others as separate group of \"other routing headers\". The C headers\n included are those of the C-standard lib and closely related ones.\n\n config=filename\n Search for config files with the specified name instead of CPPLINT.cfg\n\n headers=x,y,...\n The header extensions that cpplint will treat as .h in checks. Values are\n automatically added to --extensions list.\n (by default, only files with extensions %s will be assumed to be headers)\n\n Examples:\n --headers=%s\n --headers=hpp,hxx\n --headers=hpp\n\n cpplint.py supports per-directory configurations specified in CPPLINT.cfg\n files. CPPLINT.cfg file can contain a number of key=value pairs.\n Currently the following options are supported:\n\n set noparent\n filter=+filter1,-filter2,...\n exclude_files=regex\n linelength=80\n root=subdir\n headers=x,y,...\n\n \"set noparent\" option prevents cpplint from traversing directory tree\n upwards looking for more .cfg files in parent directories. This option\n is usually placed in the top-level project directory.\n\n The \"filter\" option is similar in function to --filter flag. It specifies\n message filters in addition to the |_DEFAULT_FILTERS| and those specified\n through --filter command-line flag.\n\n \"exclude_files\" allows to specify a regular expression to be matched against\n a file name. If the expression matches, the file is skipped and not run\n through the linter.\n\n \"linelength\" allows to specify the allowed line length for the project.\n\n The \"root\" option is similar in function to the --root flag (see example\n above). Paths are relative to the directory of the CPPLINT.cfg.\n\n The \"headers\" option is similar in function to the --headers flag\n (see example above).\n\n CPPLINT.cfg has an effect on files in the same directory and all\n sub-directories, unless overridden by a nested configuration file.\n\n Example file:\n filter=-build/include_order,+build/include_alpha\n exclude_files=.*\\\\.cc\n\n The above example disables build/include_order warning and enables\n build/include_alpha as well as excludes all .cc from being\n processed by linter, in the current directory (where the .cfg\n file is located) and all sub-directories.\n\"\"\"\n\n# We categorize each error message we print. Here are the categories.\n# We want an explicit list so we can list them all in cpplint --filter=.\n# If you add a new error message with a new category, add it to the list\n# here! cpplint_unittest.py should tell you if you forget to do this.\n_ERROR_CATEGORIES = [\n \"build/c++11\",\n \"build/c++17\",\n \"build/deprecated\",\n \"build/endif_comment\",\n \"build/explicit_make_pair\",\n \"build/forward_decl\",\n \"build/header_guard\",\n \"build/include\",\n \"build/include_subdir\",\n \"build/include_alpha\",\n \"build/include_order\",\n \"build/include_what_you_use\",\n \"build/namespaces_headers\",\n \"build/namespaces_literals\",\n \"build/namespaces\",\n \"build/printf_format\",\n \"build/storage_class\",\n \"legal/copyright\",\n \"readability/alt_tokens\",\n \"readability/braces\",\n \"readability/casting\",\n \"readability/check\",\n \"readability/constructors\",\n \"readability/fn_size\",\n \"readability/inheritance\",\n \"readability/multiline_comment\",\n \"readability/multiline_string\",\n \"readability/namespace\",\n \"readability/nolint\",\n \"readability/nul\",\n \"readability/todo\",\n \"readability/utf8\",\n \"runtime/arrays\",\n \"runtime/casting\",\n \"runtime/explicit\",\n \"runtime/int\",\n \"runtime/init\",\n \"runtime/invalid_increment\",\n \"runtime/member_string_references\",\n \"runtime/memset\",\n \"runtime/operator\",\n \"runtime/printf\",\n \"runtime/printf_format\",\n \"runtime/references\",\n \"runtime/string\",\n \"runtime/threadsafe_fn\",\n \"runtime/vlog\",\n \"whitespace/blank_line\",\n \"whitespace/braces\",\n \"whitespace/comma\",\n \"whitespace/comments\",\n \"whitespace/empty_conditional_body\",\n \"whitespace/empty_if_body\",\n \"whitespace/empty_loop_body\",\n \"whitespace/end_of_line\",\n \"whitespace/ending_newline\",\n \"whitespace/forcolon\",\n \"whitespace/indent\",\n \"whitespace/indent_namespace\",\n \"whitespace/line_length\",\n \"whitespace/newline\",\n \"whitespace/operators\",\n \"whitespace/parens\",\n \"whitespace/semicolon\",\n \"whitespace/tab\",\n \"whitespace/todo\",\n]\n\n# keywords to use with --outputs which generate stdout for machine processing\n_MACHINE_OUTPUTS = [\"junit\", \"sed\", \"gsed\"]\n\n# These error categories are no longer enforced by cpplint, but for backwards-\n# compatibility they may still appear in NOLINT comments.\n_LEGACY_ERROR_CATEGORIES = [\n \"build/class\",\n \"readability/streams\",\n \"readability/function\",\n]\n\n# These prefixes for categories should be ignored since they relate to other\n# tools which also use the NOLINT syntax, e.g. clang-tidy.\n_OTHER_NOLINT_CATEGORY_PREFIXES = [\n \"clang-analyzer-\",\n \"abseil-\",\n \"altera-\",\n \"android-\",\n \"boost-\",\n \"bugprone-\",\n \"cert-\",\n \"concurrency-\",\n \"cppcoreguidelines-\",\n \"darwin-\",\n \"fuchsia-\",\n \"google-\",\n \"hicpp-\",\n \"linuxkernel-\",\n \"llvm-\",\n \"llvmlibc-\",\n \"misc-\",\n \"modernize-\",\n \"mpi-\",\n \"objc-\",\n \"openmp-\",\n \"performance-\",\n \"portability-\",\n \"readability-\",\n \"zircon-\",\n]\n\n# The default state of the category filter. This is overridden by the --filter=\n# flag. By default all errors are on, so only add here categories that should be\n# off by default (i.e., categories that must be enabled by the --filter= flags).\n# All entries here should start with a '-' or '+', as in the --filter= flag.\n_DEFAULT_FILTERS = [\n \"-build/include_alpha\",\n \"-readability/fn_size\",\n \"-runtime/references\",\n]\n\n# The default list of categories suppressed for C (not C++) files.\n_DEFAULT_C_SUPPRESSED_CATEGORIES = [\n \"readability/casting\",\n]\n\n# The default list of categories suppressed for Linux Kernel files.\n_DEFAULT_KERNEL_SUPPRESSED_CATEGORIES = [\n \"whitespace/tab\",\n]\n\n# We used to check for high-bit characters, but after much discussion we\n# decided those were OK, as long as they were in UTF-8 and didn't represent\n# hard-coded international strings, which belong in a separate i18n file.\n\n# C++ headers\n_CPP_HEADERS = frozenset(\n [\n # Legacy\n \"algobase.h\",\n \"algo.h\",\n \"alloc.h\",\n \"builtinbuf.h\",\n \"bvector.h\",\n # 'complex.h', collides with System C header \"complex.h\" since C11\n \"defalloc.h\",\n \"deque.h\",\n \"editbuf.h\",\n \"fstream.h\",\n \"function.h\",\n \"hash_map\",\n \"hash_map.h\",\n \"hash_set\",\n \"hash_set.h\",\n \"hashtable.h\",\n \"heap.h\",\n \"indstream.h\",\n \"iomanip.h\",\n \"iostream.h\",\n \"istream.h\",\n \"iterator.h\",\n \"list.h\",\n \"map.h\",\n \"multimap.h\",\n \"multiset.h\",\n \"ostream.h\",\n \"pair.h\",\n \"parsestream.h\",\n \"pfstream.h\",\n \"procbuf.h\",\n \"pthread_alloc\",\n \"pthread_alloc.h\",\n \"rope\",\n \"rope.h\",\n \"ropeimpl.h\",\n \"set.h\",\n \"slist\",\n \"slist.h\",\n \"stack.h\",\n \"stdiostream.h\",\n \"stl_alloc.h\",\n \"stl_relops.h\",\n \"streambuf.h\",\n \"stream.h\",\n \"strfile.h\",\n \"strstream.h\",\n \"tempbuf.h\",\n \"tree.h\",\n \"type_traits.h\",\n \"vector.h\",\n # C++ library headers\n \"algorithm\",\n \"array\",\n \"atomic\",\n \"bitset\",\n \"chrono\",\n \"codecvt\",\n \"complex\",\n \"condition_variable\",\n \"deque\",\n \"exception\",\n \"forward_list\",\n \"fstream\",\n \"functional\",\n \"future\",\n \"initializer_list\",\n \"iomanip\",\n \"ios\",\n \"iosfwd\",\n \"iostream\",\n \"istream\",\n \"iterator\",\n \"limits\",\n \"list\",\n \"locale\",\n \"map\",\n \"memory\",\n \"mutex\",\n \"new\",\n \"numeric\",\n \"ostream\",\n \"queue\",\n \"random\",\n \"ratio\",\n \"regex\",\n \"scoped_allocator\",\n \"set\",\n \"sstream\",\n \"stack\",\n \"stdexcept\",\n \"streambuf\",\n \"string\",\n \"strstream\",\n \"system_error\",\n \"thread\",\n \"tuple\",\n \"typeindex\",\n \"typeinfo\",\n \"type_traits\",\n \"unordered_map\",\n \"unordered_set\",\n \"utility\",\n \"valarray\",\n \"vector\",\n # C++14 headers\n \"shared_mutex\",\n # C++17 headers\n \"any\",\n \"charconv\",\n \"codecvt\",\n \"execution\",\n \"filesystem\",\n \"memory_resource\",\n \"optional\",\n \"string_view\",\n \"variant\",\n # C++20 headers\n \"barrier\",\n \"bit\",\n \"compare\",\n \"concepts\",\n \"coroutine\",\n \"format\",\n \"latch\",\n \"numbers\",\n \"ranges\",\n \"semaphore\",\n \"source_location\",\n \"span\",\n \"stop_token\",\n \"syncstream\",\n \"version\",\n # C++23 headers\n \"expected\",\n \"flat_map\",\n \"flat_set\",\n \"generator\",\n \"mdspan\",\n \"print\",\n \"spanstream\",\n \"stacktrace\",\n \"stdfloat\",\n # C++ headers for C library facilities\n \"cassert\",\n \"ccomplex\",\n \"cctype\",\n \"cerrno\",\n \"cfenv\",\n \"cfloat\",\n \"cinttypes\",\n \"ciso646\",\n \"climits\",\n \"clocale\",\n \"cmath\",\n \"csetjmp\",\n \"csignal\",\n \"cstdalign\",\n \"cstdarg\",\n \"cstdbool\",\n \"cstddef\",\n \"cstdint\",\n \"cstdio\",\n \"cstdlib\",\n \"cstring\",\n \"ctgmath\",\n \"ctime\",\n \"cuchar\",\n \"cwchar\",\n \"cwctype\",\n ]\n)\n\n# C headers\n_C_HEADERS = frozenset(\n [\n # System C headers\n \"assert.h\",\n \"complex.h\",\n \"ctype.h\",\n \"errno.h\",\n \"fenv.h\",\n \"float.h\",\n \"inttypes.h\",\n \"iso646.h\",\n \"limits.h\",\n \"locale.h\",\n \"math.h\",\n \"setjmp.h\",\n \"signal.h\",\n \"stdalign.h\",\n \"stdarg.h\",\n \"stdatomic.h\",\n \"stdbool.h\",\n \"stddef.h\",\n \"stdint.h\",\n \"stdio.h\",\n \"stdlib.h\",\n \"stdnoreturn.h\",\n \"string.h\",\n \"tgmath.h\",\n \"threads.h\",\n \"time.h\",\n \"uchar.h\",\n \"wchar.h\",\n \"wctype.h\",\n # C23 headers\n \"stdbit.h\",\n \"stdckdint.h\",\n # additional POSIX C headers\n \"aio.h\",\n \"arpa/inet.h\",\n \"cpio.h\",\n \"dirent.h\",\n \"dlfcn.h\",\n \"fcntl.h\",\n \"fmtmsg.h\",\n \"fnmatch.h\",\n \"ftw.h\",\n \"glob.h\",\n \"grp.h\",\n \"iconv.h\",\n \"langinfo.h\",\n \"libgen.h\",\n \"monetary.h\",\n \"mqueue.h\",\n \"ndbm.h\",\n \"net/if.h\",\n \"netdb.h\",\n \"netinet/in.h\",\n \"netinet/tcp.h\",\n \"nl_types.h\",\n \"poll.h\",\n \"pthread.h\",\n \"pwd.h\",\n \"regex.h\",\n \"sched.h\",\n \"search.h\",\n \"semaphore.h\",\n \"setjmp.h\",\n \"signal.h\",\n \"spawn.h\",\n \"strings.h\",\n \"stropts.h\",\n \"syslog.h\",\n \"tar.h\",\n \"termios.h\",\n \"trace.h\",\n \"ulimit.h\",\n \"unistd.h\",\n \"utime.h\",\n \"utmpx.h\",\n \"wordexp.h\",\n # additional GNUlib headers\n \"a.out.h\",\n \"aliases.h\",\n \"alloca.h\",\n \"ar.h\",\n \"argp.h\",\n \"argz.h\",\n \"byteswap.h\",\n \"crypt.h\",\n \"endian.h\",\n \"envz.h\",\n \"err.h\",\n \"error.h\",\n \"execinfo.h\",\n \"fpu_control.h\",\n \"fstab.h\",\n \"fts.h\",\n \"getopt.h\",\n \"gshadow.h\",\n \"ieee754.h\",\n \"ifaddrs.h\",\n \"libintl.h\",\n \"mcheck.h\",\n \"mntent.h\",\n \"obstack.h\",\n \"paths.h\",\n \"printf.h\",\n \"pty.h\",\n \"resolv.h\",\n \"shadow.h\",\n \"sysexits.h\",\n \"ttyent.h\",\n # Additional linux glibc headers\n \"dlfcn.h\",\n \"elf.h\",\n \"features.h\",\n \"gconv.h\",\n \"gnu-versions.h\",\n \"lastlog.h\",\n \"libio.h\",\n \"link.h\",\n \"malloc.h\",\n \"memory.h\",\n \"netash/ash.h\",\n \"netatalk/at.h\",\n \"netax25/ax25.h\",\n \"neteconet/ec.h\",\n \"netipx/ipx.h\",\n \"netiucv/iucv.h\",\n \"netpacket/packet.h\",\n \"netrom/netrom.h\",\n \"netrose/rose.h\",\n \"nfs/nfs.h\",\n \"nl_types.h\",\n \"nss.h\",\n \"re_comp.h\",\n \"regexp.h\",\n \"sched.h\",\n \"sgtty.h\",\n \"stab.h\",\n \"stdc-predef.h\",\n \"stdio_ext.h\",\n \"syscall.h\",\n \"termio.h\",\n \"thread_db.h\",\n \"ucontext.h\",\n \"ustat.h\",\n \"utmp.h\",\n \"values.h\",\n \"wait.h\",\n \"xlocale.h\",\n # Hardware specific headers\n \"arm_neon.h\",\n \"emmintrin.h\",\n \"xmmintin.h\",\n ]\n)\n\n# Folders of C libraries so commonly used in C++,\n# that they have parity with standard C libraries.\nC_STANDARD_HEADER_FOLDERS = frozenset(\n [\n # standard C library\n \"sys\",\n # glibc for linux\n \"arpa\",\n \"asm-generic\",\n \"bits\",\n \"gnu\",\n \"net\",\n \"netinet\",\n \"protocols\",\n \"rpc\",\n \"rpcsvc\",\n \"scsi\",\n # linux kernel header\n \"drm\",\n \"linux\",\n \"misc\",\n \"mtd\",\n \"rdma\",\n \"sound\",\n \"video\",\n \"xen\",\n ]\n)\n\n# Type names\n_TYPES = re.compile(\n r\"^(?:\"\n # [dcl.type.simple]\n r\"(char(16_t|32_t)?)|wchar_t|\"\n r\"bool|short|int|long|signed|unsigned|float|double|\"\n # [support.types]\n r\"(ptrdiff_t|size_t|max_align_t|nullptr_t)|\"\n # [cstdint.syn]\n r\"(u?int(_fast|_least)?(8|16|32|64)_t)|\"\n r\"(u?int(max|ptr)_t)|\"\n r\")$\"\n)\n\n\n# These headers are excluded from [build/include] and [build/include_order]\n# checks:\n# - Anything not following google file name conventions (containing an\n# uppercase character, such as Python.h or nsStringAPI.h, for example).\n# - Lua headers.\n_THIRD_PARTY_HEADERS_PATTERN = re.compile(r\"^(?:[^/]*[A-Z][^/]*\\.h|lua\\.h|lauxlib\\.h|lualib\\.h)$\")\n\n# Pattern for matching FileInfo.BaseName() against test file name\n_test_suffixes = [\"_test\", \"_regtest\", \"_unittest\"]\n_TEST_FILE_SUFFIX = \"(\" + \"|\".join(_test_suffixes) + r\")$\"\n\n# Pattern that matches only complete whitespace, possibly across multiple lines.\n_EMPTY_CONDITIONAL_BODY_PATTERN = re.compile(r\"^\\s*$\", re.DOTALL)\n\n# Assertion macros. These are defined in base/logging.h and\n# testing/base/public/gunit.h.\n_CHECK_MACROS = [\n \"DCHECK\",\n \"CHECK\",\n \"EXPECT_TRUE\",\n \"ASSERT_TRUE\",\n \"EXPECT_FALSE\",\n \"ASSERT_FALSE\",\n]\n\n# Replacement macros for CHECK/DCHECK/EXPECT_TRUE/EXPECT_FALSE\n_CHECK_REPLACEMENT: dict[str, dict[str, str]] = {macro_var: {} for macro_var in _CHECK_MACROS}\n\nfor op, replacement in [\n (\"==\", \"EQ\"),\n (\"!=\", \"NE\"),\n (\">=\", \"GE\"),\n (\">\", \"GT\"),\n (\"<=\", \"LE\"),\n (\"<\", \"LT\"),\n]:\n _CHECK_REPLACEMENT[\"DCHECK\"][op] = f\"DCHECK_{replacement}\"\n _CHECK_REPLACEMENT[\"CHECK\"][op] = f\"CHECK_{replacement}\"\n _CHECK_REPLACEMENT[\"EXPECT_TRUE\"][op] = f\"EXPECT_{replacement}\"\n _CHECK_REPLACEMENT[\"ASSERT_TRUE\"][op] = f\"ASSERT_{replacement}\"\n\nfor op, inv_replacement in [\n (\"==\", \"NE\"),\n (\"!=\", \"EQ\"),\n (\">=\", \"LT\"),\n (\">\", \"LE\"),\n (\"<=\", \"GT\"),\n (\"<\", \"GE\"),\n]:\n _CHECK_REPLACEMENT[\"EXPECT_FALSE\"][op] = f\"EXPECT_{inv_replacement}\"\n _CHECK_REPLACEMENT[\"ASSERT_FALSE\"][op] = f\"ASSERT_{inv_replacement}\"\n\n# Alternative tokens and their replacements. For full list, see section 2.5\n# Alternative tokens [lex.digraph] in the C++ standard.\n#\n# Digraphs (such as '%:') are not included here since it's a mess to\n# match those on a word boundary.\n_ALT_TOKEN_REPLACEMENT = {\n \"and\": \"&&\",\n \"bitor\": \"|\",\n \"or\": \"||\",\n \"xor\": \"^\",\n \"compl\": \"~\",\n \"bitand\": \"&\",\n \"and_eq\": \"&=\",\n \"or_eq\": \"|=\",\n \"xor_eq\": \"^=\",\n \"not\": \"!\",\n \"not_eq\": \"!=\",\n}\n\n# Compile regular expression that matches all the above keywords. The \"[ =()]\"\n# bit is meant to avoid matching these keywords outside of boolean expressions.\n#\n# False positives include C-style multi-line comments and multi-line strings\n# but those have always been troublesome for cpplint.\n_ALT_TOKEN_REPLACEMENT_PATTERN = re.compile(\n r\"([ =()])(\" + (\"|\".join(_ALT_TOKEN_REPLACEMENT.keys())) + r\")([ (]|$)\"\n)\n\n\n# These constants define types of headers for use with\n# _IncludeState.CheckNextIncludeOrder().\n_C_SYS_HEADER = 1\n_CPP_SYS_HEADER = 2\n_OTHER_SYS_HEADER = 3\n_LIKELY_MY_HEADER = 4\n_POSSIBLE_MY_HEADER = 5\n_OTHER_HEADER = 6\n\n# These constants define the current inline assembly state\n_NO_ASM = 0 # Outside of inline assembly block\n_INSIDE_ASM = 1 # Inside inline assembly block\n_END_ASM = 2 # Last line of inline assembly block\n_BLOCK_ASM = 3 # The whole block is an inline assembly block\n\n# Match start of assembly blocks\n_MATCH_ASM = re.compile(\n r\"^\\s*(?:asm|_asm|__asm|__asm__)\"\n r\"(?:\\s+(volatile|__volatile__))?\"\n r\"\\s*[{(]\"\n)\n\n# Match strings that indicate we're working on a C (not C++) file.\n_SEARCH_C_FILE = re.compile(\n r\"\\b(?:LINT_C_FILE|\"\n r\"vim?:\\s*.*(\\s*|:)filetype=c(\\s*|:|$))\"\n)\n\n# Match string that indicates we're working on a Linux Kernel file.\n_SEARCH_KERNEL_FILE = re.compile(r\"\\b(?:LINT_KERNEL_FILE)\")\n\n# Commands for sed to fix the problem\n_SED_FIXUPS = {\n \"Remove spaces around =\": r\"s/ = /=/\",\n \"Remove spaces around !=\": r\"s/ != /!=/\",\n \"Remove space before ( in if (\": r\"s/if (/if(/\",\n \"Remove space before ( in for (\": r\"s/for (/for(/\",\n \"Remove space before ( in while (\": r\"s/while (/while(/\",\n \"Remove space before ( in switch (\": r\"s/switch (/switch(/\",\n \"Should have a space between // and comment\": r\"s/\\/\\//\\/\\/ /\",\n \"Missing space before {\": r\"s/\\([^ ]\\){/\\1 {/\",\n \"Tab found, replace by spaces\": r\"s/\\t/ /g\",\n \"Line ends in whitespace. Consider deleting these extra spaces.\": r\"s/\\s*$//\",\n \"You don't need a ; after a }\": r\"s/};/}/\",\n \"Missing space after ,\": r\"s/,\\([^ ]\\)/, \\1/g\",\n}\n\n# The root directory used for deriving header guard CPP variable.\n# This is set by --root flag.\n_root = None\n_root_debug = False\n\n# The top level repository directory. If set, _root is calculated relative to\n# this directory instead of the directory containing version control artifacts.\n# This is set by the --repository flag.\n_repository = None\n\n# Files to exclude from linting. This is set by the --exclude flag.\n_excludes = None\n\n# Whether to suppress all PrintInfo messages, UNRELATED to --quiet flag\n_quiet = False\n\n# The allowed line length of files.\n# This is set by --linelength flag.\n_line_length = 80\n\n# This allows to use different include order rule than default\n_include_order = \"default\"\n\n# This allows different config files to be used\n_config_filename = \"CPPLINT.cfg\"\n\n# Treat all headers starting with 'h' equally: .h, .hpp, .hxx etc.\n# This is set by --headers flag.\n_hpp_headers: set[str] = set()\n\n\nclass ErrorSuppressions:\n \"\"\"Class to track all error suppressions for cpplint\"\"\"\n\n class LineRange:\n \"\"\"Class to represent a range of line numbers for which an error is suppressed\"\"\"\n\n def __init__(self, begin, end):\n self.begin = begin\n self.end = end\n\n def __str__(self):\n return f\"[{self.begin}-{self.end}]\"\n\n def __contains__(self, obj):\n return self.begin <= obj <= self.end\n\n def ContainsRange(self, other):\n return self.begin <= other.begin and self.end >= other.end\n\n def __init__(self):\n self._suppressions = collections.defaultdict(list)\n self._open_block_suppression = None\n\n def _AddSuppression(self, category, line_range):\n suppressed = self._suppressions[category]\n if not (suppressed and suppressed[-1].ContainsRange(line_range)):\n suppressed.append(line_range)\n\n def GetOpenBlockStart(self):\n \"\"\":return: The start of the current open block or `-1` if there is not an open block\"\"\"\n return self._open_block_suppression.begin if self._open_block_suppression else -1\n\n def AddGlobalSuppression(self, category):\n \"\"\"Add a suppression for `category` which is suppressed for the whole file\"\"\"\n self._AddSuppression(category, self.LineRange(0, math.inf))\n\n def AddLineSuppression(self, category, linenum):\n \"\"\"Add a suppression for `category` which is suppressed only on `linenum`\"\"\"\n self._AddSuppression(category, self.LineRange(linenum, linenum))\n\n def StartBlockSuppression(self, category, linenum):\n \"\"\"Start a suppression block for `category` on `linenum`. inclusive\"\"\"\n if self._open_block_suppression is None:\n self._open_block_suppression = self.LineRange(linenum, math.inf)\n self._AddSuppression(category, self._open_block_suppression)\n\n def EndBlockSuppression(self, linenum):\n \"\"\"End the current block suppression on `linenum`. inclusive\"\"\"\n if self._open_block_suppression:\n self._open_block_suppression.end = linenum\n self._open_block_suppression = None\n\n def IsSuppressed(self, category, linenum):\n \"\"\":return: `True` if `category` is suppressed for `linenum`\"\"\"\n suppressed = self._suppressions[category] + self._suppressions[None]\n return any(linenum in lr for lr in suppressed)\n\n def HasOpenBlock(self):\n \"\"\":return: `True` if a block suppression was started but not ended\"\"\"\n return self._open_block_suppression is not None\n\n def Clear(self):\n \"\"\"Clear all current error suppressions\"\"\"\n self._suppressions.clear()\n self._open_block_suppression = None\n\n\n# {str, set(int)}: a map from error categories to sets of linenumbers\n# on which those errors are expected and should be suppressed.\n_error_suppressions = ErrorSuppressions()\n\n\ndef ProcessHppHeadersOption(val):\n global _hpp_headers\n try:\n _hpp_headers = {ext.strip() for ext in val.split(\",\")}\n except ValueError:\n PrintUsage(\"Header extensions must be comma separated list.\")\n\n\ndef ProcessIncludeOrderOption(val):\n if val is None or val == \"default\":\n pass\n elif val == \"standardcfirst\":\n global _include_order\n _include_order = val\n else:\n PrintUsage(\"Invalid includeorder value %s. Expected default|standardcfirst\")\n\n\ndef IsHeaderExtension(file_extension):\n return file_extension in GetHeaderExtensions()\n\n\ndef GetHeaderExtensions():\n if _hpp_headers:\n return _hpp_headers\n if _valid_extensions:\n return {h for h in _valid_extensions if \"h\" in h}\n return {\"h\", \"hh\", \"hpp\", \"hxx\", \"h++\", \"cuh\"}\n\n\n# The allowed extensions for file names\n# This is set by --extensions flag\ndef GetAllExtensions():\n return GetHeaderExtensions().union(_valid_extensions or {\"c\", \"cc\", \"cpp\", \"cxx\", \"c++\", \"cu\"})\n\n\ndef ProcessExtensionsOption(val):\n global _valid_extensions\n try:\n extensions = [ext.strip() for ext in val.split(\",\")]\n _valid_extensions = set(extensions)\n except ValueError:\n PrintUsage(\n \"Extensions should be a comma-separated list of values;\"\n \"for example: extensions=hpp,cpp\\n\"\n f'This could not be parsed: \"{val}\"'\n )\n\n\ndef GetNonHeaderExtensions():\n return GetAllExtensions().difference(GetHeaderExtensions())\n\n\ndef ParseNolintSuppressions(filename, raw_line, linenum, error):\n \"\"\"Updates the global list of line error-suppressions.\n\n Parses any NOLINT comments on the current line, updating the global\n error_suppressions store. Reports an error if the NOLINT comment\n was malformed.\n\n Args:\n filename: str, the name of the input file.\n raw_line: str, the line of input text, with comments.\n linenum: int, the number of the current line.\n error: function, an error handler.\n \"\"\"\n if matched := re.search(r\"\\bNOLINT(NEXTLINE|BEGIN|END)?\\b(\\([^)]+\\))?\", raw_line):\n no_lint_type = matched.group(1)\n if no_lint_type == \"NEXTLINE\":\n\n def ProcessCategory(category):\n _error_suppressions.AddLineSuppression(category, linenum + 1)\n elif no_lint_type == \"BEGIN\":\n if _error_suppressions.HasOpenBlock():\n error(\n filename,\n linenum,\n \"readability/nolint\",\n 5,\n (\n \"NONLINT block already defined on line \"\n f\"{_error_suppressions.GetOpenBlockStart()}\"\n ),\n )\n\n def ProcessCategory(category):\n _error_suppressions.StartBlockSuppression(category, linenum)\n elif no_lint_type == \"END\":\n if not _error_suppressions.HasOpenBlock():\n error(filename, linenum, \"readability/nolint\", 5, \"Not in a NOLINT block\")\n\n def ProcessCategory(category):\n if category is not None:\n error(\n filename,\n linenum,\n \"readability/nolint\",\n 5,\n f\"NOLINT categories not supported in block END: {category}\",\n )\n _error_suppressions.EndBlockSuppression(linenum)\n else:\n\n def ProcessCategory(category):\n _error_suppressions.AddLineSuppression(category, linenum)\n\n categories = matched.group(2)\n if categories in (None, \"(*)\"): # => \"suppress all\"\n ProcessCategory(None)\n elif categories.startswith(\"(\") and categories.endswith(\")\"):\n for category in {c.strip() for c in categories[1:-1].split(\",\")}:\n if category in _ERROR_CATEGORIES:\n ProcessCategory(category)\n elif any(c for c in _OTHER_NOLINT_CATEGORY_PREFIXES if category.startswith(c)):\n # Ignore any categories from other tools.\n pass\n elif category not in _LEGACY_ERROR_CATEGORIES:\n error(\n filename,\n linenum,\n \"readability/nolint\",\n 5,\n f\"Unknown NOLINT error category: {category}\",\n )\n\n\ndef ProcessGlobalSuppressions(filename: str, lines: list[str]) -> None:\n \"\"\"Updates the list of global error suppressions.\n\n Parses any lint directives in the file that have global effect.\n\n Args:\n lines: An array of strings, each representing a line of the file, with the\n last element being empty if the file is terminated with a newline.\n filename: str, the name of the input file.\n \"\"\"\n for line in lines:\n if _SEARCH_C_FILE.search(line) or filename.lower().endswith((\".c\", \".cu\")):\n for category in _DEFAULT_C_SUPPRESSED_CATEGORIES:\n _error_suppressions.AddGlobalSuppression(category)\n if _SEARCH_KERNEL_FILE.search(line):\n for category in _DEFAULT_KERNEL_SUPPRESSED_CATEGORIES:\n _error_suppressions.AddGlobalSuppression(category)\n\n\ndef ResetNolintSuppressions():\n \"\"\"Resets the set of NOLINT suppressions to empty.\"\"\"\n _error_suppressions.Clear()\n\n\ndef IsErrorSuppressedByNolint(category, linenum):\n \"\"\"Returns true if the specified error category is suppressed on this line.\n\n Consults the global error_suppressions map populated by\n ParseNolintSuppressions/ProcessGlobalSuppressions/ResetNolintSuppressions.\n\n Args:\n category: str, the category of the error.\n linenum: int, the current line number.\n Returns:\n bool, True iff the error should be suppressed due to a NOLINT comment,\n block suppression or global suppression.\n \"\"\"\n return _error_suppressions.IsSuppressed(category, linenum)\n\n\ndef _IsSourceExtension(s):\n \"\"\"File extension (excluding dot) matches a source file extension.\"\"\"\n return s in GetNonHeaderExtensions()\n\n\nclass _IncludeState:\n \"\"\"Tracks line numbers for includes, and the order in which includes appear.\n\n include_list contains list of lists of (header, line number) pairs.\n It's a lists of lists rather than just one flat list to make it\n easier to update across preprocessor boundaries.\n\n Call CheckNextIncludeOrder() once for each header in the file, passing\n in the type constants defined above. Calls in an illegal order will\n raise an _IncludeError with an appropriate error message.\n\n \"\"\"\n\n # self._section will move monotonically through this set. If it ever\n # needs to move backwards, CheckNextIncludeOrder will raise an error.\n _INITIAL_SECTION = 0\n _MY_H_SECTION = 1\n _C_SECTION = 2\n _CPP_SECTION = 3\n _OTHER_SYS_SECTION = 4\n _OTHER_H_SECTION = 5\n\n _TYPE_NAMES = {\n _C_SYS_HEADER: \"C routing header\",\n _CPP_SYS_HEADER: \"C++ routing header\",\n _OTHER_SYS_HEADER: \"other routing header\",\n _LIKELY_MY_HEADER: \"header this file implements\",\n _POSSIBLE_MY_HEADER: \"header this file may implement\",\n _OTHER_HEADER: \"other header\",\n }\n _SECTION_NAMES = {\n _INITIAL_SECTION: \"... nothing. (This can't be an error.)\",\n _MY_H_SECTION: \"a header this file implements\",\n _C_SECTION: \"C routing header\",\n _CPP_SECTION: \"C++ routing header\",\n _OTHER_SYS_SECTION: \"other routing header\",\n _OTHER_H_SECTION: \"other header\",\n }\n\n def __init__(self):\n self.include_list = [[]]\n self._section = None\n self._last_header = None\n self.ResetSection(\"\")\n\n def FindHeader(self, header):\n \"\"\"Check if a header has already been included.\n\n Args:\n header: header to check.\n Returns:\n Line number of previous occurrence, or -1 if the header has not\n been seen before.\n \"\"\"\n for section_list in self.include_list:\n for f in section_list:\n if f[0] == header:\n return f[1]\n return -1\n\n def ResetSection(self, directive):\n \"\"\"Reset section checking for preprocessor directive.\n\n Args:\n directive: preprocessor directive (e.g. \"if\", \"else\").\n \"\"\"\n # The name of the current section.\n self._section = self._INITIAL_SECTION\n # The path of last found header.\n self._last_header = \"\"\n\n # Update list of includes. Note that we never pop from the\n # include list.\n if directive in (\"if\", \"ifdef\", \"ifndef\"):\n self.include_list.append([])\n elif directive in (\"else\", \"elif\"):\n self.include_list[-1] = []\n\n def SetLastHeader(self, header_path):\n self._last_header = header_path\n\n def CanonicalizeAlphabeticalOrder(self, header_path):\n \"\"\"Returns a path canonicalized for alphabetical comparison.\n\n - replaces \"-\" with \"_\" so they both cmp the same.\n - removes '-inl' since we don't require them to be after the main header.\n - lowercase everything, just in case.\n\n Args:\n header_path: Path to be canonicalized.\n\n Returns:\n Canonicalized path.\n \"\"\"\n return header_path.replace(\"-inl.h\", \".h\").replace(\"-\", \"_\").lower()\n\n def IsInAlphabeticalOrder(self, clean_lines, linenum, header_path):\n \"\"\"Check if a header is in alphabetical order with the previous header.\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n header_path: Canonicalized header to be checked.\n\n Returns:\n Returns true if the header is in alphabetical order.\n \"\"\"\n # If previous section is different from current section, _last_header will\n # be reset to empty string, so it's always less than current header.\n #\n # If previous line was a blank line, assume that the headers are\n # intentionally sorted the way they are.\n return not (\n self._last_header > header_path\n and re.match(r\"^\\s*#\\s*include\\b\", clean_lines.elided[linenum - 1])\n )\n\n def CheckNextIncludeOrder(self, header_type):\n \"\"\"Returns a non-empty error message if the next header is out of order.\n\n This function also updates the internal state to be ready to check\n the next include.\n\n Args:\n header_type: One of the _XXX_HEADER constants defined above.\n\n Returns:\n The empty string if the header is in the right order, or an\n error message describing what's wrong.\n\n \"\"\"\n error_message = (\n f\"Found {self._TYPE_NAMES[header_type]} after {self._SECTION_NAMES[self._section]}\"\n )\n\n last_section = self._section\n\n if header_type == _C_SYS_HEADER:\n if self._section <= self._C_SECTION:\n self._section = self._C_SECTION\n else:\n self._last_header = \"\"\n return error_message\n elif header_type == _CPP_SYS_HEADER:\n if self._section <= self._CPP_SECTION:\n self._section = self._CPP_SECTION\n else:\n self._last_header = \"\"\n return error_message\n elif header_type == _OTHER_SYS_HEADER:\n if self._section <= self._OTHER_SYS_SECTION:\n self._section = self._OTHER_SYS_SECTION\n else:\n self._last_header = \"\"\n return error_message\n elif header_type == _LIKELY_MY_HEADER:\n if self._section <= self._MY_H_SECTION:\n self._section = self._MY_H_SECTION\n else:\n self._section = self._OTHER_H_SECTION\n elif header_type == _POSSIBLE_MY_HEADER:\n if self._section <= self._MY_H_SECTION:\n self._section = self._MY_H_SECTION\n else:\n # This will always be the fallback because we're not sure\n # enough that the header is associated with this file.\n self._section = self._OTHER_H_SECTION\n else:\n assert header_type == _OTHER_HEADER\n self._section = self._OTHER_H_SECTION\n\n if last_section != self._section:\n self._last_header = \"\"\n\n return \"\"\n\n\nclass _CppLintState:\n \"\"\"Maintains module-wide state..\"\"\"\n\n def __init__(self):\n self.verbose_level = 1 # global setting.\n self.error_count = 0 # global count of reported errors\n # filters to apply when emitting error messages\n self.filters = _DEFAULT_FILTERS[:]\n # backup of filter list. Used to restore the state after each file.\n self._filters_backup = self.filters[:]\n self.counting = \"total\" # In what way are we counting errors?\n self.errors_by_category = {} # string to int dict storing error counts\n self.quiet = False # Suppress non-error messages?\n\n # output format:\n # \"emacs\" - format that emacs can parse (default)\n # \"eclipse\" - format that eclipse can parse\n # \"vs7\" - format that Microsoft Visual Studio 7 can parse\n # \"junit\" - format that Jenkins, Bamboo, etc can parse\n # \"sed\" - returns a gnu sed command to fix the problem\n # \"gsed\" - like sed, but names the command gsed, e.g. for macOS homebrew users\n self.output_format = \"emacs\"\n\n # For JUnit output, save errors and failures until the end so that they\n # can be written into the XML\n self._junit_errors = []\n self._junit_failures = []\n\n def SetOutputFormat(self, output_format):\n \"\"\"Sets the output format for errors.\"\"\"\n self.output_format = output_format\n\n def SetQuiet(self, quiet):\n \"\"\"Sets the module's quiet settings, and returns the previous setting.\"\"\"\n last_quiet = self.quiet\n self.quiet = quiet\n return last_quiet\n\n def SetVerboseLevel(self, level):\n \"\"\"Sets the module's verbosity, and returns the previous setting.\"\"\"\n last_verbose_level = self.verbose_level\n self.verbose_level = level\n return last_verbose_level\n\n def SetCountingStyle(self, counting_style):\n \"\"\"Sets the module's counting options.\"\"\"\n self.counting = counting_style\n\n def SetFilters(self, filters):\n \"\"\"Sets the error-message filters.\n\n These filters are applied when deciding whether to emit a given\n error message.\n\n Args:\n filters: A string of comma-separated filters (eg \"+whitespace/indent\").\n Each filter should start with + or -; else we die.\n\n Raises:\n ValueError: The comma-separated filters did not all start with '+' or '-'.\n E.g. \"-,+whitespace,-whitespace/indent,whitespace/badfilter\"\n \"\"\"\n # Default filters always have less priority than the flag ones.\n self.filters = _DEFAULT_FILTERS[:]\n self.AddFilters(filters)\n\n def AddFilters(self, filters):\n \"\"\"Adds more filters to the existing list of error-message filters.\"\"\"\n for filt in filters.split(\",\"):\n clean_filt = filt.strip()\n if clean_filt:\n self.filters.append(clean_filt)\n for filt in self.filters:\n if not filt.startswith((\"+\", \"-\")):\n msg = f\"Every filter in --filters must start with + or - ({filt} does not)\"\n raise ValueError(msg)\n\n def BackupFilters(self):\n \"\"\"Saves the current filter list to backup storage.\"\"\"\n self._filters_backup = self.filters[:]\n\n def RestoreFilters(self):\n \"\"\"Restores filters previously backed up.\"\"\"\n self.filters = self._filters_backup[:]\n\n def ResetErrorCounts(self):\n \"\"\"Sets the module's error statistic back to zero.\"\"\"\n self.error_count = 0\n self.errors_by_category = {}\n\n def IncrementErrorCount(self, category):\n \"\"\"Bumps the module's error statistic.\"\"\"\n self.error_count += 1\n if self.counting in (\"toplevel\", \"detailed\"):\n if self.counting != \"detailed\":\n category = category.split(\"/\")[0]\n if category not in self.errors_by_category:\n self.errors_by_category[category] = 0\n self.errors_by_category[category] += 1\n\n def PrintErrorCounts(self):\n \"\"\"Print a summary of errors by category, and the total.\"\"\"\n for category, count in sorted(dict.items(self.errors_by_category)):\n self.PrintInfo(f\"Category '{category}' errors found: {count}\\n\")\n if self.error_count > 0:\n self.PrintInfo(f\"Total errors found: {self.error_count}\\n\")\n\n def PrintInfo(self, message):\n # _quiet does not represent --quiet flag.\n # Hide infos from stdout to keep stdout pure for machine consumption\n if not _quiet and self.output_format not in _MACHINE_OUTPUTS:\n sys.stdout.write(message)\n\n def PrintError(self, message):\n if self.output_format == \"junit\":\n self._junit_errors.append(message)\n else:\n sys.stderr.write(message)\n\n def AddJUnitFailure(self, filename, linenum, message, category, confidence):\n self._junit_failures.append((filename, linenum, message, category, confidence))\n\n def FormatJUnitXML(self):\n num_errors = len(self._junit_errors)\n num_failures = len(self._junit_failures)\n\n testsuite = xml.etree.ElementTree.Element(\"testsuite\")\n testsuite.attrib[\"errors\"] = str(num_errors)\n testsuite.attrib[\"failures\"] = str(num_failures)\n testsuite.attrib[\"name\"] = \"cpplint\"\n\n if num_errors == 0 and num_failures == 0:\n testsuite.attrib[\"tests\"] = str(1)\n xml.etree.ElementTree.SubElement(testsuite, \"testcase\", name=\"passed\")\n\n else:\n testsuite.attrib[\"tests\"] = str(num_errors + num_failures)\n if num_errors > 0:\n testcase = xml.etree.ElementTree.SubElement(testsuite, \"testcase\")\n testcase.attrib[\"name\"] = \"errors\"\n error = xml.etree.ElementTree.SubElement(testcase, \"error\")\n error.text = \"\\n\".join(self._junit_errors)\n if num_failures > 0:\n # Group failures by file\n failed_file_order = []\n failures_by_file = {}\n for failure in self._junit_failures:\n failed_file = failure[0]\n if failed_file not in failed_file_order:\n failed_file_order.append(failed_file)\n failures_by_file[failed_file] = []\n failures_by_file[failed_file].append(failure)\n # Create a testcase for each file\n for failed_file in failed_file_order:\n failures = failures_by_file[failed_file]\n testcase = xml.etree.ElementTree.SubElement(testsuite, \"testcase\")\n testcase.attrib[\"name\"] = failed_file\n failure = xml.etree.ElementTree.SubElement(testcase, \"failure\")\n template = \"{0}: {1} [{2}] [{3}]\"\n texts = [template.format(f[1], f[2], f[3], f[4]) for f in failures]\n failure.text = \"\\n\".join(texts)\n\n xml_decl = '\\n'\n return xml_decl + xml.etree.ElementTree.tostring(testsuite, \"utf-8\").decode(\"utf-8\")\n\n\n_cpplint_state = _CppLintState()\n\n\ndef _OutputFormat():\n \"\"\"Gets the module's output format.\"\"\"\n return _cpplint_state.output_format\n\n\ndef _SetOutputFormat(output_format):\n \"\"\"Sets the module's output format.\"\"\"\n _cpplint_state.SetOutputFormat(output_format)\n\n\ndef _Quiet():\n \"\"\"Return's the module's quiet setting.\"\"\"\n return _cpplint_state.quiet\n\n\ndef _SetQuiet(quiet):\n \"\"\"Set the module's quiet status, and return previous setting.\"\"\"\n return _cpplint_state.SetQuiet(quiet)\n\n\ndef _VerboseLevel():\n \"\"\"Returns the module's verbosity setting.\"\"\"\n return _cpplint_state.verbose_level\n\n\ndef _SetVerboseLevel(level):\n \"\"\"Sets the module's verbosity, and returns the previous setting.\"\"\"\n return _cpplint_state.SetVerboseLevel(level)\n\n\ndef _SetCountingStyle(level):\n \"\"\"Sets the module's counting options.\"\"\"\n _cpplint_state.SetCountingStyle(level)\n\n\ndef _Filters():\n \"\"\"Returns the module's list of output filters, as a list.\"\"\"\n return _cpplint_state.filters\n\n\ndef _SetFilters(filters):\n \"\"\"Sets the module's error-message filters.\n\n These filters are applied when deciding whether to emit a given\n error message.\n\n Args:\n filters: A string of comma-separated filters (eg \"whitespace/indent\").\n Each filter should start with + or -; else we die.\n \"\"\"\n _cpplint_state.SetFilters(filters)\n\n\ndef _AddFilters(filters):\n \"\"\"Adds more filter overrides.\n\n Unlike _SetFilters, this function does not reset the current list of filters\n available.\n\n Args:\n filters: A string of comma-separated filters (eg \"whitespace/indent\").\n Each filter should start with + or -; else we die.\n \"\"\"\n _cpplint_state.AddFilters(filters)\n\n\ndef _BackupFilters():\n \"\"\"Saves the current filter list to backup storage.\"\"\"\n _cpplint_state.BackupFilters()\n\n\ndef _RestoreFilters():\n \"\"\"Restores filters previously backed up.\"\"\"\n _cpplint_state.RestoreFilters()\n\n\nclass _FunctionState:\n \"\"\"Tracks current function name and the number of lines in its body.\"\"\"\n\n _NORMAL_TRIGGER = 250 # for --v=0, 500 for --v=1, etc.\n _TEST_TRIGGER = 400 # about 50% more than _NORMAL_TRIGGER.\n\n def __init__(self):\n self.in_a_function = False\n self.lines_in_function = 0\n self.current_function = \"\"\n\n def Begin(self, function_name):\n \"\"\"Start analyzing function body.\n\n Args:\n function_name: The name of the function being tracked.\n \"\"\"\n self.in_a_function = True\n self.lines_in_function = 0\n self.current_function = function_name\n\n def Count(self):\n \"\"\"Count line in current function body.\"\"\"\n if self.in_a_function:\n self.lines_in_function += 1\n\n def Check(self, error, filename, linenum):\n \"\"\"Report if too many lines in function body.\n\n Args:\n error: The function to call with any errors found.\n filename: The name of the current file.\n linenum: The number of the line to check.\n \"\"\"\n if not self.in_a_function:\n return\n\n if re.match(r\"T(EST|est)\", self.current_function):\n base_trigger = self._TEST_TRIGGER\n else:\n base_trigger = self._NORMAL_TRIGGER\n trigger = base_trigger * 2 ** _VerboseLevel()\n\n if self.lines_in_function > trigger:\n error_level = int(math.log2(self.lines_in_function / base_trigger))\n # 50 => 0, 100 => 1, 200 => 2, 400 => 3, 800 => 4, 1600 => 5, ...\n error_level = min(error_level, 5)\n error(\n filename,\n linenum,\n \"readability/fn_size\",\n error_level,\n \"Small and focused functions are preferred:\"\n f\" {self.current_function} has {self.lines_in_function} non-comment lines\"\n f\" (error triggered by exceeding {trigger} lines).\",\n )\n\n def End(self):\n \"\"\"Stop analyzing function body.\"\"\"\n self.in_a_function = False\n\n\nclass _IncludeError(Exception):\n \"\"\"Indicates a problem with the include order in a file.\"\"\"\n\n pass\n\n\nclass FileInfo:\n \"\"\"Provides utility functions for filenames.\n\n FileInfo provides easy access to the components of a file's path\n relative to the project root.\n \"\"\"\n\n def __init__(self, filename):\n self._filename = filename\n\n def FullName(self):\n \"\"\"Make Windows paths like Unix.\"\"\"\n return os.path.abspath(self._filename).replace(\"\\\\\", \"/\")\n\n def RepositoryName(self):\n r\"\"\"FullName after removing the local path to the repository.\n\n If we have a real absolute path name here we can try to do something smart:\n detecting the root of the checkout and truncating /path/to/checkout from\n the name so that we get header guards that don't include things like\n \"C:\\\\Documents and Settings\\\\...\" or \"/home/username/...\" in them and thus\n people on different computers who have checked the source out to different\n locations won't see bogus errors.\n \"\"\"\n fullname = self.FullName()\n\n if os.path.exists(fullname):\n project_dir = os.path.dirname(fullname)\n\n # If the user specified a repository path, it exists, and the file is\n # contained in it, use the specified repository path\n if _repository:\n repo = FileInfo(_repository).FullName()\n root_dir = project_dir\n while os.path.exists(root_dir):\n # allow case insensitive compare on Windows\n if os.path.normcase(root_dir) == os.path.normcase(repo):\n return os.path.relpath(fullname, root_dir).replace(\"\\\\\", \"/\")\n one_up_dir = os.path.dirname(root_dir)\n if one_up_dir == root_dir:\n break\n root_dir = one_up_dir\n\n if os.path.exists(os.path.join(project_dir, \".svn\")):\n # If there's a .svn file in the current directory, we recursively look\n # up the directory tree for the top of the SVN checkout\n root_dir = project_dir\n one_up_dir = os.path.dirname(root_dir)\n while os.path.exists(os.path.join(one_up_dir, \".svn\")):\n root_dir = os.path.dirname(root_dir)\n one_up_dir = os.path.dirname(one_up_dir)\n\n prefix = os.path.commonprefix([root_dir, project_dir])\n return fullname[len(prefix) + 1 :]\n\n # Not SVN <= 1.6? Try to find a git, hg, or svn top level directory by\n # searching up from the current path.\n root_dir = current_dir = os.path.dirname(fullname)\n while current_dir != os.path.dirname(current_dir):\n if (\n os.path.exists(os.path.join(current_dir, \".git\"))\n or os.path.exists(os.path.join(current_dir, \".hg\"))\n or os.path.exists(os.path.join(current_dir, \".svn\"))\n ):\n root_dir = current_dir\n break\n current_dir = os.path.dirname(current_dir)\n\n if (\n os.path.exists(os.path.join(root_dir, \".git\"))\n or os.path.exists(os.path.join(root_dir, \".hg\"))\n or os.path.exists(os.path.join(root_dir, \".svn\"))\n ):\n prefix = os.path.commonprefix([root_dir, project_dir])\n return fullname[len(prefix) + 1 :]\n\n # Don't know what to do; header guard warnings may be wrong...\n return fullname\n\n def Split(self):\n \"\"\"Splits the file into the directory, basename, and extension.\n\n For 'chrome/browser/browser.cc', Split() would\n return ('chrome/browser', 'browser', '.cc')\n\n Returns:\n A tuple of (directory, basename, extension).\n \"\"\"\n\n googlename = self.RepositoryName()\n project, rest = os.path.split(googlename)\n return (project,) + os.path.splitext(rest)\n\n def BaseName(self):\n \"\"\"File base name - text after the final slash, before the final period.\"\"\"\n return self.Split()[1]\n\n def Extension(self):\n \"\"\"File extension - text following the final period, includes that period.\"\"\"\n return self.Split()[2]\n\n def NoExtension(self):\n \"\"\"File has no source file extension.\"\"\"\n return \"/\".join(self.Split()[0:2])\n\n def IsSource(self):\n \"\"\"File has a source file extension.\"\"\"\n return _IsSourceExtension(self.Extension()[1:])\n\n\ndef _ShouldPrintError(category, confidence, filename, linenum):\n \"\"\"If confidence >= verbose, category passes filter and is not suppressed.\"\"\"\n\n # There are three ways we might decide not to print an error message:\n # a \"NOLINT(category)\" comment appears in the source,\n # the verbosity level isn't high enough, or the filters filter it out.\n if IsErrorSuppressedByNolint(category, linenum):\n return False\n\n if confidence < _cpplint_state.verbose_level:\n return False\n\n is_filtered = False\n for one_filter in _Filters():\n filter_cat, filter_file, filter_line = _ParseFilterSelector(one_filter[1:])\n category_match = category.startswith(filter_cat)\n file_match = filter_file in (\"\", filename)\n line_match = filter_line in (linenum, -1)\n\n if one_filter.startswith(\"-\"):\n if category_match and file_match and line_match:\n is_filtered = True\n elif one_filter.startswith(\"+\"):\n if category_match and file_match and line_match:\n is_filtered = False\n else:\n # should have been checked for in SetFilter.\n msg = f\"Invalid filter: {one_filter}\"\n raise ValueError(msg)\n return not is_filtered\n\n\ndef Error(filename, linenum, category, confidence, message):\n \"\"\"Logs the fact we've found a lint error.\n\n We log where the error was found, and also our confidence in the error,\n that is, how certain we are this is a legitimate style regression, and\n not a misidentification or a use that's sometimes justified.\n\n False positives can be suppressed by the use of \"NOLINT(category)\"\n comments, NOLINTNEXTLINE or in blocks started by NOLINTBEGIN. These\n are parsed into _error_suppressions.\n\n Args:\n filename: The name of the file containing the error.\n linenum: The number of the line containing the error.\n category: A string used to describe the \"category\" this bug\n falls under: \"whitespace\", say, or \"runtime\". Categories\n may have a hierarchy separated by slashes: \"whitespace/indent\".\n confidence: A number from 1-5 representing a confidence score for\n the error, with 5 meaning that we are certain of the problem,\n and 1 meaning that it could be a legitimate construct.\n message: The error message.\n \"\"\"\n if _ShouldPrintError(category, confidence, filename, linenum):\n _cpplint_state.IncrementErrorCount(category)\n if _cpplint_state.output_format == \"vs7\":\n _cpplint_state.PrintError(\n f\"{filename}({linenum}): error cpplint: [{category}] {message} [{confidence}]\\n\"\n )\n elif _cpplint_state.output_format == \"eclipse\":\n sys.stderr.write(\n f\"{filename}:{linenum}: warning: {message} [{category}] [{confidence}]\\n\"\n )\n elif _cpplint_state.output_format == \"junit\":\n _cpplint_state.AddJUnitFailure(filename, linenum, message, category, confidence)\n elif _cpplint_state.output_format in [\"sed\", \"gsed\"]:\n if message in _SED_FIXUPS:\n sys.stdout.write(\n f\"{_cpplint_state.output_format} -i\"\n f\" '{linenum}{_SED_FIXUPS[message]}' {filename}\"\n f\" # {message} [{category}] [{confidence}]\\n\"\n )\n else:\n sys.stderr.write(\n f'# {filename}:{linenum}: \"{message}\" [{category}] [{confidence}]\\n'\n )\n else:\n final_message = f\"{filename}:{linenum}: {message} [{category}] [{confidence}]\\n\"\n sys.stderr.write(final_message)\n\n\n# Matches standard C++ escape sequences per 2.13.2.3 of the C++ standard.\n_RE_PATTERN_CLEANSE_LINE_ESCAPES = re.compile(r'\\\\([abfnrtv?\"\\\\\\']|\\d+|x[0-9a-fA-F]+)')\n# Match a single C style comment on the same line.\n_RE_PATTERN_C_COMMENTS = r\"/\\*(?:[^*]|\\*(?!/))*\\*/\"\n# Matches multi-line C style comments.\n# This RE is a little bit more complicated than one might expect, because we\n# have to take care of space removals tools so we can handle comments inside\n# statements better.\n# The current rule is: We only clear spaces from both sides when we're at the\n# end of the line. Otherwise, we try to remove spaces from the right side,\n# if this doesn't work we try on left side but only if there's a non-character\n# on the right.\n_RE_PATTERN_CLEANSE_LINE_C_COMMENTS = re.compile(\n r\"(\\s*\"\n + _RE_PATTERN_C_COMMENTS\n + r\"\\s*$|\"\n + _RE_PATTERN_C_COMMENTS\n + r\"\\s+|\"\n + r\"\\s+\"\n + _RE_PATTERN_C_COMMENTS\n + r\"(?=\\W)|\"\n + _RE_PATTERN_C_COMMENTS\n + r\")\"\n)\n\n\ndef IsCppString(line):\n \"\"\"Does line terminate so, that the next symbol is in string constant.\n\n This function does not consider single-line nor multi-line comments.\n\n Args:\n line: is a partial line of code starting from the 0..n.\n\n Returns:\n True, if next character appended to 'line' is inside a\n string constant.\n \"\"\"\n\n line = line.replace(r\"\\\\\", \"XX\") # after this, \\\\\" does not match to \\\"\n return ((line.count('\"') - line.count(r\"\\\"\") - line.count(\"'\\\"'\")) & 1) == 1\n\n\ndef CleanseRawStrings(raw_lines):\n \"\"\"Removes C++11 raw strings from lines.\n\n Before:\n static const char kData[] = R\"(\n multi-line string\n )\";\n\n After:\n static const char kData[] = \"\"\n (replaced by blank line)\n \"\";\n\n Args:\n raw_lines: list of raw lines.\n\n Returns:\n list of lines with C++11 raw strings replaced by empty strings.\n \"\"\"\n\n delimiter = None\n lines_without_raw_strings = []\n for line in raw_lines:\n if delimiter:\n # Inside a raw string, look for the end\n end = line.find(delimiter)\n if end >= 0:\n # Found the end of the string, match leading space for this\n # line and resume copying the original lines, and also insert\n # a \"\" on the last line.\n leading_space = re.match(r\"^(\\s*)\\S\", line)\n line = leading_space.group(1) + '\"\"' + line[end + len(delimiter) :]\n delimiter = None\n else:\n # Haven't found the end yet, append a blank line.\n line = '\"\"'\n\n # Look for beginning of a raw string, and replace them with\n # empty strings. This is done in a loop to handle multiple raw\n # strings on the same line.\n while delimiter is None:\n # Look for beginning of a raw string.\n # See 2.14.15 [lex.string] for syntax.\n #\n # Once we have matched a raw string, we check the prefix of the\n # line to make sure that the line is not part of a single line\n # comment. It's done this way because we remove raw strings\n # before removing comments as opposed to removing comments\n # before removing raw strings. This is because there are some\n # cpplint checks that requires the comments to be preserved, but\n # we don't want to check comments that are inside raw strings.\n matched = re.match(r'^(.*?)\\b(?:R|u8R|uR|UR|LR)\"([^\\s\\\\()]*)\\((.*)$', line)\n if matched and not re.match(\n r'^([^\\'\"]|\\'(\\\\.|[^\\'])*\\'|\"(\\\\.|[^\"])*\")*//', matched.group(1)\n ):\n delimiter = \")\" + matched.group(2) + '\"'\n\n end = matched.group(3).find(delimiter)\n if end >= 0:\n # Raw string ended on same line\n line = matched.group(1) + '\"\"' + matched.group(3)[end + len(delimiter) :]\n delimiter = None\n else:\n # Start of a multi-line raw string\n line = matched.group(1) + '\"\"'\n else:\n break\n\n lines_without_raw_strings.append(line)\n\n # TODO(google): if delimiter is not None here, we might want to\n # emit a warning for unterminated string.\n return lines_without_raw_strings\n\n\ndef FindNextMultiLineCommentStart(lines, lineix):\n \"\"\"Find the beginning marker for a multiline comment.\"\"\"\n while lineix < len(lines):\n if lines[lineix].strip().startswith(\"/*\"):\n # Only return this marker if the comment goes beyond this line\n if lines[lineix].strip().find(\"*/\", 2) < 0:\n return lineix\n lineix += 1\n return len(lines)\n\n\ndef FindNextMultiLineCommentEnd(lines, lineix):\n \"\"\"We are inside a comment, find the end marker.\"\"\"\n while lineix < len(lines):\n if lines[lineix].strip().endswith(\"*/\"):\n return lineix\n lineix += 1\n return len(lines)\n\n\ndef RemoveMultiLineCommentsFromRange(lines, begin, end):\n \"\"\"Clears a range of lines for multi-line comments.\"\"\"\n # Having // comments makes the lines non-empty, so we will not get\n # unnecessary blank line warnings later in the code.\n for i in range(begin, end):\n lines[i] = \"/**/\"\n\n\ndef RemoveMultiLineComments(filename, lines, error):\n \"\"\"Removes multiline (c-style) comments from lines.\"\"\"\n lineix = 0\n while lineix < len(lines):\n lineix_begin = FindNextMultiLineCommentStart(lines, lineix)\n if lineix_begin >= len(lines):\n return\n lineix_end = FindNextMultiLineCommentEnd(lines, lineix_begin)\n if lineix_end >= len(lines):\n error(\n filename,\n lineix_begin + 1,\n \"readability/multiline_comment\",\n 5,\n \"Could not find end of multi-line comment\",\n )\n return\n RemoveMultiLineCommentsFromRange(lines, lineix_begin, lineix_end + 1)\n lineix = lineix_end + 1\n\n\ndef CleanseComments(line):\n \"\"\"Removes //-comments and single-line C-style /* */ comments.\n\n Args:\n line: A line of C++ source.\n\n Returns:\n The line with single-line comments removed.\n \"\"\"\n commentpos = line.find(\"//\")\n if commentpos != -1 and not IsCppString(line[:commentpos]):\n line = line[:commentpos].rstrip()\n # get rid of /* ... */\n return _RE_PATTERN_CLEANSE_LINE_C_COMMENTS.sub(\"\", line)\n\n\ndef ReplaceAlternateTokens(line):\n \"\"\"Replace any alternate token by its original counterpart.\n\n In order to comply with the google rule stating that unary operators should\n never be followed by a space, an exception is made for the 'not' and 'compl'\n alternate tokens. For these, any trailing space is removed during the\n conversion.\n\n Args:\n line: The line being processed.\n\n Returns:\n The line with alternate tokens replaced.\n \"\"\"\n for match in _ALT_TOKEN_REPLACEMENT_PATTERN.finditer(line):\n token = _ALT_TOKEN_REPLACEMENT[match.group(2)]\n tail = \"\" if match.group(2) in [\"not\", \"compl\"] and match.group(3) == \" \" else r\"\\3\"\n line = re.sub(match.re, rf\"\\1{token}{tail}\", line, count=1)\n return line\n\n\nclass CleansedLines:\n \"\"\"Holds 4 copies of all lines with different preprocessing applied to them.\n\n 1) elided member contains lines without strings and comments.\n 2) lines member contains lines without comments.\n 3) raw_lines member contains all the lines without processing.\n 4) lines_without_raw_strings member is same as raw_lines, but with C++11 raw\n strings removed.\n All these members are of , and of the same length.\n \"\"\"\n\n def __init__(self, lines):\n if \"-readability/alt_tokens\" in _cpplint_state.filters:\n for i, line in enumerate(lines):\n lines[i] = ReplaceAlternateTokens(line)\n self.elided = []\n self.lines = []\n self.raw_lines = lines\n self.num_lines = len(lines)\n self.lines_without_raw_strings = CleanseRawStrings(lines)\n for line in self.lines_without_raw_strings:\n self.lines.append(CleanseComments(line))\n elided = self._CollapseStrings(line)\n self.elided.append(CleanseComments(elided))\n\n def NumLines(self):\n \"\"\"Returns the number of lines represented.\"\"\"\n return self.num_lines\n\n @staticmethod\n def _CollapseStrings(elided):\n \"\"\"Collapses strings and chars on a line to simple \"\" or '' blocks.\n\n We nix strings first so we're not fooled by text like '\"http://\"'\n\n Args:\n elided: The line being processed.\n\n Returns:\n The line with collapsed strings.\n \"\"\"\n if _RE_PATTERN_INCLUDE.match(elided):\n return elided\n\n # Remove escaped characters first to make quote/single quote collapsing\n # basic. Things that look like escaped characters shouldn't occur\n # outside of strings and chars.\n elided = _RE_PATTERN_CLEANSE_LINE_ESCAPES.sub(\"\", elided)\n\n # Replace quoted strings and digit separators. Both single quotes\n # and double quotes are processed in the same loop, otherwise\n # nested quotes wouldn't work.\n collapsed = \"\"\n while True:\n # Find the first quote character\n match = re.match(r'^([^\\'\"]*)([\\'\"])(.*)$', elided)\n if not match:\n collapsed += elided\n break\n head, quote, tail = match.groups()\n\n if quote == '\"':\n # Collapse double quoted strings\n second_quote = tail.find('\"')\n if second_quote >= 0:\n collapsed += head + '\"\"'\n elided = tail[second_quote + 1 :]\n else:\n # Unmatched double quote, don't bother processing the rest\n # of the line since this is probably a multiline string.\n collapsed += elided\n break\n else:\n # Found single quote, check nearby text to eliminate digit separators.\n #\n # There is no special handling for floating point here, because\n # the integer/fractional/exponent parts would all be parsed\n # correctly as long as there are digits on both sides of the\n # separator. So we are fine as long as we don't see something\n # like \"0.'3\" (gcc 4.9.0 will not allow this literal).\n if re.search(r\"\\b(?:0[bBxX]?|[1-9])[0-9a-fA-F]*$\", head):\n match_literal = re.match(r\"^((?:\\'?[0-9a-zA-Z_])*)(.*)$\", \"'\" + tail)\n collapsed += head + match_literal.group(1).replace(\"'\", \"\")\n elided = match_literal.group(2)\n else:\n second_quote = tail.find(\"'\")\n if second_quote >= 0:\n collapsed += head + \"''\"\n elided = tail[second_quote + 1 :]\n else:\n # Unmatched single quote\n collapsed += elided\n break\n\n return collapsed\n\n\ndef FindEndOfExpressionInLine(line, startpos, stack):\n \"\"\"Find the position just after the end of current parenthesized expression.\n\n Args:\n line: a CleansedLines line.\n startpos: start searching at this position.\n stack: nesting stack at startpos.\n\n Returns:\n On finding matching end: (index just after matching end, None)\n On finding an unclosed expression: (-1, None)\n Otherwise: (-1, new stack at end of this line)\n \"\"\"\n for i in range(startpos, len(line)):\n char = line[i]\n if char in \"([{\":\n # Found start of parenthesized expression, push to expression stack\n stack.append(char)\n elif char == \"<\":\n # Found potential start of template argument list\n if i > 0 and line[i - 1] == \"<\":\n # Left shift operator\n if stack and stack[-1] == \"<\":\n stack.pop()\n if not stack:\n return (-1, None)\n elif i > 0 and re.search(r\"\\boperator\\s*$\", line[0:i]):\n # operator<, don't add to stack\n continue\n else:\n # Tentative start of template argument list\n stack.append(\"<\")\n elif char in \")]}\":\n # Found end of parenthesized expression.\n #\n # If we are currently expecting a matching '>', the pending '<'\n # must have been an operator. Remove them from expression stack.\n while stack and stack[-1] == \"<\":\n stack.pop()\n if not stack:\n return (-1, None)\n if (\n (stack[-1] == \"(\" and char == \")\")\n or (stack[-1] == \"[\" and char == \"]\")\n or (stack[-1] == \"{\" and char == \"}\")\n ):\n stack.pop()\n if not stack:\n return (i + 1, None)\n else:\n # Mismatched parentheses\n return (-1, None)\n elif char == \">\":\n # Found potential end of template argument list.\n\n # Ignore \"->\" and operator functions\n if i > 0 and (line[i - 1] == \"-\" or re.search(r\"\\boperator\\s*$\", line[0 : i - 1])):\n continue\n\n # Pop the stack if there is a matching '<'. Otherwise, ignore\n # this '>' since it must be an operator.\n if stack and stack[-1] == \"<\":\n stack.pop()\n if not stack:\n return (i + 1, None)\n elif char == \";\":\n # Found something that look like end of statements. If we are currently\n # expecting a '>', the matching '<' must have been an operator, since\n # template argument list should not contain statements.\n while stack and stack[-1] == \"<\":\n stack.pop()\n if not stack:\n return (-1, None)\n\n # Did not find end of expression or unbalanced parentheses on this line\n return (-1, stack)\n\n\ndef CloseExpression(clean_lines, linenum, pos):\n \"\"\"If input points to ( or { or [ or <, finds the position that closes it.\n\n If lines[linenum][pos] points to a '(' or '{' or '[' or '<', finds the\n linenum/pos that correspond to the closing of the expression.\n\n TODO(google): cpplint spends a fair bit of time matching parentheses.\n Ideally we would want to index all opening and closing parentheses once\n and have CloseExpression be just a simple lookup, but due to preprocessor\n tricks, this is not so easy.\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n pos: A position on the line.\n\n Returns:\n A tuple (line, linenum, pos) pointer *past* the closing brace, or\n (line, len(lines), -1) if we never find a close. Note we ignore\n strings and comments when matching; and the line we return is the\n 'cleansed' line at linenum.\n \"\"\"\n\n line = clean_lines.elided[linenum]\n if (line[pos] not in \"({[<\") or re.match(r\"<[<=]\", line[pos:]):\n return (line, clean_lines.NumLines(), -1)\n\n # Check first line\n (end_pos, stack) = FindEndOfExpressionInLine(line, pos, [])\n if end_pos > -1:\n return (line, linenum, end_pos)\n\n # Continue scanning forward\n while stack and linenum < clean_lines.NumLines() - 1:\n linenum += 1\n line = clean_lines.elided[linenum]\n (end_pos, stack) = FindEndOfExpressionInLine(line, 0, stack)\n if end_pos > -1:\n return (line, linenum, end_pos)\n\n # Did not find end of expression before end of file, give up\n return (line, clean_lines.NumLines(), -1)\n\n\ndef FindStartOfExpressionInLine(line, endpos, stack):\n \"\"\"Find position at the matching start of current expression.\n\n This is almost the reverse of FindEndOfExpressionInLine, but note\n that the input position and returned position differs by 1.\n\n Args:\n line: a CleansedLines line.\n endpos: start searching at this position.\n stack: nesting stack at endpos.\n\n Returns:\n On finding matching start: (index at matching start, None)\n On finding an unclosed expression: (-1, None)\n Otherwise: (-1, new stack at beginning of this line)\n \"\"\"\n i = endpos\n while i >= 0:\n char = line[i]\n if char in \")]}\":\n # Found end of expression, push to expression stack\n stack.append(char)\n elif char == \">\":\n # Found potential end of template argument list.\n #\n # Ignore it if it's a \"->\" or \">=\" or \"operator>\"\n if i > 0 and (\n line[i - 1] == \"-\"\n or re.match(r\"\\s>=\\s\", line[i - 1 :])\n or re.search(r\"\\boperator\\s*$\", line[0:i])\n ):\n i -= 1\n else:\n stack.append(\">\")\n elif char == \"<\":\n # Found potential start of template argument list\n if i > 0 and line[i - 1] == \"<\":\n # Left shift operator\n i -= 1\n else:\n # If there is a matching '>', we can pop the expression stack.\n # Otherwise, ignore this '<' since it must be an operator.\n if stack and stack[-1] == \">\":\n stack.pop()\n if not stack:\n return (i, None)\n elif char in \"([{\":\n # Found start of expression.\n #\n # If there are any unmatched '>' on the stack, they must be\n # operators. Remove those.\n while stack and stack[-1] == \">\":\n stack.pop()\n if not stack:\n return (-1, None)\n if (\n (char == \"(\" and stack[-1] == \")\")\n or (char == \"[\" and stack[-1] == \"]\")\n or (char == \"{\" and stack[-1] == \"}\")\n ):\n stack.pop()\n if not stack:\n return (i, None)\n else:\n # Mismatched parentheses\n return (-1, None)\n elif char == \";\":\n # Found something that look like end of statements. If we are currently\n # expecting a '<', the matching '>' must have been an operator, since\n # template argument list should not contain statements.\n while stack and stack[-1] == \">\":\n stack.pop()\n if not stack:\n return (-1, None)\n\n i -= 1\n\n return (-1, stack)\n\n\ndef ReverseCloseExpression(clean_lines, linenum, pos):\n \"\"\"If input points to ) or } or ] or >, finds the position that opens it.\n\n If lines[linenum][pos] points to a ')' or '}' or ']' or '>', finds the\n linenum/pos that correspond to the opening of the expression.\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n pos: A position on the line.\n\n Returns:\n A tuple (line, linenum, pos) pointer *at* the opening brace, or\n (line, 0, -1) if we never find the matching opening brace. Note\n we ignore strings and comments when matching; and the line we\n return is the 'cleansed' line at linenum.\n \"\"\"\n line = clean_lines.elided[linenum]\n if line[pos] not in \")}]>\":\n return (line, 0, -1)\n\n # Check last line\n (start_pos, stack) = FindStartOfExpressionInLine(line, pos, [])\n if start_pos > -1:\n return (line, linenum, start_pos)\n\n # Continue scanning backward\n while stack and linenum > 0:\n linenum -= 1\n line = clean_lines.elided[linenum]\n (start_pos, stack) = FindStartOfExpressionInLine(line, len(line) - 1, stack)\n if start_pos > -1:\n return (line, linenum, start_pos)\n\n # Did not find start of expression before beginning of file, give up\n return (line, 0, -1)\n\n\ndef CheckForCopyright(filename, lines, error):\n \"\"\"Logs an error if no Copyright message appears at the top of the file.\"\"\"\n\n # We'll say it should occur by line 10. Don't forget there's a\n # placeholder line at the front.\n for line in range(1, min(len(lines), 11)):\n if re.search(r\"Copyright\", lines[line], re.IGNORECASE):\n break\n else: # means no copyright line was found\n error(\n filename,\n 0,\n \"legal/copyright\",\n 5,\n \"No copyright message found. \"\n 'You should have a line: \"Copyright [year] \"',\n )\n\n\ndef GetIndentLevel(line):\n \"\"\"Return the number of leading spaces in line.\n\n Args:\n line: A string to check.\n\n Returns:\n An integer count of leading spaces, possibly zero.\n \"\"\"\n if indent := re.match(r\"^( *)\\S\", line):\n return len(indent.group(1))\n return 0\n\n\ndef PathSplitToList(path):\n \"\"\"Returns the path split into a list by the separator.\n\n Args:\n path: An absolute or relative path (e.g. '/a/b/c/' or '../a')\n\n Returns:\n A list of path components (e.g. ['a', 'b', 'c]).\n \"\"\"\n lst = []\n while True:\n (head, tail) = os.path.split(path)\n if head == path: # absolute paths end\n lst.append(head)\n break\n if tail == path: # relative paths end\n lst.append(tail)\n break\n\n path = head\n lst.append(tail)\n\n lst.reverse()\n return lst\n\n\ndef GetHeaderGuardCPPVariable(filename):\n \"\"\"Returns the CPP variable that should be used as a header guard.\n\n Args:\n filename: The name of a C++ header file.\n\n Returns:\n The CPP variable that should be used as a header guard in the\n named file.\n\n \"\"\"\n\n # Restores original filename in case that cpplint is invoked from Emacs's\n # flymake.\n filename = re.sub(r\"_flymake\\.h$\", \".h\", filename)\n filename = re.sub(r\"/\\.flymake/([^/]*)$\", r\"/\\1\", filename)\n # Replace 'c++' with 'cpp'.\n filename = filename.replace(\"C++\", \"cpp\").replace(\"c++\", \"cpp\")\n\n fileinfo = FileInfo(filename)\n file_path_from_root = fileinfo.RepositoryName()\n\n def FixupPathFromRoot():\n if _root_debug:\n sys.stderr.write(\n f\"\\n_root fixup, _root = '{_root}',\"\n f\" repository name = '{fileinfo.RepositoryName()}'\\n\"\n )\n\n # Process the file path with the --root flag if it was set.\n if not _root:\n if _root_debug:\n sys.stderr.write(\"_root unspecified\\n\")\n return file_path_from_root\n\n def StripListPrefix(lst, prefix):\n # f(['x', 'y'], ['w, z']) -> None (not a valid prefix)\n if lst[: len(prefix)] != prefix:\n return None\n # f(['a, 'b', 'c', 'd'], ['a', 'b']) -> ['c', 'd']\n return lst[(len(prefix)) :]\n\n # root behavior:\n # --root=subdir , lstrips subdir from the header guard\n maybe_path = StripListPrefix(PathSplitToList(file_path_from_root), PathSplitToList(_root))\n\n if _root_debug:\n sys.stderr.write(\n (\"_root lstrip (maybe_path=%s, file_path_from_root=%s,\" + \" _root=%s)\\n\")\n % (maybe_path, file_path_from_root, _root)\n )\n\n if maybe_path:\n return os.path.join(*maybe_path)\n\n # --root=.. , will prepend the outer directory to the header guard\n full_path = fileinfo.FullName()\n # adapt slashes for windows\n root_abspath = os.path.abspath(_root).replace(\"\\\\\", \"/\")\n\n maybe_path = StripListPrefix(PathSplitToList(full_path), PathSplitToList(root_abspath))\n\n if _root_debug:\n sys.stderr.write(\n (\"_root prepend (maybe_path=%s, full_path=%s, \" + \"root_abspath=%s)\\n\")\n % (maybe_path, full_path, root_abspath)\n )\n\n if maybe_path:\n return os.path.join(*maybe_path)\n\n if _root_debug:\n sys.stderr.write(f\"_root ignore, returning {file_path_from_root}\\n\")\n\n # --root=FAKE_DIR is ignored\n return file_path_from_root\n\n file_path_from_root = FixupPathFromRoot()\n return re.sub(r\"[^a-zA-Z0-9]\", \"_\", file_path_from_root).upper() + \"_\"\n\n\ndef CheckForHeaderGuard(filename, clean_lines, error, cppvar):\n \"\"\"Checks that the file contains a header guard.\n\n Logs an error if no #ifndef header guard is present. For other\n headers, checks that the full pathname is used.\n\n Args:\n filename: The name of the C++ header file.\n clean_lines: A CleansedLines instance containing the file.\n error: The function to call with any errors found.\n \"\"\"\n\n # Don't check for header guards if there are error suppression\n # comments somewhere in this file.\n #\n # Because this is silencing a warning for a nonexistent line, we\n # only support the very specific NOLINT(build/header_guard) syntax,\n # and not the general NOLINT or NOLINT(*) syntax.\n raw_lines = clean_lines.lines_without_raw_strings\n for i in raw_lines:\n if re.search(r\"//\\s*NOLINT\\(build/header_guard\\)\", i):\n return\n\n # Allow pragma once instead of header guards\n for i in raw_lines:\n if re.search(r\"^\\s*#pragma\\s+once\", i):\n return\n\n ifndef = \"\"\n ifndef_linenum = 0\n define = \"\"\n endif = \"\"\n endif_linenum = 0\n for linenum, line in enumerate(raw_lines):\n linesplit = line.split()\n if len(linesplit) >= 2:\n # find the first occurrence of #ifndef and #define, save arg\n if not ifndef and linesplit[0] == \"#ifndef\":\n # set ifndef to the header guard presented on the #ifndef line.\n ifndef = linesplit[1]\n ifndef_linenum = linenum\n if not define and linesplit[0] == \"#define\":\n define = linesplit[1]\n # find the last occurrence of #endif, save entire line\n if line.startswith(\"#endif\"):\n endif = line\n endif_linenum = linenum\n\n if not ifndef or not define or ifndef != define:\n error(\n filename,\n 0,\n \"build/header_guard\",\n 5,\n f\"No #ifndef header guard found, suggested CPP variable is: {cppvar}\",\n )\n return\n\n # The guard should be PATH_FILE_H_, but we also allow PATH_FILE_H__\n # for backward compatibility.\n if ifndef != cppvar:\n error_level = 0\n if ifndef != cppvar + \"_\":\n error_level = 5\n\n ParseNolintSuppressions(filename, raw_lines[ifndef_linenum], ifndef_linenum, error)\n error(\n filename,\n ifndef_linenum,\n \"build/header_guard\",\n error_level,\n f\"#ifndef header guard has wrong style, please use: {cppvar}\",\n )\n\n # Check for \"//\" comments on endif line.\n ParseNolintSuppressions(filename, raw_lines[endif_linenum], endif_linenum, error)\n match = re.match(r\"#endif\\s*//\\s*\" + cppvar + r\"(_)?\\b\", endif)\n if match:\n if match.group(1) == \"_\":\n # Issue low severity warning for deprecated double trailing underscore\n error(\n filename,\n endif_linenum,\n \"build/header_guard\",\n 0,\n f'#endif line should be \"#endif // {cppvar}\"',\n )\n return\n\n # Didn't find the corresponding \"//\" comment. If this file does not\n # contain any \"//\" comments at all, it could be that the compiler\n # only wants \"/**/\" comments, look for those instead.\n no_single_line_comments = True\n for i in range(1, len(raw_lines) - 1):\n line = raw_lines[i]\n if re.match(r'^(?:(?:\\'(?:\\.|[^\\'])*\\')|(?:\"(?:\\.|[^\"])*\")|[^\\'\"])*//', line):\n no_single_line_comments = False\n break\n\n if no_single_line_comments:\n match = re.match(r\"#endif\\s*/\\*\\s*\" + cppvar + r\"(_)?\\s*\\*/\", endif)\n if match:\n if match.group(1) == \"_\":\n # Low severity warning for double trailing underscore\n error(\n filename,\n endif_linenum,\n \"build/header_guard\",\n 0,\n f'#endif line should be \"#endif /* {cppvar} */\"',\n )\n return\n\n # Didn't find anything\n error(\n filename,\n endif_linenum,\n \"build/header_guard\",\n 5,\n f'#endif line should be \"#endif // {cppvar}\"',\n )\n\n\ndef CheckHeaderFileIncluded(filename, include_state, error):\n \"\"\"Logs an error if a source file does not include its header.\"\"\"\n\n # Do not check test files\n fileinfo = FileInfo(filename)\n if re.search(_TEST_FILE_SUFFIX, fileinfo.BaseName()):\n return\n\n first_include = message = None\n basefilename = filename[0 : len(filename) - len(fileinfo.Extension())]\n for ext in GetHeaderExtensions():\n headerfile = basefilename + \".\" + ext\n if not os.path.exists(headerfile):\n continue\n headername = FileInfo(headerfile).RepositoryName()\n include_uses_unix_dir_aliases = False\n for section_list in include_state.include_list:\n for f in section_list:\n include_text = f[0]\n if \"./\" in include_text:\n include_uses_unix_dir_aliases = True\n if headername in include_text or include_text in headername:\n return\n if not first_include:\n first_include = f[1]\n\n message = f\"{fileinfo.RepositoryName()} should include its header file {headername}\"\n if include_uses_unix_dir_aliases:\n message += \". Relative paths like . and .. are not allowed.\"\n\n if message:\n error(filename, first_include, \"build/include\", 5, message)\n\n\ndef CheckForBadCharacters(filename, lines, error):\n \"\"\"Logs an error for each line containing bad characters.\n\n Two kinds of bad characters:\n\n 1. Unicode replacement characters: These indicate that either the file\n contained invalid UTF-8 (likely) or Unicode replacement characters (which\n it shouldn't). Note that it's possible for this to throw off line\n numbering if the invalid UTF-8 occurred adjacent to a newline.\n\n 2. NUL bytes. These are problematic for some tools.\n\n Args:\n filename: The name of the current file.\n lines: An array of strings, each representing a line of the file.\n error: The function to call with any errors found.\n \"\"\"\n for linenum, line in enumerate(lines):\n if \"\\ufffd\" in line:\n error(\n filename,\n linenum,\n \"readability/utf8\",\n 5,\n \"Line contains invalid UTF-8 (or Unicode replacement character).\",\n )\n if \"\\0\" in line:\n error(filename, linenum, \"readability/nul\", 5, \"Line contains NUL byte.\")\n\n\ndef CheckForNewlineAtEOF(filename, lines, error):\n \"\"\"Logs an error if there is no newline char at the end of the file.\n\n Args:\n filename: The name of the current file.\n lines: An array of strings, each representing a line of the file.\n error: The function to call with any errors found.\n \"\"\"\n\n # The array lines() was created by adding two newlines to the\n # original file (go figure), then splitting on \\n.\n # To verify that the file ends in \\n, we just have to make sure the\n # last-but-two element of lines() exists and is empty.\n if len(lines) < 3 or lines[-2]:\n error(\n filename,\n len(lines) - 2,\n \"whitespace/ending_newline\",\n 5,\n \"Could not find a newline character at the end of the file.\",\n )\n\n\ndef CheckForMultilineCommentsAndStrings(filename, clean_lines, linenum, error):\n \"\"\"Logs an error if we see /* ... */ or \"...\" that extend past one line.\n\n /* ... */ comments are legit inside macros, for one line.\n Otherwise, we prefer // comments, so it's ok to warn about the\n other. Likewise, it's ok for strings to extend across multiple\n lines, as long as a line continuation character (backslash)\n terminates each line. Although not currently prohibited by the C++\n style guide, it's ugly and unnecessary. We don't do well with either\n in this lint program, so we warn about both.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # Remove all \\\\ (escaped backslashes) from the line. They are OK, and the\n # second (escaped) slash may trigger later \\\" detection erroneously.\n line = line.replace(\"\\\\\\\\\", \"\")\n\n if line.count(\"/*\") > line.count(\"*/\"):\n error(\n filename,\n linenum,\n \"readability/multiline_comment\",\n 5,\n \"Complex multi-line /*...*/-style comment found. \"\n \"Lint may give bogus warnings. \"\n \"Consider replacing these with //-style comments, \"\n \"with #if 0...#endif, \"\n \"or with more clearly structured multi-line comments.\",\n )\n\n if (line.count('\"') - line.count('\\\\\"')) % 2:\n error(\n filename,\n linenum,\n \"readability/multiline_string\",\n 5,\n 'Multi-line string (\"...\") found. This lint script doesn\\'t '\n \"do well with such strings, and may give bogus warnings. \"\n \"Use C++11 raw strings or concatenation instead.\",\n )\n\n\n# (non-threadsafe name, thread-safe alternative, validation pattern)\n#\n# The validation pattern is used to eliminate false positives such as:\n# _rand(); // false positive due to substring match.\n# ->rand(); // some member function rand().\n# ACMRandom rand(seed); // some variable named rand.\n# ISAACRandom rand(); // another variable named rand.\n#\n# Basically we require the return value of these functions to be used\n# in some expression context on the same line by matching on some\n# operator before the function name. This eliminates constructors and\n# member function calls.\n_UNSAFE_FUNC_PREFIX = r\"(?:[-+*/=%^&|(<]\\s*|>\\s+)\"\n_THREADING_LIST = (\n (\"asctime(\", \"asctime_r(\", _UNSAFE_FUNC_PREFIX + r\"asctime\\([^)]+\\)\"),\n (\"ctime(\", \"ctime_r(\", _UNSAFE_FUNC_PREFIX + r\"ctime\\([^)]+\\)\"),\n (\"getgrgid(\", \"getgrgid_r(\", _UNSAFE_FUNC_PREFIX + r\"getgrgid\\([^)]+\\)\"),\n (\"getgrnam(\", \"getgrnam_r(\", _UNSAFE_FUNC_PREFIX + r\"getgrnam\\([^)]+\\)\"),\n (\"getlogin(\", \"getlogin_r(\", _UNSAFE_FUNC_PREFIX + r\"getlogin\\(\\)\"),\n (\"getpwnam(\", \"getpwnam_r(\", _UNSAFE_FUNC_PREFIX + r\"getpwnam\\([^)]+\\)\"),\n (\"getpwuid(\", \"getpwuid_r(\", _UNSAFE_FUNC_PREFIX + r\"getpwuid\\([^)]+\\)\"),\n (\"gmtime(\", \"gmtime_r(\", _UNSAFE_FUNC_PREFIX + r\"gmtime\\([^)]+\\)\"),\n (\"localtime(\", \"localtime_r(\", _UNSAFE_FUNC_PREFIX + r\"localtime\\([^)]+\\)\"),\n (\"rand(\", \"rand_r(\", _UNSAFE_FUNC_PREFIX + r\"rand\\(\\)\"),\n (\"strtok(\", \"strtok_r(\", _UNSAFE_FUNC_PREFIX + r\"strtok\\([^)]+\\)\"),\n (\"ttyname(\", \"ttyname_r(\", _UNSAFE_FUNC_PREFIX + r\"ttyname\\([^)]+\\)\"),\n)\n\n\ndef CheckPosixThreading(filename, clean_lines, linenum, error):\n \"\"\"Checks for calls to thread-unsafe functions.\n\n Much code has been originally written without consideration of\n multi-threading. Also, engineers are relying on their old experience;\n they have learned posix before threading extensions were added. These\n tests guide the engineers to use thread-safe functions (when using\n posix directly).\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n for single_thread_func, multithread_safe_func, pattern in _THREADING_LIST:\n # Additional pattern matching check to confirm that this is the\n # function we are looking for\n if re.search(pattern, line):\n error(\n filename,\n linenum,\n \"runtime/threadsafe_fn\",\n 2,\n \"Consider using \"\n + multithread_safe_func\n + \"...) instead of \"\n + single_thread_func\n + \"...) for improved thread safety.\",\n )\n\n\ndef CheckVlogArguments(filename, clean_lines, linenum, error):\n \"\"\"Checks that VLOG() is only used for defining a logging level.\n\n For example, VLOG(2) is correct. VLOG(INFO), VLOG(WARNING), VLOG(ERROR), and\n VLOG(FATAL) are not.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n if re.search(r\"\\bVLOG\\((INFO|ERROR|WARNING|DFATAL|FATAL)\\)\", line):\n error(\n filename,\n linenum,\n \"runtime/vlog\",\n 5,\n \"VLOG() should be used with numeric verbosity level. \"\n \"Use LOG() if you want symbolic severity levels.\",\n )\n\n\n# Matches invalid increment: *count++, which moves pointer instead of\n# incrementing a value.\n_RE_PATTERN_INVALID_INCREMENT = re.compile(r\"^\\s*\\*\\w+(\\+\\+|--);\")\n\n\ndef CheckInvalidIncrement(filename, clean_lines, linenum, error):\n \"\"\"Checks for invalid increment *count++.\n\n For example following function:\n void increment_counter(int* count) {\n *count++;\n }\n is invalid, because it effectively does count++, moving pointer, and should\n be replaced with ++*count, (*count)++ or *count += 1.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n if _RE_PATTERN_INVALID_INCREMENT.match(line):\n error(\n filename,\n linenum,\n \"runtime/invalid_increment\",\n 5,\n \"Changing pointer instead of value (or unused value of operator*).\",\n )\n\n\ndef IsMacroDefinition(clean_lines, linenum):\n if re.search(r\"^#define\", clean_lines[linenum]):\n return True\n\n return bool(linenum > 0 and re.search(r\"\\\\$\", clean_lines[linenum - 1]))\n\n\ndef IsForwardClassDeclaration(clean_lines, linenum):\n return re.match(r\"^\\s*(\\btemplate\\b)*.*class\\s+\\w+;\\s*$\", clean_lines[linenum])\n\n\nclass _BlockInfo:\n \"\"\"Stores information about a generic block of code.\"\"\"\n\n def __init__(self, linenum, seen_open_brace):\n self.starting_linenum = linenum\n self.seen_open_brace = seen_open_brace\n self.open_parentheses = 0\n self.inline_asm = _NO_ASM\n self.check_namespace_indentation = False\n\n def CheckBegin(self, filename, clean_lines, linenum, error):\n \"\"\"Run checks that applies to text up to the opening brace.\n\n This is mostly for checking the text after the class identifier\n and the \"{\", usually where the base class is specified. For other\n blocks, there isn't much to check, so we always pass.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n pass\n\n def CheckEnd(self, filename, clean_lines, linenum, error):\n \"\"\"Run checks that applies to text after the closing brace.\n\n This is mostly used for checking end of namespace comments.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n pass\n\n def IsBlockInfo(self):\n \"\"\"Returns true if this block is a _BlockInfo.\n\n This is convenient for verifying that an object is an instance of\n a _BlockInfo, but not an instance of any of the derived classes.\n\n Returns:\n True for this class, False for derived classes.\n \"\"\"\n return self.__class__ == _BlockInfo\n\n\nclass _ExternCInfo(_BlockInfo):\n \"\"\"Stores information about an 'extern \"C\"' block.\"\"\"\n\n def __init__(self, linenum):\n _BlockInfo.__init__(self, linenum, True)\n\n\nclass _ClassInfo(_BlockInfo):\n \"\"\"Stores information about a class.\"\"\"\n\n def __init__(self, name, class_or_struct, clean_lines, linenum):\n _BlockInfo.__init__(self, linenum, False)\n self.name = name\n self.is_derived = False\n self.check_namespace_indentation = True\n if class_or_struct == \"struct\":\n self.access = \"public\"\n self.is_struct = True\n else:\n self.access = \"private\"\n self.is_struct = False\n\n # Remember initial indentation level for this class. Using raw_lines here\n # instead of elided to account for leading comments.\n self.class_indent = GetIndentLevel(clean_lines.raw_lines[linenum])\n\n # Try to find the end of the class. This will be confused by things like:\n # class A {\n # } *x = { ...\n #\n # But it's still good enough for CheckSectionSpacing.\n self.last_line = 0\n depth = 0\n for i in range(linenum, clean_lines.NumLines()):\n line = clean_lines.elided[i]\n depth += line.count(\"{\") - line.count(\"}\")\n if not depth:\n self.last_line = i\n break\n\n def CheckBegin(self, filename, clean_lines, linenum, error):\n # Look for a bare ':'\n if re.search(\"(^|[^:]):($|[^:])\", clean_lines.elided[linenum]):\n self.is_derived = True\n\n def CheckEnd(self, filename, clean_lines, linenum, error):\n # If there is a DISALLOW macro, it should appear near the end of\n # the class.\n seen_last_thing_in_class = False\n for i in range(linenum - 1, self.starting_linenum, -1):\n match = re.search(\n r\"\\b(DISALLOW_COPY_AND_ASSIGN|DISALLOW_IMPLICIT_CONSTRUCTORS)\\(\"\n + self.name\n + r\"\\)\",\n clean_lines.elided[i],\n )\n if match:\n if seen_last_thing_in_class:\n error(\n filename,\n i,\n \"readability/constructors\",\n 3,\n match.group(1) + \" should be the last thing in the class\",\n )\n break\n\n if not re.match(r\"^\\s*$\", clean_lines.elided[i]):\n seen_last_thing_in_class = True\n\n # Check that closing brace is aligned with beginning of the class.\n # Only do this if the closing brace is indented by only whitespaces.\n # This means we will not check single-line class definitions.\n indent = re.match(r\"^( *)\\}\", clean_lines.elided[linenum])\n if indent and len(indent.group(1)) != self.class_indent:\n if self.is_struct:\n parent = \"struct \" + self.name\n else:\n parent = \"class \" + self.name\n error(\n filename,\n linenum,\n \"whitespace/indent\",\n 3,\n f\"Closing brace should be aligned with beginning of {parent}\",\n )\n\n\nclass _ConstructorInfo(_BlockInfo):\n \"\"\"Stores information about a constructor.\n For detecting member initializer lists.\"\"\"\n\n def __init__(self, linenum: int):\n _BlockInfo.__init__(self, linenum, seen_open_brace=False)\n\n\nclass _NamespaceInfo(_BlockInfo):\n \"\"\"Stores information about a namespace.\"\"\"\n\n def __init__(self, name, linenum):\n _BlockInfo.__init__(self, linenum, False)\n self.name = name or \"\"\n self.check_namespace_indentation = True\n\n def CheckEnd(self, filename, clean_lines, linenum, error):\n \"\"\"Check end of namespace comments.\"\"\"\n line = clean_lines.raw_lines[linenum]\n\n # Check how many lines is enclosed in this namespace. Don't issue\n # warning for missing namespace comments if there aren't enough\n # lines. However, do apply checks if there is already an end of\n # namespace comment and it's incorrect.\n #\n # TODO(google): We always want to check end of namespace comments\n # if a namespace is large, but sometimes we also want to apply the\n # check if a short namespace contained nontrivial things (something\n # other than forward declarations). There is currently no logic on\n # deciding what these nontrivial things are, so this check is\n # triggered by namespace size only, which works most of the time.\n if linenum - self.starting_linenum < 10 and not re.match(\n r\"^\\s*};*\\s*(//|/\\*).*\\bnamespace\\b\", line\n ):\n return\n\n # Look for matching comment at end of namespace.\n #\n # Note that we accept C style \"/* */\" comments for terminating\n # namespaces, so that code that terminate namespaces inside\n # preprocessor macros can be cpplint clean.\n #\n # We also accept stuff like \"// end of namespace .\" with the\n # period at the end.\n #\n # Besides these, we don't accept anything else, otherwise we might\n # get false negatives when existing comment is a substring of the\n # expected namespace.\n if self.name:\n # Named namespace\n if not re.match(\n (r\"^\\s*};*\\s*(//|/\\*).*\\bnamespace\\s+\" + re.escape(self.name) + r\"[\\*/\\.\\\\\\s]*$\"),\n line,\n ):\n error(\n filename,\n linenum,\n \"readability/namespace\",\n 5,\n f'Namespace should be terminated with \"// namespace {self.name}\"',\n )\n else:\n # Anonymous namespace\n if not re.match(r\"^\\s*};*\\s*(//|/\\*).*\\bnamespace[\\*/\\.\\\\\\s]*$\", line):\n # If \"// namespace anonymous\" or \"// anonymous namespace (more text)\",\n # mention \"// anonymous namespace\" as an acceptable form\n if re.match(r\"^\\s*}.*\\b(namespace anonymous|anonymous namespace)\\b\", line):\n error(\n filename,\n linenum,\n \"readability/namespace\",\n 5,\n 'Anonymous namespace should be terminated with \"// namespace\"'\n ' or \"// anonymous namespace\"',\n )\n else:\n error(\n filename,\n linenum,\n \"readability/namespace\",\n 5,\n 'Anonymous namespace should be terminated with \"// namespace\"',\n )\n\n\nclass _WrappedInfo(_BlockInfo):\n \"\"\"Stores information about parentheses, initializer lists, etc.\n Not exactly a block but we do need the same signature.\n Needed to avoid namespace indentation false positives,\n though parentheses tracking would slow us down a lot\n and is effectively already done by open_parentheses.\"\"\"\n\n pass\n\n\nclass _MemInitListInfo(_WrappedInfo):\n \"\"\"Stores information about member initializer lists.\"\"\"\n\n pass\n\n\nclass _PreprocessorInfo:\n \"\"\"Stores checkpoints of nesting stacks when #if/#else is seen.\"\"\"\n\n def __init__(self, stack_before_if):\n # The entire nesting stack before #if\n self.stack_before_if = stack_before_if\n\n # The entire nesting stack up to #else\n self.stack_before_else = []\n\n # Whether we have already seen #else or #elif\n self.seen_else = False\n\n\nclass NestingState:\n \"\"\"Holds states related to parsing braces.\"\"\"\n\n def __init__(self):\n # Stack for tracking all braces. An object is pushed whenever we\n # see a \"{\", and popped when we see a \"}\". Only 3 types of\n # objects are possible:\n # - _ClassInfo: a class or struct.\n # - _NamespaceInfo: a namespace.\n # - _BlockInfo: some other type of block.\n self.stack: list[_BlockInfo] = []\n\n # Top of the previous stack before each Update().\n #\n # Because the nesting_stack is updated at the end of each line, we\n # had to do some convoluted checks to find out what is the current\n # scope at the beginning of the line. This check is simplified by\n # saving the previous top of nesting stack.\n #\n # We could save the full stack, but we only need the top. Copying\n # the full nesting stack would slow down cpplint by ~10%.\n self.previous_stack_top: _BlockInfo | None = None\n\n # The number of open parentheses in the previous stack top before the last update.\n # Used to prevent false indentation detection when e.g. a function parameter is indented.\n # We can't use previous_stack_top, a shallow copy whose open_parentheses value is updated.\n self.previous_open_parentheses = 0\n\n # The last stack item we popped.\n self.popped_top: _BlockInfo | None = None\n\n # Stack of _PreprocessorInfo objects.\n self.pp_stack = []\n\n def SeenOpenBrace(self):\n \"\"\"Check if we have seen the opening brace for the innermost block.\n\n Returns:\n True if we have seen the opening brace, False if the innermost\n block is still expecting an opening brace.\n \"\"\"\n return (not self.stack) or self.stack[-1].seen_open_brace\n\n def InNamespaceBody(self):\n \"\"\"Check if we are currently one level inside a namespace body.\n\n Returns:\n True if top of the stack is a namespace block, False otherwise.\n \"\"\"\n return self.stack and isinstance(self.stack[-1], _NamespaceInfo)\n\n def InExternC(self):\n \"\"\"Check if we are currently one level inside an 'extern \"C\"' block.\n\n Returns:\n True if top of the stack is an extern block, False otherwise.\n \"\"\"\n return self.stack and isinstance(self.stack[-1], _ExternCInfo)\n\n def InClassDeclaration(self):\n \"\"\"Check if we are currently one level inside a class or struct declaration.\n\n Returns:\n True if top of the stack is a class/struct, False otherwise.\n \"\"\"\n return self.stack and isinstance(self.stack[-1], _ClassInfo)\n\n def InAsmBlock(self):\n \"\"\"Check if we are currently one level inside an inline ASM block.\n\n Returns:\n True if the top of the stack is a block containing inline ASM.\n \"\"\"\n return self.stack and self.stack[-1].inline_asm != _NO_ASM\n\n def InTemplateArgumentList(self, clean_lines, linenum, pos):\n \"\"\"Check if current position is inside template argument list.\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n pos: position just after the suspected template argument.\n Returns:\n True if (linenum, pos) is inside template arguments.\n \"\"\"\n while linenum < clean_lines.NumLines():\n # Find the earliest character that might indicate a template argument\n line = clean_lines.elided[linenum]\n match = re.match(r\"^[^{};=\\[\\]\\.<>]*(.)\", line[pos:])\n if not match:\n linenum += 1\n pos = 0\n continue\n token = match.group(1)\n pos += len(match.group(0))\n\n # These things do not look like template argument list:\n # class Suspect {\n # class Suspect x; }\n if token in (\"{\", \"}\", \";\"):\n return False\n\n # These things look like template argument list:\n # template \n # template \n # template \n # template \n if token in (\">\", \"=\", \"[\", \"]\", \".\"):\n return True\n\n # Check if token is an unmatched '<'.\n # If not, move on to the next character.\n if token != \"<\":\n pos += 1\n if pos >= len(line):\n linenum += 1\n pos = 0\n continue\n\n # We can't be sure if we just find a single '<', and need to\n # find the matching '>'.\n (_, end_line, end_pos) = CloseExpression(clean_lines, linenum, pos - 1)\n if end_pos < 0:\n # Not sure if template argument list or syntax error in file\n return False\n linenum = end_line\n pos = end_pos\n return False\n\n def UpdatePreprocessor(self, line):\n \"\"\"Update preprocessor stack.\n\n We need to handle preprocessors due to classes like this:\n #ifdef SWIG\n struct ResultDetailsPageElementExtensionPoint {\n #else\n struct ResultDetailsPageElementExtensionPoint : public Extension {\n #endif\n\n We make the following assumptions (good enough for most files):\n - Preprocessor condition evaluates to true from #if up to first\n #else/#elif/#endif.\n\n - Preprocessor condition evaluates to false from #else/#elif up\n to #endif. We still perform lint checks on these lines, but\n these do not affect nesting stack.\n\n Args:\n line: current line to check.\n \"\"\"\n if re.match(r\"^\\s*#\\s*(if|ifdef|ifndef)\\b\", line):\n # Beginning of #if block, save the nesting stack here. The saved\n # stack will allow us to restore the parsing state in the #else case.\n self.pp_stack.append(_PreprocessorInfo(copy.deepcopy(self.stack)))\n elif re.match(r\"^\\s*#\\s*(else|elif)\\b\", line):\n # Beginning of #else block\n if self.pp_stack:\n if not self.pp_stack[-1].seen_else:\n # This is the first #else or #elif block. Remember the\n # whole nesting stack up to this point. This is what we\n # keep after the #endif.\n self.pp_stack[-1].seen_else = True\n self.pp_stack[-1].stack_before_else = copy.deepcopy(self.stack)\n\n # Restore the stack to how it was before the #if\n self.stack = copy.deepcopy(self.pp_stack[-1].stack_before_if)\n else:\n # TODO(google): unexpected #else, issue warning?\n pass\n elif re.match(r\"^\\s*#\\s*endif\\b\", line):\n # End of #if or #else blocks.\n if self.pp_stack:\n # If we saw an #else, we will need to restore the nesting\n # stack to its former state before the #else, otherwise we\n # will just continue from where we left off.\n if self.pp_stack[-1].seen_else:\n # Here we can just use a shallow copy since we are the last\n # reference to it.\n self.stack = self.pp_stack[-1].stack_before_else\n # Drop the corresponding #if\n self.pp_stack.pop()\n else:\n # TODO(google): unexpected #endif, issue warning?\n pass\n\n def _Pop(self):\n \"\"\"Pop the innermost state (top of the stack) and remember the popped item.\"\"\"\n self.popped_top = self.stack.pop()\n\n def _CountOpenParentheses(self, line: str):\n # Count parentheses. This is to avoid adding struct arguments to\n # the nesting stack.\n if self.stack:\n inner_block = self.stack[-1]\n depth_change = line.count(\"(\") - line.count(\")\")\n inner_block.open_parentheses += depth_change\n\n # Also check if we are starting or ending an inline assembly block.\n if inner_block.inline_asm in (_NO_ASM, _END_ASM):\n if (\n depth_change != 0\n and inner_block.open_parentheses == 1\n and _MATCH_ASM.match(line)\n ):\n # Enter assembly block\n inner_block.inline_asm = _INSIDE_ASM\n else:\n # Not entering assembly block. If previous line was _END_ASM,\n # we will now shift to _NO_ASM state.\n inner_block.inline_asm = _NO_ASM\n elif inner_block.inline_asm == _INSIDE_ASM and inner_block.open_parentheses == 0:\n # Exit assembly block\n inner_block.inline_asm = _END_ASM\n\n def _UpdateNamesapce(self, line: str, linenum: int) -> str | None:\n \"\"\"\n Match start of namespace, append to stack, and consume line\n Args:\n line: Line to check and consume\n linenum: Line number of the line to check\n\n Returns:\n The consumed line if namespace matched; None otherwise\n \"\"\"\n # Match start of namespace. The \"\\b\\s*\" below catches namespace\n # declarations even if it weren't followed by a whitespace, this\n # is so that we don't confuse our namespace checker. The\n # missing spaces will be flagged by CheckSpacing.\n namespace_decl_match = re.match(r\"^\\s*namespace\\b\\s*([:\\w]+)?(.*)$\", line)\n if not namespace_decl_match:\n return None\n\n new_namespace = _NamespaceInfo(namespace_decl_match.group(1), linenum)\n self.stack.append(new_namespace)\n\n line = namespace_decl_match.group(2)\n if line.find(\"{\") != -1:\n new_namespace.seen_open_brace = True\n line = line[line.find(\"{\") + 1 :]\n return line\n\n def _UpdateConstructor(self, line: str, linenum: int, class_name: str | None = None):\n \"\"\"\n Check if the given line is a constructor.\n Args:\n line: Line to check.\n class_name: If line checked is inside of a class block, a str of the class's name;\n otherwise, None.\n \"\"\"\n if not class_name:\n if not re.match(r\"\\s*(\\w*)\\s*::\\s*\\1\\s*\\(\", line):\n return\n elif not re.match(rf\"\\s*{re.escape(class_name)}\\s*\\(\", line):\n return\n\n self.stack.append(_ConstructorInfo(linenum))\n\n # TODO(google): Update() is too long, but we will refactor later.\n def Update(self, filename: str, clean_lines: CleansedLines, linenum: int, error):\n \"\"\"Update nesting state with current line.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # Remember top of the previous nesting stack.\n #\n # The stack is always pushed/popped and not modified in place, so\n # we can just do a shallow copy instead of copy.deepcopy. Using\n # deepcopy would slow down cpplint by ~28%.\n if self.stack:\n self.previous_stack_top = self.stack[-1]\n self.previous_open_parentheses = self.stack[-1].open_parentheses\n else:\n self.previous_stack_top = None\n\n # Update pp_stack\n self.UpdatePreprocessor(line)\n\n self._CountOpenParentheses(line)\n\n # Consume namespace declaration at the beginning of the line. Do\n # this in a loop so that we catch same line declarations like this:\n # namespace proto2 { namespace bridge { class MessageSet; } }\n while (new_line := self._UpdateNamesapce(line, linenum)) is not None: # could be empty str\n line = new_line\n\n # Look for a class declaration in whatever is left of the line\n # after parsing namespaces. The regexp accounts for decorated classes\n # such as in:\n # class LOCKABLE API Object {\n # };\n class_decl_match = re.match(\n r\"^(\\s*(?:template\\s*<[\\w\\s<>,:=]*>\\s*)?\"\n r\"(class|struct)\\s+(?:[a-zA-Z0-9_]+\\s+)*(\\w+(?:::\\w+)*))\"\n r\"(.*)$\",\n line,\n )\n if class_decl_match and (not self.stack or self.stack[-1].open_parentheses == 0):\n # We do not want to accept classes that are actually template arguments:\n # template ,\n # template class Ignore3>\n # void Function() {};\n #\n # To avoid template argument cases, we scan forward and look for\n # an unmatched '>'. If we see one, assume we are inside a\n # template argument list.\n end_declaration = len(class_decl_match.group(1))\n if not self.InTemplateArgumentList(clean_lines, linenum, end_declaration):\n self.stack.append(\n _ClassInfo(\n class_decl_match.group(3), class_decl_match.group(2), clean_lines, linenum\n )\n )\n line = class_decl_match.group(4)\n\n # If we have not yet seen the opening brace for the innermost block,\n # run checks here.\n if not self.SeenOpenBrace():\n self.stack[-1].CheckBegin(filename, clean_lines, linenum, error)\n\n # Update access control if we are directly inside a class/struct\n if self.stack and isinstance(self.stack[-1], _ClassInfo):\n if self.stack[-1].seen_open_brace:\n classinfo: _ClassInfo = self.stack[-1]\n # Update access control\n if access_match := re.match(\n r\"^(.*)\\b(public|private|protected|signals)(\\s+(?:slots\\s*)?)?\"\n r\":([^:].*|$)\",\n line,\n ):\n classinfo.access = access_match.group(2)\n\n # Check that access keywords are indented +1 space. Skip this\n # check if the keywords are not preceded by whitespaces.\n indent = access_match.group(1)\n if len(indent) != classinfo.class_indent + 1 and re.match(r\"^\\s*$\", indent):\n if classinfo.is_struct:\n parent = \"struct \" + classinfo.name\n else:\n parent = \"class \" + classinfo.name\n slots = \"\"\n if access_match.group(3):\n slots = access_match.group(3)\n error(\n filename,\n linenum,\n \"whitespace/indent\",\n 3,\n f\"{access_match.group(2)}{slots}:\"\n f\" should be indented +1 space inside {parent}\",\n )\n\n line = access_match.group(4)\n else:\n self._UpdateConstructor(line, linenum, class_name=classinfo.name)\n else: # Not in class\n self._UpdateConstructor(line, linenum)\n\n # If brace not open and we just finished a parenthetical definition,\n # check if we're in a member initializer list following a constructor.\n if (\n self.stack\n and (\n isinstance(self.stack[-1], _ConstructorInfo)\n or isinstance(self.previous_stack_top, _ConstructorInfo)\n )\n and not self.stack[-1].seen_open_brace\n and re.search(r\"[^:]:[^:]\", line)\n ):\n self.stack.append(_MemInitListInfo(linenum, seen_open_brace=False))\n\n # Consume braces or semicolons from what's left of the line\n while True:\n # Match first brace, semicolon, or closed parenthesis.\n matched = re.match(r\"^[^{;)}]*([{;)}])(.*)$\", line)\n if not matched:\n break\n\n token = matched.group(1)\n if token == \"{\":\n # If namespace or class hasn't seen an opening brace yet, mark\n # namespace/class head as complete. Push a new block onto the\n # stack otherwise.\n if not self.SeenOpenBrace():\n # End of initializer list wrap if present\n if isinstance(self.stack[-1], _MemInitListInfo):\n self._Pop()\n self.stack[-1].seen_open_brace = True\n elif re.match(r'^extern\\s*\"[^\"]*\"\\s*\\{', line):\n self.stack.append(_ExternCInfo(linenum))\n else:\n self.stack.append(_BlockInfo(linenum, True))\n if _MATCH_ASM.match(line):\n self.stack[-1].inline_asm = _BLOCK_ASM\n elif token == \";\":\n # If we haven't seen an opening brace yet, but we already saw\n # a semicolon, this is probably a forward declaration. Pop\n # the stack for these.\n if not self.SeenOpenBrace():\n self._Pop()\n elif token == \")\":\n # Similarly, if we haven't seen an opening brace yet, but we\n # already saw a closing parenthesis, then these are probably\n # function arguments with extra \"class\" or \"struct\" keywords.\n # Also pop these stack for these.\n if (\n self.stack\n and not self.stack[-1].seen_open_brace\n and isinstance(self.stack[-1], _ClassInfo)\n ):\n self._Pop()\n else: # token == '}'\n # Perform end of block checks and pop the stack.\n if self.stack:\n self.stack[-1].CheckEnd(filename, clean_lines, linenum, error)\n self._Pop()\n line = matched.group(2)\n\n def InnermostClass(self):\n \"\"\"Get class info on the top of the stack.\n\n Returns:\n A _ClassInfo object if we are inside a class, or None otherwise.\n \"\"\"\n for i in range(len(self.stack), 0, -1):\n classinfo = self.stack[i - 1]\n if isinstance(classinfo, _ClassInfo):\n return classinfo\n return None\n\n\ndef CheckForNonStandardConstructs(filename, clean_lines, linenum, nesting_state, error):\n r\"\"\"Logs an error if we see certain non-ANSI constructs ignored by gcc-2.\n\n Complain about several constructs which gcc-2 accepts, but which are\n not standard C++. Warning about these in lint is one way to ease the\n transition to new compilers.\n - put storage class first (e.g. \"static const\" instead of \"const static\").\n - \"%lld\" instead of %qd\" in printf-type functions.\n - \"%1$d\" is non-standard in printf-type functions.\n - \"\\%\" is an undefined character escape sequence.\n - text after #endif is not allowed.\n - invalid inner-style forward declaration.\n - >? and ?= and )\\?=?\\s*(\\w+|[+-]?\\d+)(\\.\\d*)?\", line):\n error(\n filename,\n linenum,\n \"build/deprecated\",\n 3,\n \">? and ))?'\n # r'\\s*const\\s*' + type_name + '\\s*&\\s*\\w+\\s*;'\n error(\n filename,\n linenum,\n \"runtime/member_string_references\",\n 2,\n \"const string& members are dangerous. It is much better to use \"\n \"alternatives, such as pointers or simple constants.\",\n )\n\n # Everything else in this function operates on class declarations.\n # Return early if the top of the nesting stack is not a class, or if\n # the class head is not completed yet.\n classinfo = nesting_state.InnermostClass()\n if not classinfo or not classinfo.seen_open_brace:\n return\n\n # The class may have been declared with namespace or classname qualifiers.\n # The constructor and destructor will not have those qualifiers.\n base_classname = classinfo.name.split(\"::\")[-1]\n\n # Look for single-argument constructors that aren't marked explicit.\n # Technically a valid construct, but against style.\n explicit_constructor_match = re.match(\n r\"\\s+(?:(?:inline|constexpr)\\s+)*(explicit\\s+)?\"\n rf\"(?:(?:inline|constexpr)\\s+)*{re.escape(base_classname)}\\s*\"\n r\"\\(((?:[^()]|\\([^()]*\\))*)\\)\",\n line,\n )\n\n if explicit_constructor_match:\n is_marked_explicit = explicit_constructor_match.group(1)\n\n if not explicit_constructor_match.group(2):\n constructor_args = []\n else:\n constructor_args = explicit_constructor_match.group(2).split(\",\")\n\n # collapse arguments so that commas in template parameter lists and function\n # argument parameter lists don't split arguments in two\n i = 0\n while i < len(constructor_args):\n constructor_arg = constructor_args[i]\n while constructor_arg.count(\"<\") > constructor_arg.count(\">\") or constructor_arg.count(\n \"(\"\n ) > constructor_arg.count(\")\"):\n constructor_arg += \",\" + constructor_args[i + 1]\n del constructor_args[i + 1]\n constructor_args[i] = constructor_arg\n i += 1\n\n variadic_args = [arg for arg in constructor_args if \"&&...\" in arg]\n defaulted_args = [arg for arg in constructor_args if \"=\" in arg]\n noarg_constructor = (\n not constructor_args # empty arg list\n or\n # 'void' arg specifier\n (len(constructor_args) == 1 and constructor_args[0].strip() == \"void\")\n )\n onearg_constructor = (\n (\n len(constructor_args) == 1 # exactly one arg\n and not noarg_constructor\n )\n or\n # all but at most one arg defaulted\n (\n len(constructor_args) >= 1\n and not noarg_constructor\n and len(defaulted_args) >= len(constructor_args) - 1\n )\n or\n # variadic arguments with zero or one argument\n (len(constructor_args) <= 2 and len(variadic_args) >= 1)\n )\n initializer_list_constructor = bool(\n onearg_constructor\n and re.search(r\"\\bstd\\s*::\\s*initializer_list\\b\", constructor_args[0])\n )\n copy_constructor = bool(\n onearg_constructor\n and re.match(\n r\"((const\\s+(volatile\\s+)?)?|(volatile\\s+(const\\s+)?))?\"\n rf\"{re.escape(base_classname)}(\\s*<[^>]*>)?(\\s+const)?\\s*(?:<\\w+>\\s*)?&\",\n constructor_args[0].strip(),\n )\n )\n\n if (\n not is_marked_explicit\n and onearg_constructor\n and not initializer_list_constructor\n and not copy_constructor\n ):\n if defaulted_args or variadic_args:\n error(\n filename,\n linenum,\n \"runtime/explicit\",\n 4,\n \"Constructors callable with one argument should be marked explicit.\",\n )\n else:\n error(\n filename,\n linenum,\n \"runtime/explicit\",\n 4,\n \"Single-parameter constructors should be marked explicit.\",\n )\n\n\ndef CheckSpacingForFunctionCall(filename, clean_lines, linenum, error):\n \"\"\"Checks for the correctness of various spacing around function calls.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # Since function calls often occur inside if/for/while/switch\n # expressions - which have their own, more liberal conventions - we\n # first see if we should be looking inside such an expression for a\n # function call, to which we can apply more strict standards.\n fncall = line # if there's no control flow construct, look at whole line\n for pattern in (\n r\"\\bif\\s*\\((.*)\\)\\s*{\",\n r\"\\bfor\\s*\\((.*)\\)\\s*{\",\n r\"\\bwhile\\s*\\((.*)\\)\\s*[{;]\",\n r\"\\bswitch\\s*\\((.*)\\)\\s*{\",\n ):\n match = re.search(pattern, line)\n if match:\n fncall = match.group(1) # look inside the parens for function calls\n break\n\n # Except in if/for/while/switch, there should never be space\n # immediately inside parens (eg \"f( 3, 4 )\"). We make an exception\n # for nested parens ( (a+b) + c ). Likewise, there should never be\n # a space before a ( when it's a function argument. I assume it's a\n # function argument when the char before the whitespace is legal in\n # a function name (alnum + _) and we're not starting a macro. Also ignore\n # pointers and references to arrays and functions coz they're too tricky:\n # we use a very simple way to recognize these:\n # \" (something)(maybe-something)\" or\n # \" (something)(maybe-something,\" or\n # \" (something)[something]\"\n # Note that we assume the contents of [] to be short enough that\n # they'll never need to wrap.\n if ( # Ignore control structures.\n not re.search(r\"\\b(if|elif|for|while|switch|return|new|delete|catch|sizeof)\\b\", fncall)\n and\n # Ignore pointers/references to functions.\n not re.search(r\" \\([^)]+\\)\\([^)]*(\\)|,$)\", fncall)\n and\n # Ignore pointers/references to arrays.\n not re.search(r\" \\([^)]+\\)\\[[^\\]]+\\]\", fncall)\n ):\n if re.search(r\"\\w\\s*\\(\\s(?!\\s*\\\\$)\", fncall): # a ( used for a fn call\n error(filename, linenum, \"whitespace/parens\", 4, \"Extra space after ( in function call\")\n elif re.search(r\"\\(\\s+(?!(\\s*\\\\)|\\()\", fncall):\n error(filename, linenum, \"whitespace/parens\", 2, \"Extra space after (\")\n if (\n re.search(r\"\\w\\s+\\(\", fncall)\n and not re.search(r\"_{0,2}asm_{0,2}\\s+_{0,2}volatile_{0,2}\\s+\\(\", fncall)\n and not re.search(r\"#\\s*define|typedef|using\\s+\\w+\\s*=\", fncall)\n and not re.search(r\"\\w\\s+\\((\\w+::)*\\*\\w+\\)\\(\", fncall)\n and not re.search(r\"\\bcase\\s+\\(\", fncall)\n ):\n # TODO(google): Space after an operator function seem to be a common\n # error, silence those for now by restricting them to highest verbosity.\n if re.search(r\"\\boperator_*\\b\", line):\n error(\n filename,\n linenum,\n \"whitespace/parens\",\n 0,\n \"Extra space before ( in function call\",\n )\n else:\n error(\n filename,\n linenum,\n \"whitespace/parens\",\n 4,\n \"Extra space before ( in function call\",\n )\n # If the ) is followed only by a newline or a { + newline, assume it's\n # part of a control statement (if/while/etc), and don't complain\n if re.search(r\"[^)]\\s+\\)\\s*[^{\\s]\", fncall):\n # If the closing parenthesis is preceded by only whitespaces,\n # try to give a more descriptive error message.\n if re.search(r\"^\\s+\\)\", fncall):\n error(\n filename,\n linenum,\n \"whitespace/parens\",\n 2,\n \"Closing ) should be moved to the previous line\",\n )\n else:\n error(filename, linenum, \"whitespace/parens\", 2, \"Extra space before )\")\n\n\ndef IsBlankLine(line):\n \"\"\"Returns true if the given line is blank.\n\n We consider a line to be blank if the line is empty or consists of\n only white spaces.\n\n Args:\n line: A line of a string.\n\n Returns:\n True, if the given line is blank.\n \"\"\"\n return not line or line.isspace()\n\n\ndef CheckForNamespaceIndentation(filename, nesting_state, clean_lines, line, error):\n is_namespace_indent_item = len(nesting_state.stack) >= 1 and (\n isinstance(nesting_state.stack[-1], _NamespaceInfo)\n or (isinstance(nesting_state.previous_stack_top, _NamespaceInfo))\n )\n\n if ShouldCheckNamespaceIndentation(\n nesting_state, is_namespace_indent_item, clean_lines.elided, line\n ):\n CheckItemIndentationInNamespace(filename, clean_lines.elided, line, error)\n\n\ndef CheckForFunctionLengths(filename, clean_lines, linenum, function_state, error):\n \"\"\"Reports for long function bodies.\n\n For an overview why this is done, see:\n https://google-styleguide.googlecode.com/svn/trunk/cppguide.xml#Write_Short_Functions\n\n Uses a simplistic algorithm assuming other style guidelines\n (especially spacing) are followed.\n Only checks unindented functions, so class members are unchecked.\n Trivial bodies are unchecked, so constructors with huge initializer lists\n may be missed.\n Blank/comment lines are not counted so as to avoid encouraging the removal\n of vertical space and comments just to get through a lint check.\n NOLINT *on the last line of a function* disables this check.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n function_state: Current function name and lines in body so far.\n error: The function to call with any errors found.\n \"\"\"\n lines = clean_lines.lines\n line = lines[linenum]\n joined_line = \"\"\n\n starting_func = False\n regexp = r\"(\\w(\\w|::|\\*|\\&|\\s)*)\\(\" # decls * & space::name( ...\n if match_result := re.match(regexp, line):\n # If the name is all caps and underscores, figure it's a macro and\n # ignore it, unless it's TEST or TEST_F.\n function_name = match_result.group(1).split()[-1]\n if function_name in {\"TEST\", \"TEST_F\"} or not re.match(r\"[A-Z_]+$\", function_name):\n starting_func = True\n\n if starting_func:\n body_found = False\n for start_linenum in range(linenum, clean_lines.NumLines()):\n start_line = lines[start_linenum]\n joined_line += \" \" + start_line.lstrip()\n if re.search(r\"(;|})\", start_line): # Declarations and trivial functions\n body_found = True\n break # ... ignore\n if re.search(r\"{\", start_line):\n body_found = True\n function = re.search(r\"((\\w|:)*)\\(\", line).group(1)\n if re.match(r\"TEST\", function): # Handle TEST... macros\n parameter_regexp = re.search(r\"(\\(.*\\))\", joined_line)\n if parameter_regexp: # Ignore bad syntax\n function += parameter_regexp.group(1)\n else:\n function += \"()\"\n function_state.Begin(function)\n break\n if not body_found:\n # No body for the function (or evidence of a non-function) was found.\n error(\n filename,\n linenum,\n \"readability/fn_size\",\n 5,\n \"Lint failed to find start of function body.\",\n )\n elif re.match(r\"^\\}\\s*$\", line): # function end\n function_state.Check(error, filename, linenum)\n function_state.End()\n elif not re.match(r\"^\\s*$\", line):\n function_state.Count() # Count non-blank/non-comment lines.\n\n\n_RE_PATTERN_TODO = re.compile(r\"^//(\\s*)TODO(\\(.+?\\))?:?(\\s|$)?\")\n\n\ndef CheckComment(line, filename, linenum, next_line_start, error):\n \"\"\"Checks for common mistakes in comments.\n\n Args:\n line: The line in question.\n filename: The name of the current file.\n linenum: The number of the line to check.\n next_line_start: The first non-whitespace column of the next line.\n error: The function to call with any errors found.\n \"\"\"\n commentpos = line.find(\"//\")\n if commentpos != -1:\n # Check if the // may be in quotes. If so, ignore it\n if re.sub(r\"\\\\.\", \"\", line[0:commentpos]).count('\"') % 2 == 0:\n # Allow one space for new scopes, two spaces otherwise:\n if not (re.match(r\"^.*{ *//\", line) and next_line_start == commentpos) and (\n (commentpos >= 1 and line[commentpos - 1] not in string.whitespace)\n or (commentpos >= 2 and line[commentpos - 2] not in string.whitespace)\n ):\n error(\n filename,\n linenum,\n \"whitespace/comments\",\n 2,\n \"At least two spaces is best between code and comments\",\n )\n\n # Checks for common mistakes in TODO comments.\n comment = line[commentpos:]\n match = _RE_PATTERN_TODO.match(comment)\n if match:\n # One whitespace is correct; zero whitespace is handled elsewhere.\n leading_whitespace = match.group(1)\n if len(leading_whitespace) > 1:\n error(filename, linenum, \"whitespace/todo\", 2, \"Too many spaces before TODO\")\n\n username = match.group(2)\n if not username:\n error(\n filename,\n linenum,\n \"readability/todo\",\n 2,\n \"Missing username in TODO; it should look like \"\n '\"// TODO(my_username): Stuff.\"',\n )\n\n middle_whitespace = match.group(3)\n # Comparisons made explicit for correctness\n # -- pylint: disable=g-explicit-bool-comparison\n if middle_whitespace not in {\" \", \"\"}:\n error(\n filename,\n linenum,\n \"whitespace/todo\",\n 2,\n \"TODO(my_username) should be followed by a space\",\n )\n\n # If the comment contains an alphanumeric character, there\n # should be a space somewhere between it and the // unless\n # it's a /// or //! Doxygen comment.\n if re.match(r\"//[^ ]*\\w\", comment) and not re.match(r\"(///|//\\!)(\\s+|$)\", comment):\n error(\n filename,\n linenum,\n \"whitespace/comments\",\n 4,\n \"Should have a space between // and comment\",\n )\n\n\ndef CheckSpacing(filename, clean_lines, linenum, nesting_state, error):\n \"\"\"Checks for the correctness of various spacing issues in the code.\n\n Things we check for: spaces around operators, spaces after\n if/for/while/switch, no spaces around parens in function calls, two\n spaces between code and comment, don't start a block with a blank\n line, don't end a function with a blank line, don't add a blank line\n after public/protected/private, don't have too many blank lines in a row.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n nesting_state: A NestingState instance which maintains information about\n the current stack of nested blocks being parsed.\n error: The function to call with any errors found.\n \"\"\"\n\n # Don't use \"elided\" lines here, otherwise we can't check commented lines.\n # Don't want to use \"raw\" either, because we don't want to check inside C++11\n # raw strings,\n raw = clean_lines.lines_without_raw_strings\n line = raw[linenum]\n\n # Before nixing comments, check if the line is blank for no good\n # reason. This includes the first line after a block is opened, and\n # blank lines at the end of a function (ie, right before a line like '}'\n #\n # Skip all the blank line checks if we are immediately inside a\n # namespace body. In other words, don't issue blank line warnings\n # for this block:\n # namespace {\n #\n # }\n #\n # A warning about missing end of namespace comments will be issued instead.\n #\n # Also skip blank line checks for 'extern \"C\"' blocks, which are formatted\n # like namespaces.\n if IsBlankLine(line) and not nesting_state.InNamespaceBody() and not nesting_state.InExternC():\n elided = clean_lines.elided\n prev_line = elided[linenum - 1]\n prevbrace = prev_line.rfind(\"{\")\n # TODO(google): Don't complain if line before blank line, and line after,\n # both start with alnums and are indented the same amount.\n # This ignores whitespace at the start of a namespace block\n # because those are not usually indented.\n if prevbrace != -1 and prev_line[prevbrace:].find(\"}\") == -1:\n # OK, we have a blank line at the start of a code block. Before we\n # complain, we check if it is an exception to the rule: The previous\n # non-empty line has the parameters of a function header that are indented\n # 4 spaces (because they did not fit in a 80 column line when placed on\n # the same line as the function name). We also check for the case where\n # the previous line is indented 6 spaces, which may happen when the\n # initializers of a constructor do not fit into a 80 column line.\n exception = False\n if re.match(r\" {6}\\w\", prev_line): # Initializer list?\n # We are looking for the opening column of initializer list, which\n # should be indented 4 spaces to cause 6 space indentation afterwards.\n search_position = linenum - 2\n while search_position >= 0 and re.match(r\" {6}\\w\", elided[search_position]):\n search_position -= 1\n exception = search_position >= 0 and elided[search_position][:5] == \" :\"\n else:\n # Search for the function arguments or an initializer list. We use a\n # simple heuristic here: If the line is indented 4 spaces; and we have a\n # closing paren, without the opening paren, followed by an opening brace\n # or colon (for initializer lists) we assume that it is the last line of\n # a function header. If we have a colon indented 4 spaces, it is an\n # initializer list.\n exception = re.match(\n r\" {4}\\w[^\\(]*\\)\\s*(const\\s*)?(\\{\\s*$|:)\", prev_line\n ) or re.match(r\" {4}:\", prev_line)\n\n if not exception:\n error(\n filename,\n linenum,\n \"whitespace/blank_line\",\n 2,\n \"Redundant blank line at the start of a code block should be deleted.\",\n )\n # Ignore blank lines at the end of a block in a long if-else\n # chain, like this:\n # if (condition1) {\n # // Something followed by a blank line\n #\n # } else if (condition2) {\n # // Something else\n # }\n if linenum + 1 < clean_lines.NumLines():\n next_line = raw[linenum + 1]\n if next_line and re.match(r\"\\s*}\", next_line) and next_line.find(\"} else \") == -1:\n error(\n filename,\n linenum,\n \"whitespace/blank_line\",\n 3,\n \"Redundant blank line at the end of a code block should be deleted.\",\n )\n\n matched = re.match(r\"\\s*(public|protected|private):\", prev_line)\n if matched:\n error(\n filename,\n linenum,\n \"whitespace/blank_line\",\n 3,\n f'Do not leave a blank line after \"{matched.group(1)}:\"',\n )\n\n # Next, check comments\n next_line_start = 0\n if linenum + 1 < clean_lines.NumLines():\n next_line = raw[linenum + 1]\n next_line_start = len(next_line) - len(next_line.lstrip())\n CheckComment(line, filename, linenum, next_line_start, error)\n\n # get rid of comments and strings\n line = clean_lines.elided[linenum]\n\n # You shouldn't have spaces before your brackets, except for C++11 attributes\n # or maybe after 'delete []', 'return []() {};', or 'auto [abc, ...] = ...;'.\n if re.search(r\"\\w\\s+\\[(?!\\[)\", line) and not re.search(r\"(?:auto&?|delete|return)\\s+\\[\", line):\n error(filename, linenum, \"whitespace/braces\", 5, \"Extra space before [\")\n\n # In range-based for, we wanted spaces before and after the colon, but\n # not around \"::\" tokens that might appear.\n if re.search(r\"for *\\(.*[^:]:[^: ]\", line) or re.search(r\"for *\\(.*[^: ]:[^:]\", line):\n error(\n filename,\n linenum,\n \"whitespace/forcolon\",\n 2,\n \"Missing space around colon in range-based for loop\",\n )\n\n\ndef CheckOperatorSpacing(filename, clean_lines, linenum, error):\n \"\"\"Checks for horizontal spacing around operators.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # Don't try to do spacing checks for operator methods. Do this by\n # replacing the troublesome characters with something else,\n # preserving column position for all other characters.\n #\n # The replacement is done repeatedly to avoid false positives from\n # operators that call operators.\n while True:\n match = re.match(r\"^(.*\\boperator\\b)(\\S+)(\\s*\\(.*)$\", line)\n if match:\n line = match.group(1) + (\"_\" * len(match.group(2))) + match.group(3)\n else:\n break\n\n # We allow no-spaces around = within an if: \"if ( (a=Foo()) == 0 )\".\n # Otherwise not. Note we only check for non-spaces on *both* sides;\n # sometimes people put non-spaces on one side when aligning ='s among\n # many lines (not that this is behavior that I approve of...)\n if (\n (re.search(r\"[\\w.]=\", line) or re.search(r\"=[\\w.]\", line))\n and not re.search(r\"\\b(if|while|for) \", line)\n # Operators taken from [lex.operators] in C++11 standard.\n and not re.search(r\"(>=|<=|==|!=|&=|\\^=|\\|=|\\+=|\\*=|\\/=|\\%=)\", line)\n and not re.search(r\"operator=\", line)\n ):\n error(filename, linenum, \"whitespace/operators\", 4, \"Missing spaces around =\")\n\n # It's ok not to have spaces around binary operators like + - * /, but if\n # there's too little whitespace, we get concerned. It's hard to tell,\n # though, so we punt on this one for now. TODO(google).\n\n # You should always have whitespace around binary operators.\n #\n # Check <= and >= first to avoid false positives with < and >, then\n # check non-include lines for spacing around < and >.\n #\n # If the operator is followed by a comma, assume it's be used in a\n # macro context and don't do any checks. This avoids false\n # positives.\n #\n # Note that && is not included here. This is because there are too\n # many false positives due to RValue references.\n match = re.search(r\"[^<>=!\\s](==|!=|<=|>=|\\|\\|)[^<>=!\\s,;\\)]\", line)\n if match:\n # TODO(google): support alternate operators\n error(\n filename, linenum, \"whitespace/operators\", 3, f\"Missing spaces around {match.group(1)}\"\n )\n elif not re.match(r\"#.*include\", line):\n # Look for < that is not surrounded by spaces. This is only\n # triggered if both sides are missing spaces, even though\n # technically should should flag if at least one side is missing a\n # space. This is done to avoid some false positives with shifts.\n match = re.match(r\"^(.*[^\\s<])<[^\\s=<,]\", line)\n if match:\n (_, _, end_pos) = CloseExpression(clean_lines, linenum, len(match.group(1)))\n if end_pos <= -1:\n error(filename, linenum, \"whitespace/operators\", 3, \"Missing spaces around <\")\n\n # Look for > that is not surrounded by spaces. Similar to the\n # above, we only trigger if both sides are missing spaces to avoid\n # false positives with shifts.\n match = re.match(r\"^(.*[^-\\s>])>[^\\s=>,]\", line)\n if match:\n (_, _, start_pos) = ReverseCloseExpression(clean_lines, linenum, len(match.group(1)))\n if start_pos <= -1:\n error(filename, linenum, \"whitespace/operators\", 3, \"Missing spaces around >\")\n\n # We allow no-spaces around << when used like this: 10<<20, but\n # not otherwise (particularly, not when used as streams)\n #\n # We also allow operators following an opening parenthesis, since\n # those tend to be macros that deal with operators.\n match = re.search(r\"(operator|[^\\s(<])(?:L|UL|LL|ULL|l|ul|ll|ull)?<<([^\\s,=<])\", line)\n if (\n match\n and not (match.group(1).isdigit() and match.group(2).isdigit())\n and not (match.group(1) == \"operator\" and match.group(2) == \";\")\n ):\n error(filename, linenum, \"whitespace/operators\", 3, \"Missing spaces around <<\")\n\n # We allow no-spaces around >> for almost anything. This is because\n # C++11 allows \">>\" to close nested templates, which accounts for\n # most cases when \">>\" is not followed by a space.\n #\n # We still warn on \">>\" followed by alpha character, because that is\n # likely due to \">>\" being used for right shifts, e.g.:\n # value >> alpha\n #\n # When \">>\" is used to close templates, the alphanumeric letter that\n # follows would be part of an identifier, and there should still be\n # a space separating the template type and the identifier.\n # type> alpha\n match = re.search(r\">>[a-zA-Z_]\", line)\n if match:\n error(filename, linenum, \"whitespace/operators\", 3, \"Missing spaces around >>\")\n\n # There shouldn't be space around unary operators\n match = re.search(r\"(!\\s|~\\s|[\\s]--[\\s;]|[\\s]\\+\\+[\\s;])\", line)\n if match:\n error(\n filename,\n linenum,\n \"whitespace/operators\",\n 4,\n f\"Extra space for operator {match.group(1)}\",\n )\n\n\ndef CheckParenthesisSpacing(filename, clean_lines, linenum, error):\n \"\"\"Checks for horizontal spacing around parentheses.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # No spaces after an if, while, switch, or for\n match = re.search(r\" (if\\(|for\\(|while\\(|switch\\()\", line)\n if match:\n error(\n filename, linenum, \"whitespace/parens\", 5, f\"Missing space before ( in {match.group(1)}\"\n )\n\n # For if/for/while/switch, the left and right parens should be\n # consistent about how many spaces are inside the parens, and\n # there should either be zero or one spaces inside the parens.\n # We don't want: \"if ( foo)\" or \"if ( foo )\".\n # Exception: \"for ( ; foo; bar)\" and \"for (foo; bar; )\" are allowed.\n match = re.search(\n r\"\\b(if|for|while|switch)\\s*\"\n r\"\\(([ ]*)(.).*[^ ]+([ ]*)\\)\\s*{\\s*$\",\n line,\n )\n if match:\n if len(match.group(2)) != len(match.group(4)) and not (\n match.group(3) == \";\"\n and len(match.group(2)) == 1 + len(match.group(4))\n or not match.group(2)\n and re.search(r\"\\bfor\\s*\\(.*; \\)\", line)\n ):\n error(\n filename,\n linenum,\n \"whitespace/parens\",\n 5,\n f\"Mismatching spaces inside () in {match.group(1)}\",\n )\n if len(match.group(2)) not in [0, 1]:\n error(\n filename,\n linenum,\n \"whitespace/parens\",\n 5,\n f\"Should have zero or one spaces inside ( and ) in {match.group(1)}\",\n )\n\n\ndef CheckCommaSpacing(filename, clean_lines, linenum, error):\n \"\"\"Checks for horizontal spacing near commas and semicolons.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n raw = clean_lines.lines_without_raw_strings\n line = clean_lines.elided[linenum]\n\n # You should always have a space after a comma (either as fn arg or operator)\n #\n # This does not apply when the non-space character following the\n # comma is another comma, since the only time when that happens is\n # for empty macro arguments.\n #\n # We run this check in two passes: first pass on elided lines to\n # verify that lines contain missing whitespaces, second pass on raw\n # lines to confirm that those missing whitespaces are not due to\n # elided comments.\n match = re.search(\n r\",[^,\\s]\", re.sub(r\"\\b__VA_OPT__\\s*\\(,\\)\", \"\", re.sub(r\"\\boperator\\s*,\\s*\\(\", \"F(\", line))\n )\n if match and re.search(r\",[^,\\s]\", raw[linenum]):\n error(filename, linenum, \"whitespace/comma\", 3, \"Missing space after ,\")\n\n # You should always have a space after a semicolon\n # except for few corner cases\n # TODO(google): clarify if 'if (1) { return 1;}' is requires one more\n # space after ;\n if re.search(r\";[^\\s};\\\\)/]\", line):\n error(filename, linenum, \"whitespace/semicolon\", 3, \"Missing space after ;\")\n\n\ndef _IsType(clean_lines, nesting_state, expr):\n \"\"\"Check if expression looks like a type name, returns true if so.\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n nesting_state: A NestingState instance which maintains information about\n the current stack of nested blocks being parsed.\n expr: The expression to check.\n Returns:\n True, if token looks like a type.\n \"\"\"\n # Keep only the last token in the expression\n if last_word := re.match(r\"^.*(\\b\\S+)$\", expr):\n token = last_word.group(1)\n else:\n token = expr\n\n # Match native types and stdint types\n if _TYPES.match(token):\n return True\n\n # Try a bit harder to match templated types. Walk up the nesting\n # stack until we find something that resembles a typename\n # declaration for what we are looking for.\n typename_pattern = r\"\\b(?:typename|class|struct)\\s+\" + re.escape(token) + r\"\\b\"\n block_index = len(nesting_state.stack) - 1\n while block_index >= 0:\n if isinstance(nesting_state.stack[block_index], _NamespaceInfo):\n return False\n\n # Found where the opening brace is. We want to scan from this\n # line up to the beginning of the function, minus a few lines.\n # template \n # class C\n # : public ... { // start scanning here\n last_line = nesting_state.stack[block_index].starting_linenum\n\n next_block_start = 0\n if block_index > 0:\n next_block_start = nesting_state.stack[block_index - 1].starting_linenum\n first_line = last_line\n while first_line >= next_block_start:\n if clean_lines.elided[first_line].find(\"template\") >= 0:\n break\n first_line -= 1\n if first_line < next_block_start:\n # Didn't find any \"template\" keyword before reaching the next block,\n # there are probably no template things to check for this block\n block_index -= 1\n continue\n\n # Look for typename in the specified range\n for i in range(first_line, last_line + 1, 1):\n if re.search(typename_pattern, clean_lines.elided[i]):\n return True\n block_index -= 1\n\n return False\n\n\ndef CheckBracesSpacing(filename, clean_lines, linenum, nesting_state, error):\n \"\"\"Checks for horizontal spacing near commas.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n nesting_state: A NestingState instance which maintains information about\n the current stack of nested blocks being parsed.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # Except after an opening paren, or after another opening brace (in case of\n # an initializer list, for instance), you should have spaces before your\n # braces when they are delimiting blocks, classes, namespaces etc.\n # And since you should never have braces at the beginning of a line,\n # this is an easy test. Except that braces used for initialization don't\n # follow the same rule; we often don't want spaces before those.\n\n if match := re.match(r\"^(.*[^ ({>]){\", line):\n # Try a bit harder to check for brace initialization. This\n # happens in one of the following forms:\n # Constructor() : initializer_list_{} { ... }\n # Constructor{}.MemberFunction()\n # Type variable{};\n # FunctionCall(type{}, ...);\n # LastArgument(..., type{});\n # LOG(INFO) << type{} << \" ...\";\n # map_of_type[{...}] = ...;\n # ternary = expr ? new type{} : nullptr;\n # OuterTemplate{}>\n #\n # We check for the character following the closing brace, and\n # silence the warning if it's one of those listed above, i.e.\n # \"{.;,)<>]:\".\n #\n # To account for nested initializer list, we allow any number of\n # closing braces up to \"{;,)<\". We can't simply silence the\n # warning on first sight of closing brace, because that would\n # cause false negatives for things that are not initializer lists.\n # Silence this: But not this:\n # Outer{ if (...) {\n # Inner{...} if (...){ // Missing space before {\n # }; }\n #\n # There is a false negative with this approach if people inserted\n # spurious semicolons, e.g. \"if (cond){};\", but we will catch the\n # spurious semicolon with a separate check.\n leading_text = match.group(1)\n (endline, endlinenum, endpos) = CloseExpression(clean_lines, linenum, len(match.group(1)))\n trailing_text = \"\"\n if endpos > -1:\n trailing_text = endline[endpos:]\n for offset in range(endlinenum + 1, min(endlinenum + 3, clean_lines.NumLines() - 1)):\n trailing_text += clean_lines.elided[offset]\n # We also suppress warnings for `uint64_t{expression}` etc., as the style\n # guide recommends brace initialization for integral types to avoid\n # overflow/truncation.\n if not re.match(r\"^[\\s}]*[{.;,)<>\\]:]\", trailing_text) and not _IsType(\n clean_lines, nesting_state, leading_text\n ):\n error(filename, linenum, \"whitespace/braces\", 5, \"Missing space before {\")\n\n # Make sure '} else {' has spaces.\n if re.search(r\"}else\", line):\n error(filename, linenum, \"whitespace/braces\", 5, \"Missing space before else\")\n\n # You shouldn't have a space before a semicolon at the end of the line.\n # There's a special case for \"for\" since the style guide allows space before\n # the semicolon there.\n if re.search(r\":\\s*;\\s*$\", line):\n error(\n filename,\n linenum,\n \"whitespace/semicolon\",\n 5,\n \"Semicolon defining empty statement. Use {} instead.\",\n )\n elif re.search(r\"^\\s*;\\s*$\", line):\n error(\n filename,\n linenum,\n \"whitespace/semicolon\",\n 5,\n \"Line contains only semicolon. If this should be an empty statement, use {} instead.\",\n )\n elif re.search(r\"\\s+;\\s*$\", line) and not re.search(r\"\\bfor\\b\", line):\n error(\n filename,\n linenum,\n \"whitespace/semicolon\",\n 5,\n \"Extra space before last semicolon. If this should be an empty \"\n \"statement, use {} instead.\",\n )\n\n\ndef IsDecltype(clean_lines, linenum, column):\n \"\"\"Check if the token ending on (linenum, column) is decltype().\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n linenum: the number of the line to check.\n column: end column of the token to check.\n Returns:\n True if this token is decltype() expression, False otherwise.\n \"\"\"\n (text, _, start_col) = ReverseCloseExpression(clean_lines, linenum, column)\n if start_col < 0:\n return False\n return bool(re.search(r\"\\bdecltype\\s*$\", text[0:start_col]))\n\n\ndef CheckSectionSpacing(filename, clean_lines, class_info, linenum, error):\n \"\"\"Checks for additional blank line issues related to sections.\n\n Currently the only thing checked here is blank line before protected/private.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n class_info: A _ClassInfo objects.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n # Skip checks if the class is small, where small means 25 lines or less.\n # 25 lines seems like a good cutoff since that's the usual height of\n # terminals, and any class that can't fit in one screen can't really\n # be considered \"small\".\n #\n # Also skip checks if we are on the first line. This accounts for\n # classes that look like\n # class Foo { public: ... };\n #\n # If we didn't find the end of the class, last_line would be zero,\n # and the check will be skipped by the first condition.\n if (\n class_info.last_line - class_info.starting_linenum <= 24\n or linenum <= class_info.starting_linenum\n ):\n return\n\n matched = re.match(r\"\\s*(public|protected|private):\", clean_lines.lines[linenum])\n if matched:\n # Issue warning if the line before public/protected/private was\n # not a blank line, but don't do this if the previous line contains\n # \"class\" or \"struct\". This can happen two ways:\n # - We are at the beginning of the class.\n # - We are forward-declaring an inner class that is semantically\n # private, but needed to be public for implementation reasons.\n # Also ignores cases where the previous line ends with a backslash as can be\n # common when defining classes in C macros.\n prev_line = clean_lines.lines[linenum - 1]\n if (\n not IsBlankLine(prev_line)\n and not re.search(r\"\\b(class|struct)\\b\", prev_line)\n and not re.search(r\"\\\\$\", prev_line)\n ):\n # Try a bit harder to find the beginning of the class. This is to\n # account for multi-line base-specifier lists, e.g.:\n # class Derived\n # : public Base {\n end_class_head = class_info.starting_linenum\n for i in range(class_info.starting_linenum, linenum):\n if re.search(r\"\\{\\s*$\", clean_lines.lines[i]):\n end_class_head = i\n break\n if end_class_head < linenum - 1:\n error(\n filename,\n linenum,\n \"whitespace/blank_line\",\n 3,\n f'\"{matched.group(1)}:\" should be preceded by a blank line',\n )\n\n\ndef GetPreviousNonBlankLine(clean_lines, linenum):\n \"\"\"Return the most recent non-blank line and its line number.\n\n Args:\n clean_lines: A CleansedLines instance containing the file contents.\n linenum: The number of the line to check.\n\n Returns:\n A tuple with two elements. The first element is the contents of the last\n non-blank line before the current line, or the empty string if this is the\n first non-blank line. The second is the line number of that line, or -1\n if this is the first non-blank line.\n \"\"\"\n\n prevlinenum = linenum - 1\n while prevlinenum >= 0:\n prevline = clean_lines.elided[prevlinenum]\n if not IsBlankLine(prevline): # if not a blank line...\n return (prevline, prevlinenum)\n prevlinenum -= 1\n return (\"\", -1)\n\n\ndef CheckBraces(filename, clean_lines, linenum, error):\n \"\"\"Looks for misplaced braces (e.g. at the end of line).\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n\n line = clean_lines.elided[linenum] # get rid of comments and strings\n\n if re.match(r\"\\s*{\\s*$\", line):\n # We allow an open brace to start a line in the case where someone is using\n # braces in a block to explicitly create a new scope, which is commonly used\n # to control the lifetime of stack-allocated variables. Braces are also\n # used for brace initializers inside function calls. We don't detect this\n # perfectly: we just don't complain if the last non-whitespace character on\n # the previous non-blank line is ',', ';', ':', '(', '{', or '}', or if the\n # previous line starts a preprocessor block. We also allow a brace on the\n # following line if it is part of an array initialization and would not fit\n # within the 80 character limit of the preceding line.\n prevline = GetPreviousNonBlankLine(clean_lines, linenum)[0]\n if (\n not re.search(r\"[,;:}{(]\\s*$\", prevline)\n and not re.match(r\"\\s*#\", prevline)\n and not (GetLineWidth(prevline) > _line_length - 2 and \"[]\" in prevline)\n ):\n error(\n filename,\n linenum,\n \"whitespace/braces\",\n 4,\n \"{ should almost always be at the end of the previous line\",\n )\n\n # An else clause should be on the same line as the preceding closing brace.\n if last_wrong := re.match(r\"\\s*else\\b\\s*(?:if\\b|\\{|$)\", line):\n prevline = GetPreviousNonBlankLine(clean_lines, linenum)[0]\n if re.match(r\"\\s*}\\s*$\", prevline):\n error(\n filename,\n linenum,\n \"whitespace/newline\",\n 4,\n \"An else should appear on the same line as the preceding }\",\n )\n else:\n last_wrong = False\n\n # If braces come on one side of an else, they should be on both.\n # However, we have to worry about \"else if\" that spans multiple lines!\n if re.search(r\"else if\\s*\\(\", line): # could be multi-line if\n brace_on_left = bool(re.search(r\"}\\s*else if\\s*\\(\", line))\n # find the ( after the if\n pos = line.find(\"else if\")\n pos = line.find(\"(\", pos)\n if pos > 0:\n (endline, _, endpos) = CloseExpression(clean_lines, linenum, pos)\n brace_on_right = endline[endpos:].find(\"{\") != -1\n if brace_on_left != brace_on_right: # must be brace after if\n error(\n filename,\n linenum,\n \"readability/braces\",\n 5,\n \"If an else has a brace on one side, it should have it on both\",\n )\n # Prevent detection if statement has { and we detected an improper newline after }\n elif re.search(r\"}\\s*else[^{]*$\", line) or (\n re.match(r\"[^}]*else\\s*{\", line) and not last_wrong\n ):\n error(\n filename,\n linenum,\n \"readability/braces\",\n 5,\n \"If an else has a brace on one side, it should have it on both\",\n )\n\n # No control clauses with braces should have its contents on the same line\n # Exclude } which will be covered by empty-block detect\n # Exclude ; which may be used by while in a do-while\n if (\n keyword := re.search(\n r\"\\b(else if|if|while|for|switch)\" # These have parens\n r\"\\s*\\(.*\\)\\s*(?:\\[\\[(?:un)?likely\\]\\]\\s*)?{\\s*[^\\s\\\\};]\",\n line,\n )\n ) or (\n keyword := re.search(\n r\"\\b(else|do|try)\" # These don't have parens\n r\"\\s*(?:\\[\\[(?:un)?likely\\]\\]\\s*)?{\\s*[^\\s\\\\}]\",\n line,\n )\n ):\n error(\n filename,\n linenum,\n \"whitespace/newline\",\n 5,\n f\"Controlled statements inside brackets of {keyword.group(1)} clause\"\n \" should be on a separate line\",\n )\n\n # TODO(aaronliu0130): Err on if...else and do...while statements without braces;\n # style guide has changed since the below comment was written\n\n # Check single-line if/else bodies. The style guide says 'curly braces are not\n # required for single-line statements'. We additionally allow multi-line,\n # single statements, but we reject anything with more than one semicolon in\n # it. This means that the first semicolon after the if should be at the end of\n # its line, and the line after that should have an indent level equal to or\n # lower than the if. We also check for ambiguous if/else nesting without\n # braces.\n if_else_match = re.search(r\"\\b(if\\s*(|constexpr)\\s*\\(|else\\b)\", line)\n if if_else_match and not re.match(r\"\\s*#\", line):\n if_indent = GetIndentLevel(line)\n endline, endlinenum, endpos = line, linenum, if_else_match.end()\n if_match = re.search(r\"\\bif\\s*(|constexpr)\\s*\\(\", line)\n if if_match:\n # This could be a multiline if condition, so find the end first.\n pos = if_match.end() - 1\n (endline, endlinenum, endpos) = CloseExpression(clean_lines, linenum, pos)\n # Check for an opening brace, either directly after the if or on the next\n # line. If found, this isn't a single-statement conditional.\n if not re.match(r\"\\s*(?:\\[\\[(?:un)?likely\\]\\]\\s*)?{\", endline[endpos:]) and not (\n re.match(r\"\\s*$\", endline[endpos:])\n and endlinenum < (len(clean_lines.elided) - 1)\n and re.match(r\"\\s*{\", clean_lines.elided[endlinenum + 1])\n ):\n while (\n endlinenum < len(clean_lines.elided)\n and \";\" not in clean_lines.elided[endlinenum][endpos:]\n ):\n endlinenum += 1\n endpos = 0\n if endlinenum < len(clean_lines.elided):\n endline = clean_lines.elided[endlinenum]\n # We allow a mix of whitespace and closing braces (e.g. for one-liner\n # methods) and a single \\ after the semicolon (for macros)\n endpos = endline.find(\";\")\n if not re.match(r\";[\\s}]*(\\\\?)$\", endline[endpos:]):\n # Semicolon isn't the last character, there's something trailing.\n # Output a warning if the semicolon is not contained inside\n # a lambda expression.\n if not re.match(r\"^[^{};]*\\[[^\\[\\]]*\\][^{}]*\\{[^{}]*\\}\\s*\\)*[;,]\\s*$\", endline):\n error(\n filename,\n linenum,\n \"readability/braces\",\n 4,\n \"If/else bodies with multiple statements require braces\",\n )\n elif endlinenum < len(clean_lines.elided) - 1:\n # Make sure the next line is dedented\n next_line = clean_lines.elided[endlinenum + 1]\n next_indent = GetIndentLevel(next_line)\n # With ambiguous nested if statements, this will error out on the\n # if that *doesn't* match the else, regardless of whether it's the\n # inner one or outer one.\n if if_match and re.match(r\"\\s*else\\b\", next_line) and next_indent != if_indent:\n error(\n filename,\n linenum,\n \"readability/braces\",\n 4,\n \"Else clause should be indented at the same level as if. \"\n \"Ambiguous nested if/else chains require braces.\",\n )\n elif next_indent > if_indent:\n error(\n filename,\n linenum,\n \"readability/braces\",\n 4,\n \"If/else bodies with multiple statements require braces\",\n )\n\n\ndef CheckTrailingSemicolon(filename, clean_lines, linenum, error):\n \"\"\"Looks for redundant trailing semicolon.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n\n line = clean_lines.elided[linenum]\n\n # Block bodies should not be followed by a semicolon. Due to C++11\n # brace initialization, there are more places where semicolons are\n # required than not, so we explicitly list the allowed rules rather\n # than listing the disallowed ones. These are the places where \"};\"\n # should be replaced by just \"}\":\n # 1. Some flavor of block following closing parenthesis:\n # for (;;) {};\n # while (...) {};\n # switch (...) {};\n # Function(...) {};\n # if (...) {};\n # if (...) else if (...) {};\n #\n # 2. else block:\n # if (...) else {};\n #\n # 3. const member function:\n # Function(...) const {};\n #\n # 4. Block following some statement:\n # x = 42;\n # {};\n #\n # 5. Block at the beginning of a function:\n # Function(...) {\n # {};\n # }\n #\n # Note that naively checking for the preceding \"{\" will also match\n # braces inside multi-dimensional arrays, but this is fine since\n # that expression will not contain semicolons.\n #\n # 6. Block following another block:\n # while (true) {}\n # {};\n #\n # 7. End of namespaces:\n # namespace {};\n #\n # These semicolons seems far more common than other kinds of\n # redundant semicolons, possibly due to people converting classes\n # to namespaces. For now we do not warn for this case.\n #\n # Try matching case 1 first.\n match = re.match(r\"^(.*\\)\\s*)\\{\", line)\n if match:\n # Matched closing parenthesis (case 1). Check the token before the\n # matching opening parenthesis, and don't warn if it looks like a\n # macro. This avoids these false positives:\n # - macro that defines a base class\n # - multi-line macro that defines a base class\n # - macro that defines the whole class-head\n #\n # But we still issue warnings for macros that we know are safe to\n # warn, specifically:\n # - TEST, TEST_F, TEST_P, MATCHER, MATCHER_P\n # - TYPED_TEST\n # - INTERFACE_DEF\n # - EXCLUSIVE_LOCKS_REQUIRED, SHARED_LOCKS_REQUIRED, LOCKS_EXCLUDED:\n #\n # We implement a list of safe macros instead of a list of\n # unsafe macros, even though the latter appears less frequently in\n # google code and would have been easier to implement. This is because\n # the downside for getting the allowed checks wrong means some extra\n # semicolons, while the downside for getting disallowed checks wrong\n # would result in compile errors.\n #\n # In addition to macros, we also don't want to warn on\n # - Compound literals\n # - Lambdas\n # - alignas specifier with anonymous structs\n # - decltype\n # - concepts (requires expression)\n closing_brace_pos = match.group(1).rfind(\")\")\n opening_parenthesis = ReverseCloseExpression(clean_lines, linenum, closing_brace_pos)\n if opening_parenthesis[2] > -1:\n line_prefix = opening_parenthesis[0][0 : opening_parenthesis[2]]\n macro = re.search(r\"\\b([A-Z_][A-Z0-9_]*)\\s*$\", line_prefix)\n func = re.match(r\"^(.*\\])\\s*$\", line_prefix)\n if (\n (\n macro\n and macro.group(1)\n not in (\n \"TEST\",\n \"TEST_F\",\n \"MATCHER\",\n \"MATCHER_P\",\n \"TYPED_TEST\",\n \"EXCLUSIVE_LOCKS_REQUIRED\",\n \"SHARED_LOCKS_REQUIRED\",\n \"LOCKS_EXCLUDED\",\n \"INTERFACE_DEF\",\n )\n )\n or (func and not re.search(r\"\\boperator\\s*\\[\\s*\\]\", func.group(1)))\n or re.search(r\"\\b(?:struct|union)\\s+alignas\\s*$\", line_prefix)\n or re.search(r\"\\bdecltype$\", line_prefix)\n or re.search(r\"\\brequires.*$\", line_prefix)\n or re.search(r\"\\s+=\\s*$\", line_prefix)\n ):\n match = None\n if (\n match\n and opening_parenthesis[1] > 1\n and re.search(r\"\\]\\s*$\", clean_lines.elided[opening_parenthesis[1] - 1])\n ):\n # Multi-line lambda-expression\n match = None\n\n else:\n # Try matching cases 2-3.\n match = re.match(r\"^(.*(?:else|\\)\\s*const)\\s*)\\{\", line)\n if not match:\n # Try matching cases 4-6. These are always matched on separate lines.\n #\n # Note that we can't simply concatenate the previous line to the\n # current line and do a single match, otherwise we may output\n # duplicate warnings for the blank line case:\n # if (cond) {\n # // blank line\n # }\n prevline = GetPreviousNonBlankLine(clean_lines, linenum)[0]\n if prevline and re.search(r\"[;{}]\\s*$\", prevline):\n match = re.match(r\"^(\\s*)\\{\", line)\n\n # Check matching closing brace\n if match:\n (endline, endlinenum, endpos) = CloseExpression(clean_lines, linenum, len(match.group(1)))\n if endpos > -1 and re.match(r\"^\\s*;\", endline[endpos:]):\n # Current {} pair is eligible for semicolon check, and we have found\n # the redundant semicolon, output warning here.\n #\n # Note: because we are scanning forward for opening braces, and\n # outputting warnings for the matching closing brace, if there are\n # nested blocks with trailing semicolons, we will get the error\n # messages in reversed order.\n\n # We need to check the line forward for NOLINT\n raw_lines = clean_lines.raw_lines\n ParseNolintSuppressions(filename, raw_lines[endlinenum - 1], endlinenum - 1, error)\n ParseNolintSuppressions(filename, raw_lines[endlinenum], endlinenum, error)\n\n error(filename, endlinenum, \"readability/braces\", 4, \"You don't need a ; after a }\")\n\n\ndef CheckEmptyBlockBody(filename, clean_lines, linenum, error):\n \"\"\"Look for empty loop/conditional body with only a single semicolon.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n\n # Search for loop keywords at the beginning of the line. Because only\n # whitespaces are allowed before the keywords, this will also ignore most\n # do-while-loops, since those lines should start with closing brace.\n #\n # We also check \"if\" blocks here, since an empty conditional block\n # is likely an error.\n line = clean_lines.elided[linenum]\n if matched := re.match(r\"\\s*(for|while|if)\\s*\\(\", line):\n # Find the end of the conditional expression.\n (end_line, end_linenum, end_pos) = CloseExpression(clean_lines, linenum, line.find(\"(\"))\n\n # Output warning if what follows the condition expression is a semicolon.\n # No warning for all other cases, including whitespace or newline, since we\n # have a separate check for semicolons preceded by whitespace.\n if end_pos >= 0 and re.match(r\";\", end_line[end_pos:]):\n if matched.group(1) == \"if\":\n error(\n filename,\n end_linenum,\n \"whitespace/empty_conditional_body\",\n 5,\n \"Empty conditional bodies should use {}\",\n )\n else:\n error(\n filename,\n end_linenum,\n \"whitespace/empty_loop_body\",\n 5,\n \"Empty loop bodies should use {} or continue\",\n )\n\n # Check for if statements that have completely empty bodies (no comments)\n # and no else clauses.\n if end_pos >= 0 and matched.group(1) == \"if\":\n # Find the position of the opening { for the if statement.\n # Return without logging an error if it has no brackets.\n opening_linenum = end_linenum\n opening_line_fragment = end_line[end_pos:]\n # Loop until EOF or find anything that's not whitespace or opening {.\n while not re.search(r\"^\\s*\\{\", opening_line_fragment):\n if re.search(r\"^(?!\\s*$)\", opening_line_fragment):\n # Conditional has no brackets.\n return\n opening_linenum += 1\n if opening_linenum == len(clean_lines.elided):\n # Couldn't find conditional's opening { or any code before EOF.\n return\n opening_line_fragment = clean_lines.elided[opening_linenum]\n # Set opening_line (opening_line_fragment may not be entire opening line).\n opening_line = clean_lines.elided[opening_linenum]\n\n # Find the position of the closing }.\n opening_pos = opening_line_fragment.find(\"{\")\n if opening_linenum == end_linenum:\n # We need to make opening_pos relative to the start of the entire line.\n opening_pos += end_pos\n (closing_line, closing_linenum, closing_pos) = CloseExpression(\n clean_lines, opening_linenum, opening_pos\n )\n if closing_pos < 0:\n return\n\n # Now construct the body of the conditional. This consists of the portion\n # of the opening line after the {, all lines until the closing line,\n # and the portion of the closing line before the }.\n if clean_lines.raw_lines[opening_linenum] != CleanseComments(\n clean_lines.raw_lines[opening_linenum]\n ):\n # Opening line ends with a comment, so conditional isn't empty.\n return\n if closing_linenum > opening_linenum:\n # Opening line after the {. Ignore comments here since we checked above.\n bodylist = list(opening_line[opening_pos + 1 :])\n # All lines until closing line, excluding closing line, with comments.\n bodylist.extend(clean_lines.raw_lines[opening_linenum + 1 : closing_linenum])\n # Closing line before the }. Won't (and can't) have comments.\n bodylist.append(clean_lines.elided[closing_linenum][: closing_pos - 1])\n body = \"\\n\".join(bodylist)\n else:\n # If statement has brackets and fits on a single line.\n body = opening_line[opening_pos + 1 : closing_pos - 1]\n\n # Check if the body is empty\n if not _EMPTY_CONDITIONAL_BODY_PATTERN.search(body):\n return\n # The body is empty. Now make sure there's not an else clause.\n current_linenum = closing_linenum\n current_line_fragment = closing_line[closing_pos:]\n # Loop until EOF or find anything that's not whitespace or else clause.\n while re.search(r\"^\\s*$|^(?=\\s*else)\", current_line_fragment):\n if re.search(r\"^(?=\\s*else)\", current_line_fragment):\n # Found an else clause, so don't log an error.\n return\n current_linenum += 1\n if current_linenum == len(clean_lines.elided):\n break\n current_line_fragment = clean_lines.elided[current_linenum]\n\n # The body is empty and there's no else clause until EOF or other code.\n error(\n filename,\n end_linenum,\n \"whitespace/empty_if_body\",\n 4,\n (\"If statement had no body and no else clause\"),\n )\n\n\ndef FindCheckMacro(line):\n \"\"\"Find a replaceable CHECK-like macro.\n\n Args:\n line: line to search on.\n Returns:\n (macro name, start position), or (None, -1) if no replaceable\n macro is found.\n \"\"\"\n for macro in _CHECK_MACROS:\n i = line.find(macro)\n if i >= 0:\n # Find opening parenthesis. Do a regular expression match here\n # to make sure that we are matching the expected CHECK macro, as\n # opposed to some other macro that happens to contain the CHECK\n # substring.\n matched = re.match(r\"^(.*\\b\" + macro + r\"\\s*)\\(\", line)\n if not matched:\n continue\n return (macro, len(matched.group(1)))\n return (None, -1)\n\n\ndef CheckCheck(filename, clean_lines, linenum, error):\n \"\"\"Checks the use of CHECK and EXPECT macros.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n\n # Decide the set of replacement macros that should be suggested\n lines = clean_lines.elided\n (check_macro, start_pos) = FindCheckMacro(lines[linenum])\n if not check_macro:\n return\n\n # Find end of the boolean expression by matching parentheses\n (last_line, end_line, end_pos) = CloseExpression(clean_lines, linenum, start_pos)\n if end_pos < 0:\n return\n\n # If the check macro is followed by something other than a\n # semicolon, assume users will log their own custom error messages\n # and don't suggest any replacements.\n if not re.match(r\"\\s*;\", last_line[end_pos:]):\n return\n\n if linenum == end_line:\n expression = lines[linenum][start_pos + 1 : end_pos - 1]\n else:\n expression = lines[linenum][start_pos + 1 :]\n for i in range(linenum + 1, end_line):\n expression += lines[i]\n expression += last_line[0 : end_pos - 1]\n\n # Parse expression so that we can take parentheses into account.\n # This avoids false positives for inputs like \"CHECK((a < 4) == b)\",\n # which is not replaceable by CHECK_LE.\n lhs = \"\"\n rhs = \"\"\n operator = None\n while expression:\n matched = re.match(\n r\"^\\s*(<<|<<=|>>|>>=|->\\*|->|&&|\\|\\||\"\n r\"==|!=|>=|>|<=|<|\\()(.*)$\",\n expression,\n )\n if matched:\n token = matched.group(1)\n if token == \"(\":\n # Parenthesized operand\n expression = matched.group(2)\n (end, _) = FindEndOfExpressionInLine(expression, 0, [\"(\"])\n if end < 0:\n return # Unmatched parenthesis\n lhs += \"(\" + expression[0:end]\n expression = expression[end:]\n elif token in (\"&&\", \"||\"):\n # Logical and/or operators. This means the expression\n # contains more than one term, for example:\n # CHECK(42 < a && a < b);\n #\n # These are not replaceable with CHECK_LE, so bail out early.\n return\n elif token in (\"<<\", \"<<=\", \">>\", \">>=\", \"->*\", \"->\"):\n # Non-relational operator\n lhs += token\n expression = matched.group(2)\n else:\n # Relational operator\n operator = token\n rhs = matched.group(2)\n break\n else:\n # Unparenthesized operand. Instead of appending to lhs one character\n # at a time, we do another regular expression match to consume several\n # characters at once if possible. Trivial benchmark shows that this\n # is more efficient when the operands are longer than a single\n # character, which is generally the case.\n matched = re.match(r\"^([^-=!<>()&|]+)(.*)$\", expression)\n if not matched:\n matched = re.match(r\"^(\\s*\\S)(.*)$\", expression)\n if not matched:\n break\n lhs += matched.group(1)\n expression = matched.group(2)\n\n # Only apply checks if we got all parts of the boolean expression\n if not (lhs and operator and rhs):\n return\n\n # Check that rhs do not contain logical operators. We already know\n # that lhs is fine since the loop above parses out && and ||.\n if rhs.find(\"&&\") > -1 or rhs.find(\"||\") > -1:\n return\n\n # At least one of the operands must be a constant literal. This is\n # to avoid suggesting replacements for unprintable things like\n # CHECK(variable != iterator)\n #\n # The following pattern matches decimal, hex integers, strings, and\n # characters (in that order).\n lhs = lhs.strip()\n rhs = rhs.strip()\n match_constant = r'^([-+]?(\\d+|0[xX][0-9a-fA-F]+)[lLuU]{0,3}|\".*\"|\\'.*\\')$'\n if re.match(match_constant, lhs) or re.match(match_constant, rhs):\n # Note: since we know both lhs and rhs, we can provide a more\n # descriptive error message like:\n # Consider using CHECK_EQ(x, 42) instead of CHECK(x == 42)\n # Instead of:\n # Consider using CHECK_EQ instead of CHECK(a == b)\n #\n # We are still keeping the less descriptive message because if lhs\n # or rhs gets long, the error message might become unreadable.\n error(\n filename,\n linenum,\n \"readability/check\",\n 2,\n f\"Consider using {_CHECK_REPLACEMENT[check_macro][operator]}\"\n f\" instead of {check_macro}(a {operator} b)\",\n )\n\n\ndef CheckAltTokens(filename, clean_lines, linenum, error):\n \"\"\"Check alternative keywords being used in boolean expressions.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # Avoid preprocessor lines\n if re.match(r\"^\\s*#\", line):\n return\n\n # Last ditch effort to avoid multi-line comments. This will not help\n # if the comment started before the current line or ended after the\n # current line, but it catches most of the false positives. At least,\n # it provides a way to workaround this warning for people who use\n # multi-line comments in preprocessor macros.\n #\n # TODO(google): remove this once cpplint has better support for\n # multi-line comments.\n if line.find(\"/*\") >= 0 or line.find(\"*/\") >= 0:\n return\n\n for match in _ALT_TOKEN_REPLACEMENT_PATTERN.finditer(line):\n error(\n filename,\n linenum,\n \"readability/alt_tokens\",\n 2,\n f\"Use operator {_ALT_TOKEN_REPLACEMENT[match.group(2)]} instead of {match.group(2)}\",\n )\n\n\ndef GetLineWidth(line):\n \"\"\"Determines the width of the line in column positions.\n\n Args:\n line: A string, which may be a Unicode string.\n\n Returns:\n The width of the line in column positions, accounting for Unicode\n combining characters and wide characters.\n \"\"\"\n if isinstance(line, str):\n width = 0\n for uc in unicodedata.normalize(\"NFC\", line):\n if unicodedata.east_asian_width(uc) in (\"W\", \"F\"):\n width += 2\n elif not unicodedata.combining(uc):\n # Issue 337\n # https://mail.python.org/pipermail/python-list/2012-August/628809.html\n if (sys.version_info.major, sys.version_info.minor) <= (3, 2):\n # https://github.com/python/cpython/blob/2.7/Include/unicodeobject.h#L81\n is_wide_build = sysconfig.get_config_var(\"Py_UNICODE_SIZE\") >= 4\n # https://github.com/python/cpython/blob/2.7/Objects/unicodeobject.c#L564\n is_low_surrogate = 0xDC00 <= ord(uc) <= 0xDFFF\n if not is_wide_build and is_low_surrogate:\n width -= 1\n\n width += 1\n return width\n return len(line)\n\n\ndef CheckStyle(filename, clean_lines, linenum, file_extension, nesting_state, error, cppvar=None):\n \"\"\"Checks rules from the 'C++ style rules' section of cppguide.html.\n\n Most of these rules are hard to test (naming, comment style), but we\n do what we can. In particular we check for 2-space indents, line lengths,\n tab usage, spaces inside code, etc.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n file_extension: The extension (without the dot) of the filename.\n nesting_state: A NestingState instance which maintains information about\n the current stack of nested blocks being parsed.\n error: The function to call with any errors found.\n cppvar: The header guard variable returned by GetHeaderGuardCPPVar.\n \"\"\"\n\n # Don't use \"elided\" lines here, otherwise we can't check commented lines.\n # Don't want to use \"raw\" either, because we don't want to check inside C++11\n # raw strings,\n raw_lines = clean_lines.lines_without_raw_strings\n line = raw_lines[linenum]\n prev = raw_lines[linenum - 1] if linenum > 0 else \"\"\n\n if line.find(\"\\t\") != -1:\n error(filename, linenum, \"whitespace/tab\", 1, \"Tab found; better to use spaces\")\n\n # One or three blank spaces at the beginning of the line is weird; it's\n # hard to reconcile that with 2-space indents.\n # NOTE: here are the conditions rob pike used for his tests. Mine aren't\n # as sophisticated, but it may be worth becoming so: RLENGTH==initial_spaces\n # if(RLENGTH > 20) complain = 0;\n # if(match($0, \" +(error|private|public|protected):\")) complain = 0;\n # if(match(prev, \"&& *$\")) complain = 0;\n # if(match(prev, \"\\\\|\\\\| *$\")) complain = 0;\n # if(match(prev, \"[\\\",=><] *$\")) complain = 0;\n # if(match($0, \" <<\")) complain = 0;\n # if(match(prev, \" +for \\\\(\")) complain = 0;\n # if(prevodd && match(prevprev, \" +for \\\\(\")) complain = 0;\n scope_or_label_pattern = r\"\\s*(?:public|private|protected|signals)(?:\\s+(?:slots\\s*)?)?:\\s*\\\\?$\"\n classinfo = nesting_state.InnermostClass()\n initial_spaces = 0\n cleansed_line = clean_lines.elided[linenum]\n while initial_spaces < len(line) and line[initial_spaces] == \" \":\n initial_spaces += 1\n # There are certain situations we allow one space, notably for\n # section labels, and also lines containing multi-line raw strings.\n # We also don't check for lines that look like continuation lines\n # (of lines ending in double quotes, commas, equals, or angle brackets)\n # because the rules for how to indent those are non-trivial.\n if (\n not re.search(r'[\",=><] *$', prev)\n and (initial_spaces in {1, 3})\n and not re.match(scope_or_label_pattern, cleansed_line)\n and not (clean_lines.raw_lines[linenum] != line and re.match(r'^\\s*\"\"', line))\n ):\n error(\n filename,\n linenum,\n \"whitespace/indent\",\n 3,\n \"Weird number of spaces at line-start. Are you using a 2-space indent?\",\n )\n\n if line and line[-1].isspace():\n error(\n filename,\n linenum,\n \"whitespace/end_of_line\",\n 4,\n \"Line ends in whitespace. Consider deleting these extra spaces.\",\n )\n\n # Check if the line is a header guard.\n is_header_guard = IsHeaderExtension(file_extension) and line.startswith(\n (f\"#ifndef {cppvar}\", f\"#define {cppvar}\", f\"#endif // {cppvar}\")\n )\n # #include lines and header guards can be long, since there's no clean way to\n # split them.\n #\n # URLs can be long too. It's possible to split these, but it makes them\n # harder to cut&paste.\n #\n # The \"$Id:...$\" comment may also get very long without it being the\n # developers fault.\n #\n # Doxygen documentation copying can get pretty long when using an overloaded\n # function declaration\n if (\n not line.startswith(\"#include\")\n and not is_header_guard\n and not re.match(r\"^\\s*//.*http(s?)://\\S*$\", line)\n and not re.match(r\"^\\s*//\\s*[^\\s]*$\", line)\n and not re.match(r\"^// \\$Id:.*#[0-9]+ \\$$\", line)\n and not re.match(r\"^\\s*/// [@\\\\](copydoc|copydetails|copybrief) .*$\", line)\n ):\n line_width = GetLineWidth(line)\n if line_width > _line_length:\n error(\n filename,\n linenum,\n \"whitespace/line_length\",\n 2,\n f\"Lines should be <= {_line_length} characters long\",\n )\n\n if (\n cleansed_line.count(\";\") > 1\n and\n # allow simple single line lambdas\n not re.match(r\"^[^{};]*\\[[^\\[\\]]*\\][^{}]*\\{[^{}\\n\\r]*\\}\", line)\n and\n # for loops are allowed two ;'s (and may run over two lines).\n cleansed_line.find(\"for\") == -1\n and (\n GetPreviousNonBlankLine(clean_lines, linenum)[0].find(\"for\") == -1\n or GetPreviousNonBlankLine(clean_lines, linenum)[0].find(\";\") != -1\n )\n and\n # It's ok to have many commands in a switch case that fits in 1 line\n not (\n (cleansed_line.find(\"case \") != -1 or cleansed_line.find(\"default:\") != -1)\n and cleansed_line.find(\"break;\") != -1\n )\n ):\n error(filename, linenum, \"whitespace/newline\", 0, \"More than one command on the same line\")\n\n # Some more style checks\n CheckBraces(filename, clean_lines, linenum, error)\n CheckTrailingSemicolon(filename, clean_lines, linenum, error)\n CheckEmptyBlockBody(filename, clean_lines, linenum, error)\n CheckSpacing(filename, clean_lines, linenum, nesting_state, error)\n CheckOperatorSpacing(filename, clean_lines, linenum, error)\n CheckParenthesisSpacing(filename, clean_lines, linenum, error)\n CheckCommaSpacing(filename, clean_lines, linenum, error)\n CheckBracesSpacing(filename, clean_lines, linenum, nesting_state, error)\n CheckSpacingForFunctionCall(filename, clean_lines, linenum, error)\n CheckCheck(filename, clean_lines, linenum, error)\n CheckAltTokens(filename, clean_lines, linenum, error)\n classinfo = nesting_state.InnermostClass()\n if classinfo:\n CheckSectionSpacing(filename, clean_lines, classinfo, linenum, error)\n\n\n_RE_PATTERN_INCLUDE = re.compile(r'^\\s*#\\s*include\\s*([<\"])([^>\"]*)[>\"].*$')\n# Matches the first component of a filename delimited by -s and _s. That is:\n# _RE_FIRST_COMPONENT.match('foo').group(0) == 'foo'\n# _RE_FIRST_COMPONENT.match('foo.cc').group(0) == 'foo'\n# _RE_FIRST_COMPONENT.match('foo-bar_baz.cc').group(0) == 'foo'\n# _RE_FIRST_COMPONENT.match('foo_bar-baz.cc').group(0) == 'foo'\n_RE_FIRST_COMPONENT = re.compile(r\"^[^-_.]+\")\n\n\ndef _DropCommonSuffixes(filename):\n \"\"\"Drops common suffixes like _test.cc or -inl.h from filename.\n\n For example:\n >>> _DropCommonSuffixes('foo/foo-inl.h')\n 'foo/foo'\n >>> _DropCommonSuffixes('foo/bar/foo.cc')\n 'foo/bar/foo'\n >>> _DropCommonSuffixes('foo/foo_internal.h')\n 'foo/foo'\n >>> _DropCommonSuffixes('foo/foo_unusualinternal.h')\n 'foo/foo_unusualinternal'\n\n Args:\n filename: The input filename.\n\n Returns:\n The filename with the common suffix removed.\n \"\"\"\n for suffix in itertools.chain(\n (\n f\"{test_suffix.lstrip('_')}.{ext}\"\n for test_suffix, ext in itertools.product(_test_suffixes, GetNonHeaderExtensions())\n ),\n (\n f\"{suffix}.{ext}\"\n for suffix, ext in itertools.product([\"inl\", \"imp\", \"internal\"], GetHeaderExtensions())\n ),\n ):\n if (\n filename.endswith(suffix)\n and len(filename) > len(suffix)\n and filename[-len(suffix) - 1] in (\"-\", \"_\")\n ):\n return filename[: -len(suffix) - 1]\n return os.path.splitext(filename)[0]\n\n\ndef _ClassifyInclude(fileinfo, include, used_angle_brackets, include_order=\"default\"):\n \"\"\"Figures out what kind of header 'include' is.\n\n Args:\n fileinfo: The current file cpplint is running over. A FileInfo instance.\n include: The path to a #included file.\n used_angle_brackets: True if the #include used <> rather than \"\".\n include_order: \"default\" or other value allowed in program arguments\n\n Returns:\n One of the _XXX_HEADER constants.\n\n For example:\n >>> _ClassifyInclude(FileInfo('foo/foo.cc'), 'stdio.h', True)\n _C_SYS_HEADER\n >>> _ClassifyInclude(FileInfo('foo/foo.cc'), 'string', True)\n _CPP_SYS_HEADER\n >>> _ClassifyInclude(FileInfo('foo/foo.cc'), 'foo/foo.h', True, \"standardcfirst\")\n _OTHER_SYS_HEADER\n >>> _ClassifyInclude(FileInfo('foo/foo.cc'), 'foo/foo.h', False)\n _LIKELY_MY_HEADER\n >>> _ClassifyInclude(FileInfo('foo/foo_unknown_extension.cc'),\n ... 'bar/foo_other_ext.h', False)\n _POSSIBLE_MY_HEADER\n >>> _ClassifyInclude(FileInfo('foo/foo.cc'), 'foo/bar.h', False)\n _OTHER_HEADER\n \"\"\"\n # This is a list of all standard c++ header files, except\n # those already checked for above.\n is_cpp_header = include in _CPP_HEADERS\n\n # Mark include as C header if in list or in a known folder for standard-ish C headers.\n is_std_c_header = (include_order == \"default\") or (\n include in _C_HEADERS\n # additional linux glibc header folders\n or re.search(rf\"(?:{'|'.join(C_STANDARD_HEADER_FOLDERS)})\\/.*\\.h\", include)\n )\n\n # Headers with C++ extensions shouldn't be considered C system headers\n include_ext = os.path.splitext(include)[1]\n is_system = used_angle_brackets and include_ext not in [\".hh\", \".hpp\", \".hxx\", \".h++\"]\n\n if is_system:\n if is_cpp_header:\n return _CPP_SYS_HEADER\n if is_std_c_header:\n return _C_SYS_HEADER\n return _OTHER_SYS_HEADER\n\n # If the target file and the include we're checking share a\n # basename when we drop common extensions, and the include\n # lives in . , then it's likely to be owned by the target file.\n target_dir, target_base = os.path.split(_DropCommonSuffixes(fileinfo.RepositoryName()))\n include_dir, include_base = os.path.split(_DropCommonSuffixes(include))\n target_dir_pub = os.path.normpath(target_dir + \"/../public\")\n target_dir_pub = target_dir_pub.replace(\"\\\\\", \"/\")\n if target_base == include_base and (include_dir in (target_dir, target_dir_pub)):\n return _LIKELY_MY_HEADER\n\n # If the target and include share some initial basename\n # component, it's possible the target is implementing the\n # include, so it's allowed to be first, but we'll never\n # complain if it's not there.\n target_first_component = _RE_FIRST_COMPONENT.match(target_base)\n include_first_component = _RE_FIRST_COMPONENT.match(include_base)\n if (\n target_first_component\n and include_first_component\n and target_first_component.group(0) == include_first_component.group(0)\n ):\n return _POSSIBLE_MY_HEADER\n\n return _OTHER_HEADER\n\n\ndef CheckIncludeLine(filename, clean_lines, linenum, include_state, error):\n \"\"\"Check rules that are applicable to #include lines.\n\n Strings on #include lines are NOT removed from elided line, to make\n certain tasks easier. However, to prevent false positives, checks\n applicable to #include lines in CheckLanguage must be put here.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n include_state: An _IncludeState instance in which the headers are inserted.\n error: The function to call with any errors found.\n \"\"\"\n fileinfo = FileInfo(filename)\n line = clean_lines.lines[linenum]\n\n # \"include\" should use the new style \"foo/bar.h\" instead of just \"bar.h\"\n # Only do this check if the included header follows google naming\n # conventions. If not, assume that it's a 3rd party API that\n # requires special include conventions.\n #\n # We also make an exception for Lua headers, which follow google\n # naming convention but not the include convention.\n match = re.match(r'#include\\s*\"([^/]+\\.(.*))\"', line)\n if (\n match\n and IsHeaderExtension(match.group(2))\n and not _THIRD_PARTY_HEADERS_PATTERN.match(match.group(1))\n ):\n error(\n filename,\n linenum,\n \"build/include_subdir\",\n 4,\n \"Include the directory when naming header files\",\n )\n\n # we shouldn't include a file more than once. actually, there are a\n # handful of instances where doing so is okay, but in general it's\n # not.\n match = _RE_PATTERN_INCLUDE.search(line)\n if match:\n include = match.group(2)\n used_angle_brackets = match.group(1) == \"<\"\n duplicate_line = include_state.FindHeader(include)\n if duplicate_line >= 0:\n error(\n filename,\n linenum,\n \"build/include\",\n 4,\n f'\"{include}\" already included at {filename}:{duplicate_line}',\n )\n return\n\n for extension in GetNonHeaderExtensions():\n if include.endswith(\".\" + extension) and os.path.dirname(\n fileinfo.RepositoryName()\n ) != os.path.dirname(include):\n error(\n filename,\n linenum,\n \"build/include\",\n 4,\n \"Do not include .\" + extension + \" files from other packages\",\n )\n return\n\n # We DO want to include a 3rd party looking header if it matches the\n # filename. Otherwise we get an erroneous error \"...should include its\n # header\" error later.\n third_src_header = False\n for ext in GetHeaderExtensions():\n basefilename = filename[0 : len(filename) - len(fileinfo.Extension())]\n headerfile = basefilename + \".\" + ext\n headername = FileInfo(headerfile).RepositoryName()\n if headername in include or include in headername:\n third_src_header = True\n break\n\n if third_src_header or not _THIRD_PARTY_HEADERS_PATTERN.match(include):\n include_state.include_list[-1].append((include, linenum))\n\n # We want to ensure that headers appear in the right order:\n # 1) for foo.cc, foo.h (preferred location)\n # 2) c system files\n # 3) cpp system files\n # 4) for foo.cc, foo.h (deprecated location)\n # 5) other google headers\n #\n # We classify each include statement as one of those 5 types\n # using a number of techniques. The include_state object keeps\n # track of the highest type seen, and complains if we see a\n # lower type after that.\n error_message = include_state.CheckNextIncludeOrder(\n _ClassifyInclude(fileinfo, include, used_angle_brackets, _include_order)\n )\n if error_message:\n error(\n filename,\n linenum,\n \"build/include_order\",\n 4,\n f\"{error_message}. Should be: {fileinfo.BaseName()}.h, c routing,\"\n \" c++ routing, other.\",\n )\n canonical_include = include_state.CanonicalizeAlphabeticalOrder(include)\n if not include_state.IsInAlphabeticalOrder(clean_lines, linenum, canonical_include):\n error(\n filename,\n linenum,\n \"build/include_alpha\",\n 4,\n f'Include \"{include}\" not in alphabetical order',\n )\n include_state.SetLastHeader(canonical_include)\n\n\ndef _GetTextInside(text, start_pattern):\n r\"\"\"Retrieves all the text between matching open and close parentheses.\n\n Given a string of lines and a regular expression string, retrieve all the text\n following the expression and between opening punctuation symbols like\n (, [, or {, and the matching close-punctuation symbol. This properly nested\n occurrences of the punctuation, so for the text like\n printf(a(), b(c()));\n a call to _GetTextInside(text, r'printf\\(') will return 'a(), b(c())'.\n start_pattern must match string having an open punctuation symbol at the end.\n\n Args:\n text: The lines to extract text. Its comments and strings must be elided.\n It can be single line and can span multiple lines.\n start_pattern: The regexp string indicating where to start extracting\n the text.\n Returns:\n The extracted text.\n None if either the opening string or ending punctuation could not be found.\n \"\"\"\n # TODO(google): Audit cpplint.py to see what places could be profitably\n # rewritten to use _GetTextInside (and use inferior regexp matching today).\n\n # Give opening punctuation to get the matching close-punctuation.\n matching_punctuation = {\"(\": \")\", \"{\": \"}\", \"[\": \"]\"}\n closing_punctuation = set(dict.values(matching_punctuation))\n\n # Find the position to start extracting text.\n match = re.search(start_pattern, text, re.MULTILINE)\n if not match: # start_pattern not found in text.\n return None\n start_position = match.end(0)\n\n assert start_position > 0, \"start_pattern must ends with an opening punctuation.\"\n assert text[start_position - 1] in matching_punctuation, (\n \"start_pattern must ends with an opening punctuation.\"\n )\n # Stack of closing punctuation we expect to have in text after position.\n punctuation_stack = [matching_punctuation[text[start_position - 1]]]\n position = start_position\n while punctuation_stack and position < len(text):\n if text[position] == punctuation_stack[-1]:\n punctuation_stack.pop()\n elif text[position] in closing_punctuation:\n # A closing punctuation without matching opening punctuation.\n return None\n elif text[position] in matching_punctuation:\n punctuation_stack.append(matching_punctuation[text[position]])\n position += 1\n if punctuation_stack:\n # Opening punctuation left without matching close-punctuation.\n return None\n # punctuation match.\n return text[start_position : position - 1]\n\n\n# Patterns for matching call-by-reference parameters.\n#\n# Supports nested templates up to 2 levels deep using this messy pattern:\n# < (?: < (?: < [^<>]*\n# >\n# | [^<>] )*\n# >\n# | [^<>] )*\n# >\n_RE_PATTERN_IDENT = r\"[_a-zA-Z]\\w*\" # =~ [[:alpha:]][[:alnum:]]*\n_RE_PATTERN_TYPE = (\n r\"(?:const\\s+)?(?:typename\\s+|class\\s+|struct\\s+|union\\s+|enum\\s+)?\"\n r\"(?:\\w|\"\n r\"\\s*<(?:<(?:<[^<>]*>|[^<>])*>|[^<>])*>|\"\n r\"::)+\"\n)\n# A call-by-reference parameter ends with '& identifier'.\n_RE_PATTERN_REF_PARAM = re.compile(\n r\"(\" + _RE_PATTERN_TYPE + r\"(?:\\s*(?:\\bconst\\b|[*]))*\\s*\"\n r\"&\\s*\" + _RE_PATTERN_IDENT + r\")\\s*(?:=[^,()]+)?[,)]\"\n)\n# A call-by-const-reference parameter either ends with 'const& identifier'\n# or looks like 'const type& identifier' when 'type' is atomic.\n_RE_PATTERN_CONST_REF_PARAM = (\n r\"(?:.*\\s*\\bconst\\s*&\\s*\"\n + _RE_PATTERN_IDENT\n + r\"|const\\s+\"\n + _RE_PATTERN_TYPE\n + r\"\\s*&\\s*\"\n + _RE_PATTERN_IDENT\n + r\")\"\n)\n# Stream types.\n_RE_PATTERN_REF_STREAM_PARAM = r\"(?:.*stream\\s*&\\s*\" + _RE_PATTERN_IDENT + r\")\"\n\n\ndef CheckLanguage(\n filename, clean_lines, linenum, file_extension, include_state, nesting_state, error\n):\n \"\"\"Checks rules from the 'C++ language rules' section of cppguide.html.\n\n Some of these rules are hard to test (function overloading, using\n uint32_t inappropriately), but we do the best we can.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n file_extension: The extension (without the dot) of the filename.\n include_state: An _IncludeState instance in which the headers are inserted.\n nesting_state: A NestingState instance which maintains information about\n the current stack of nested blocks being parsed.\n error: The function to call with any errors found.\n \"\"\"\n # If the line is empty or consists of entirely a comment, no need to\n # check it.\n line = clean_lines.elided[linenum]\n if not line:\n return\n\n match = _RE_PATTERN_INCLUDE.search(line)\n if match:\n CheckIncludeLine(filename, clean_lines, linenum, include_state, error)\n return\n\n # Reset include state across preprocessor directives. This is meant\n # to silence warnings for conditional includes.\n match = re.match(r\"^\\s*#\\s*(if|ifdef|ifndef|elif|else|endif)\\b\", line)\n if match:\n include_state.ResetSection(match.group(1))\n\n # Perform other checks now that we are sure that this is not an include line\n CheckCasts(filename, clean_lines, linenum, error)\n CheckGlobalStatic(filename, clean_lines, linenum, error)\n CheckPrintf(filename, clean_lines, linenum, error)\n\n if IsHeaderExtension(file_extension):\n # TODO(google): check that 1-arg constructors are explicit.\n # How to tell it's a constructor?\n # (handled in CheckForNonStandardConstructs for now)\n # TODO(google): check that classes declare or disable copy/assign\n # (level 1 error)\n pass\n\n # Check if people are using the verboten C basic types. The only exception\n # we regularly allow is \"unsigned short port\" for port.\n if re.search(r\"\\bshort port\\b\", line):\n if not re.search(r\"\\bunsigned short port\\b\", line):\n error(\n filename, linenum, \"runtime/int\", 4, 'Use \"unsigned short\" for ports, not \"short\"'\n )\n else:\n match = re.search(r\"\\b(short|long(?! +double)|long long)\\b\", line)\n if match:\n error(\n filename,\n linenum,\n \"runtime/int\",\n 4,\n f\"Use int16_t/int64_t/etc, rather than the C type {match.group(1)}\",\n )\n\n # Check if some verboten operator overloading is going on\n # TODO(google): catch out-of-line unary operator&:\n # class X {};\n # int operator&(const X& x) { return 42; } // unary operator&\n # The trick is it's hard to tell apart from binary operator&:\n # class Y { int operator&(const Y& x) { return 23; } }; // binary operator&\n if re.search(r\"\\boperator\\s*&\\s*\\(\\s*\\)\", line):\n error(\n filename,\n linenum,\n \"runtime/operator\",\n 4,\n \"Unary operator& is dangerous. Do not use it.\",\n )\n\n # Check for suspicious usage of \"if\" like\n # } if (a == b) {\n if re.search(r\"\\}\\s*if\\s*\\(\", line):\n error(\n filename,\n linenum,\n \"readability/braces\",\n 4,\n 'Did you mean \"else if\"? If not, start a new line for \"if\".',\n )\n\n # Check for potential format string bugs like printf(foo).\n # We constrain the pattern not to pick things like DocidForPrintf(foo).\n # Not perfect but it can catch printf(foo.c_str()) and printf(foo->c_str())\n # TODO(google): Catch the following case. Need to change the calling\n # convention of the whole function to process multiple line to handle it.\n # printf(\n # boy_this_is_a_really_long_variable_that_cannot_fit_on_the_prev_line);\n if printf_args := _GetTextInside(line, r\"(?i)\\b(string)?printf\\s*\\(\"):\n match = re.match(r\"([\\w.\\->()]+)$\", printf_args)\n if match and match.group(1) != \"__VA_ARGS__\":\n function_name = re.search(r\"\\b((?:string)?printf)\\s*\\(\", line, re.IGNORECASE).group(1)\n error(\n filename,\n linenum,\n \"runtime/printf\",\n 4,\n f'Potential format string bug. Do {function_name}(\"%s\", {match.group(1)}) instead.',\n )\n\n # Check for potential memset bugs like memset(buf, sizeof(buf), 0).\n match = re.search(r\"memset\\s*\\(([^,]*),\\s*([^,]*),\\s*0\\s*\\)\", line)\n if match and not re.match(r\"^''|-?[0-9]+|0x[0-9A-Fa-f]$\", match.group(2)):\n error(\n filename,\n linenum,\n \"runtime/memset\",\n 4,\n f'Did you mean \"memset({match.group(1)}, 0, {match.group(2)})\"?',\n )\n\n if re.search(r\"\\busing namespace\\b\", line):\n if re.search(r\"\\bliterals\\b\", line):\n error(\n filename,\n linenum,\n \"build/namespaces_literals\",\n 5,\n \"Do not use namespace using-directives. Use using-declarations instead.\",\n )\n else:\n error(\n filename,\n linenum,\n \"build/namespaces\",\n 5,\n \"Do not use namespace using-directives. Use using-declarations instead.\",\n )\n\n # Detect variable-length arrays.\n match = re.match(r\"\\s*(.+::)?(\\w+) [a-z]\\w*\\[(.+)];\", line)\n if (\n match\n and match.group(2) != \"return\"\n and match.group(2) != \"delete\"\n and match.group(3).find(\"]\") == -1\n ):\n # Split the size using space and arithmetic operators as delimiters.\n # If any of the resulting tokens are not compile time constants then\n # report the error.\n tokens = re.split(r\"\\s|\\+|\\-|\\*|\\/|<<|>>]\", match.group(3))\n is_const = True\n skip_next = False\n for tok in tokens:\n if skip_next:\n skip_next = False\n continue\n\n if re.search(r\"sizeof\\(.+\\)\", tok):\n continue\n if re.search(r\"arraysize\\(\\w+\\)\", tok):\n continue\n\n tok = tok.lstrip(\"(\")\n tok = tok.rstrip(\")\")\n if not tok:\n continue\n if re.match(r\"\\d+\", tok):\n continue\n if re.match(r\"0[xX][0-9a-fA-F]+\", tok):\n continue\n if re.match(r\"k[A-Z0-9]\\w*\", tok):\n continue\n if re.match(r\"(.+::)?k[A-Z0-9]\\w*\", tok):\n continue\n if re.match(r\"(.+::)?[A-Z][A-Z0-9_]*\", tok):\n continue\n # A catch all for tricky sizeof cases, including 'sizeof expression',\n # 'sizeof(*type)', 'sizeof(const type)', 'sizeof(struct StructName)'\n # requires skipping the next token because we split on ' ' and '*'.\n if tok.startswith(\"sizeof\"):\n skip_next = True\n continue\n is_const = False\n break\n if not is_const:\n error(\n filename,\n linenum,\n \"runtime/arrays\",\n 1,\n \"Do not use variable-length arrays. Use an appropriately named \"\n \"('k' followed by CamelCase) compile-time constant for the size.\",\n )\n\n # Check for use of unnamed namespaces in header files. Registration\n # macros are typically OK, so we allow use of \"namespace {\" on lines\n # that end with backslashes.\n if (\n IsHeaderExtension(file_extension)\n and re.search(r\"\\bnamespace\\s*{\", line)\n and line[-1] != \"\\\\\"\n ):\n error(\n filename,\n linenum,\n \"build/namespaces_headers\",\n 4,\n \"Do not use unnamed namespaces in header files. See \"\n \"https://google-styleguide.googlecode.com/svn/trunk/cppguide.xml#Namespaces\"\n \" for more information.\",\n )\n\n\ndef CheckGlobalStatic(filename, clean_lines, linenum, error):\n \"\"\"Check for unsafe global or static objects.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # Match two lines at a time to support multiline declarations\n if linenum + 1 < clean_lines.NumLines() and not re.search(r\"[;({]\", line):\n line += clean_lines.elided[linenum + 1].strip()\n\n # Check for people declaring static/global STL strings at the top level.\n # This is dangerous because the C++ language does not guarantee that\n # globals with constructors are initialized before the first access, and\n # also because globals can be destroyed when some threads are still running.\n # TODO(google): Generalize this to also find static unique_ptr instances.\n # TODO(google): File bugs for clang-tidy to find these.\n match = re.match(\n r\"((?:|static +)(?:|const +))(?::*std::)?string( +const)? +\"\n r\"([a-zA-Z0-9_:]+)\\b(.*)\",\n line,\n )\n\n # Remove false positives:\n # - String pointers (as opposed to values).\n # string *pointer\n # const string *pointer\n # string const *pointer\n # string *const pointer\n #\n # - Functions and template specializations.\n # string Function(...\n # string Class::Method(...\n #\n # - Operators. These are matched separately because operator names\n # cross non-word boundaries, and trying to match both operators\n # and functions at the same time would decrease accuracy of\n # matching identifiers.\n # string Class::operator*()\n if (\n match\n and not re.search(r\"\\bstring\\b(\\s+const)?\\s*[\\*\\&]\\s*(const\\s+)?\\w\", line)\n and not re.search(r\"\\boperator\\W\", line)\n and not re.match(r'\\s*(<.*>)?(::[a-zA-Z0-9_]+)*\\s*\\(([^\"]|$)', match.group(4))\n ):\n if re.search(r\"\\bconst\\b\", line):\n error(\n filename,\n linenum,\n \"runtime/string\",\n 4,\n \"For a static/global string constant, use a C style string instead:\"\n f' \"{match.group(1)}char{match.group(2) or \"\"} {match.group(3)}[]\".',\n )\n else:\n error(\n filename,\n linenum,\n \"runtime/string\",\n 4,\n \"Static/global string variables are not permitted.\",\n )\n\n if re.search(r\"\\b([A-Za-z0-9_]*_)\\(\\1\\)\", line) or re.search(\n r\"\\b([A-Za-z0-9_]*_)\\(CHECK_NOTNULL\\(\\1\\)\\)\", line\n ):\n error(\n filename,\n linenum,\n \"runtime/init\",\n 4,\n \"You seem to be initializing a member variable with itself.\",\n )\n\n\ndef CheckPrintf(filename, clean_lines, linenum, error):\n \"\"\"Check for printf related issues.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # When snprintf is used, the second argument shouldn't be a literal.\n match = re.search(r\"snprintf\\s*\\(([^,]*),\\s*([0-9]*)\\s*,\", line)\n if match and match.group(2) != \"0\":\n # If 2nd arg is zero, snprintf is used to calculate size.\n error(\n filename,\n linenum,\n \"runtime/printf\",\n 3,\n \"If you can, use\"\n f\" sizeof({match.group(1)}) instead of {match.group(2)}\"\n \" as the 2nd arg to snprintf.\",\n )\n\n # Check if some verboten C functions are being used.\n if re.search(r\"\\bsprintf\\s*\\(\", line):\n error(filename, linenum, \"runtime/printf\", 5, \"Never use sprintf. Use snprintf instead.\")\n match = re.search(r\"\\b(strcpy|strcat)\\s*\\(\", line)\n if match:\n error(\n filename,\n linenum,\n \"runtime/printf\",\n 4,\n f\"Almost always, snprintf is better than {match.group(1)}\",\n )\n\n\ndef IsDerivedFunction(clean_lines, linenum):\n \"\"\"Check if current line contains an inherited function.\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n Returns:\n True if current line contains a function with \"override\"\n virt-specifier.\n \"\"\"\n # Scan back a few lines for start of current function\n for i in range(linenum, max(-1, linenum - 10), -1):\n match = re.match(r\"^([^()]*\\w+)\\(\", clean_lines.elided[i])\n if match:\n # Look for \"override\" after the matching closing parenthesis\n line, _, closing_paren = CloseExpression(clean_lines, i, len(match.group(1)))\n return closing_paren >= 0 and re.search(r\"\\boverride\\b\", line[closing_paren:])\n return False\n\n\ndef IsOutOfLineMethodDefinition(clean_lines, linenum):\n \"\"\"Check if current line contains an out-of-line method definition.\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n Returns:\n True if current line contains an out-of-line method definition.\n \"\"\"\n # Scan back a few lines for start of current function\n for i in range(linenum, max(-1, linenum - 10), -1):\n if re.match(r\"^([^()]*\\w+)\\(\", clean_lines.elided[i]):\n return re.match(r\"^[^()]*\\w+::\\w+\\(\", clean_lines.elided[i]) is not None\n return False\n\n\ndef IsInitializerList(clean_lines, linenum):\n \"\"\"Check if current line is inside constructor initializer list.\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n Returns:\n True if current line appears to be inside constructor initializer\n list, False otherwise.\n \"\"\"\n for i in range(linenum, 1, -1):\n line = clean_lines.elided[i]\n if i == linenum:\n remove_function_body = re.match(r\"^(.*)\\{\\s*$\", line)\n if remove_function_body:\n line = remove_function_body.group(1)\n\n if re.search(r\"\\s:\\s*\\w+[({]\", line):\n # A lone colon tend to indicate the start of a constructor\n # initializer list. It could also be a ternary operator, which\n # also tend to appear in constructor initializer lists as\n # opposed to parameter lists.\n return True\n if re.search(r\"\\}\\s*,\\s*$\", line):\n # A closing brace followed by a comma is probably the end of a\n # brace-initialized member in constructor initializer list.\n return True\n if re.search(r\"[{};]\\s*$\", line):\n # Found one of the following:\n # - A closing brace or semicolon, probably the end of the previous\n # function.\n # - An opening brace, probably the start of current class or namespace.\n #\n # Current line is probably not inside an initializer list since\n # we saw one of those things without seeing the starting colon.\n return False\n\n # Got to the beginning of the file without seeing the start of\n # constructor initializer list.\n return False\n\n\ndef CheckForNonConstReference(filename, clean_lines, linenum, nesting_state, error):\n \"\"\"Check for non-const references.\n\n Separate from CheckLanguage since it scans backwards from current\n line, instead of scanning forward.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n nesting_state: A NestingState instance which maintains information about\n the current stack of nested blocks being parsed.\n error: The function to call with any errors found.\n \"\"\"\n # Do nothing if there is no '&' on current line.\n line = clean_lines.elided[linenum]\n if \"&\" not in line:\n return\n\n # If a function is inherited, current function doesn't have much of\n # a choice, so any non-const references should not be blamed on\n # derived function.\n if IsDerivedFunction(clean_lines, linenum):\n return\n\n # Don't warn on out-of-line method definitions, as we would warn on the\n # in-line declaration, if it isn't marked with 'override'.\n if IsOutOfLineMethodDefinition(clean_lines, linenum):\n return\n\n # Long type names may be broken across multiple lines, usually in one\n # of these forms:\n # LongType\n # ::LongTypeContinued &identifier\n # LongType::\n # LongTypeContinued &identifier\n # LongType<\n # ...>::LongTypeContinued &identifier\n #\n # If we detected a type split across two lines, join the previous\n # line to current line so that we can match const references\n # accordingly.\n #\n # Note that this only scans back one line, since scanning back\n # arbitrary number of lines would be expensive. If you have a type\n # that spans more than 2 lines, please use a typedef.\n if linenum > 1:\n previous = None\n if re.match(r\"\\s*::(?:[\\w<>]|::)+\\s*&\\s*\\S\", line):\n # previous_line\\n + ::current_line\n previous = re.search(\n r\"\\b((?:const\\s*)?(?:[\\w<>]|::)+[\\w<>])\\s*$\", clean_lines.elided[linenum - 1]\n )\n elif re.match(r\"\\s*[a-zA-Z_]([\\w<>]|::)+\\s*&\\s*\\S\", line):\n # previous_line::\\n + current_line\n previous = re.search(\n r\"\\b((?:const\\s*)?(?:[\\w<>]|::)+::)\\s*$\", clean_lines.elided[linenum - 1]\n )\n if previous:\n line = previous.group(1) + line.lstrip()\n else:\n # Check for templated parameter that is split across multiple lines\n endpos = line.rfind(\">\")\n if endpos > -1:\n (_, startline, startpos) = ReverseCloseExpression(clean_lines, linenum, endpos)\n if startpos > -1 and startline < linenum:\n # Found the matching < on an earlier line, collect all\n # pieces up to current line.\n line = \"\"\n for i in range(startline, linenum + 1):\n line += clean_lines.elided[i].strip()\n\n # Check for non-const references in function parameters. A single '&' may\n # found in the following places:\n # inside expression: binary & for bitwise AND\n # inside expression: unary & for taking the address of something\n # inside declarators: reference parameter\n # We will exclude the first two cases by checking that we are not inside a\n # function body, including one that was just introduced by a trailing '{'.\n # TODO(google): Doesn't account for 'catch(Exception& e)' [rare].\n if nesting_state.previous_stack_top and not (\n isinstance(nesting_state.previous_stack_top, (_ClassInfo, _NamespaceInfo))\n ):\n # Not at toplevel, not within a class, and not within a namespace\n return\n\n # Avoid initializer lists. We only need to scan back from the\n # current line for something that starts with ':'.\n #\n # We don't need to check the current line, since the '&' would\n # appear inside the second set of parentheses on the current line as\n # opposed to the first set.\n if linenum > 0:\n for i in range(linenum - 1, max(0, linenum - 10), -1):\n previous_line = clean_lines.elided[i]\n if not re.search(r\"[),]\\s*$\", previous_line):\n break\n if re.match(r\"^\\s*:\\s+\\S\", previous_line):\n return\n\n # Avoid preprocessors\n if re.search(r\"\\\\\\s*$\", line):\n return\n\n # Avoid constructor initializer lists\n if IsInitializerList(clean_lines, linenum):\n return\n\n # We allow non-const references in a few standard places, like functions\n # called \"swap()\" or iostream operators like \"<<\" or \">>\". Do not check\n # those function parameters.\n #\n # We also accept & in static_assert, which looks like a function but\n # it's actually a declaration expression.\n allowed_functions = (\n r\"(?:[sS]wap(?:<\\w:+>)?|\"\n r\"operator\\s*[<>][<>]|\"\n r\"static_assert|COMPILE_ASSERT\"\n r\")\\s*\\(\"\n )\n if re.search(allowed_functions, line):\n return\n if not re.search(r\"\\S+\\([^)]*$\", line):\n # Don't see an allowed function on this line. Actually we\n # didn't see any function name on this line, so this is likely a\n # multi-line parameter list. Try a bit harder to catch this case.\n for i in range(2):\n if linenum > i and re.search(allowed_functions, clean_lines.elided[linenum - i - 1]):\n return\n\n decls = re.sub(r\"{[^}]*}\", \" \", line) # exclude function body\n for parameter in re.findall(_RE_PATTERN_REF_PARAM, decls):\n if not re.match(_RE_PATTERN_CONST_REF_PARAM, parameter) and not re.match(\n _RE_PATTERN_REF_STREAM_PARAM, parameter\n ):\n error(\n filename,\n linenum,\n \"runtime/references\",\n 2,\n \"Is this a non-const reference? \"\n \"If so, make const or use a pointer: \" + re.sub(\" *<\", \"<\", parameter),\n )\n\n\ndef CheckCasts(filename, clean_lines, linenum, error):\n \"\"\"Various cast related checks.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n # Check to see if they're using an conversion function cast.\n # I just try to capture the most common basic types, though there are more.\n # Parameterless conversion functions, such as bool(), are allowed as they are\n # probably a member operator declaration or default constructor.\n match = re.search(\n r\"(\\bnew\\s+(?:const\\s+)?|\\S<\\s*(?:const\\s+)?)?\\b\"\n r\"(int|float|double|bool|char|int16_t|uint16_t|int32_t|uint32_t|int64_t|uint64_t)\"\n r\"(\\([^)].*)\",\n line,\n )\n expecting_function = ExpectingFunctionArgs(clean_lines, linenum)\n if match and not expecting_function:\n matched_type = match.group(2)\n\n # matched_new_or_template is used to silence two false positives:\n # - New operators\n # - Template arguments with function types\n #\n # For template arguments, we match on types immediately following\n # an opening bracket without any spaces. This is a fast way to\n # silence the common case where the function type is the first\n # template argument. False negative with less-than comparison is\n # avoided because those operators are usually followed by a space.\n #\n # function // bracket + no space = false positive\n # value < double(42) // bracket + space = true positive\n matched_new_or_template = match.group(1)\n\n # Avoid arrays by looking for brackets that come after the closing\n # parenthesis.\n if re.match(r\"\\([^()]+\\)\\s*\\[\", match.group(3)):\n return\n\n # Other things to ignore:\n # - Function pointers\n # - Casts to pointer types\n # - Placement new\n # - Alias declarations\n matched_funcptr = match.group(3)\n if (\n matched_new_or_template is None\n and not (\n matched_funcptr\n and (\n re.match(r\"\\((?:[^() ]+::\\s*\\*\\s*)?[^() ]+\\)\\s*\\(\", matched_funcptr)\n or matched_funcptr.startswith(\"(*)\")\n )\n )\n and not re.match(r\"\\s*using\\s+\\S+\\s*=\\s*\" + matched_type, line)\n and not re.search(r\"new\\(\\S+\\)\\s*\" + matched_type, line)\n ):\n error(\n filename,\n linenum,\n \"readability/casting\",\n 4,\n f\"Using deprecated casting style. Use static_cast<{matched_type}>(...) instead\",\n )\n\n if not expecting_function:\n CheckCStyleCast(\n filename,\n clean_lines,\n linenum,\n \"static_cast\",\n r\"\\((int|float|double|bool|char|u?int(16|32|64)_t|size_t)\\)\",\n error,\n )\n\n # This doesn't catch all cases. Consider (const char * const)\"hello\".\n #\n # (char *) \"foo\" should always be a const_cast (reinterpret_cast won't\n # compile).\n if CheckCStyleCast(\n filename, clean_lines, linenum, \"const_cast\", r'\\((char\\s?\\*+\\s?)\\)\\s*\"', error\n ):\n pass\n else:\n # Check pointer casts for other than string constants\n CheckCStyleCast(\n filename, clean_lines, linenum, \"reinterpret_cast\", r\"\\((\\w+\\s?\\*+\\s?)\\)\", error\n )\n\n # In addition, we look for people taking the address of a cast. This\n # is dangerous -- casts can assign to temporaries, so the pointer doesn't\n # point where you think.\n #\n # Some non-identifier character is required before the '&' for the\n # expression to be recognized as a cast. These are casts:\n # expression = &static_cast(temporary());\n # function(&(int*)(temporary()));\n #\n # This is not a cast:\n # reference_type&(int* function_param);\n match = re.search(\n r\"(?:[^\\w]&\\(([^)*][^)]*)\\)[\\w(])|\"\n r\"(?:[^\\w]&(static|dynamic|down|reinterpret)_cast\\b)\",\n line,\n )\n if match:\n # Try a better error message when the & is bound to something\n # dereferenced by the casted pointer, as opposed to the casted\n # pointer itself.\n parenthesis_error = False\n match = re.match(r\"^(.*&(?:static|dynamic|down|reinterpret)_cast\\b)<\", line)\n if match:\n _, y1, x1 = CloseExpression(clean_lines, linenum, len(match.group(1)))\n if x1 >= 0 and clean_lines.elided[y1][x1] == \"(\":\n _, y2, x2 = CloseExpression(clean_lines, y1, x1)\n if x2 >= 0:\n extended_line = clean_lines.elided[y2][x2:]\n if y2 < clean_lines.NumLines() - 1:\n extended_line += clean_lines.elided[y2 + 1]\n if re.match(r\"\\s*(?:->|\\[)\", extended_line):\n parenthesis_error = True\n\n if parenthesis_error:\n error(\n filename,\n linenum,\n \"readability/casting\",\n 4,\n (\n \"Are you taking an address of something dereferenced \"\n \"from a cast? Wrapping the dereferenced expression in \"\n \"parentheses will make the binding more obvious\"\n ),\n )\n else:\n error(\n filename,\n linenum,\n \"runtime/casting\",\n 4,\n (\n \"Are you taking an address of a cast? \"\n \"This is dangerous: could be a temp var. \"\n \"Take the address before doing the cast, rather than after\"\n ),\n )\n\n\ndef CheckCStyleCast(filename, clean_lines, linenum, cast_type, pattern, error):\n \"\"\"Checks for a C-style cast by looking for the pattern.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n cast_type: The string for the C++ cast to recommend. This is either\n reinterpret_cast, static_cast, or const_cast, depending.\n pattern: The regular expression used to find C-style casts.\n error: The function to call with any errors found.\n\n Returns:\n True if an error was emitted.\n False otherwise.\n \"\"\"\n line = clean_lines.elided[linenum]\n match = re.search(pattern, line)\n if not match:\n return False\n\n # Exclude lines with keywords that tend to look like casts\n context = line[0 : match.start(1) - 1]\n if re.match(r\".*\\b(?:sizeof|alignof|alignas|[_A-Z][_A-Z0-9]*)\\s*$\", context):\n return False\n\n # Try expanding current context to see if we one level of\n # parentheses inside a macro.\n if linenum > 0:\n for i in range(linenum - 1, max(0, linenum - 5), -1):\n context = clean_lines.elided[i] + context\n if re.match(r\".*\\b[_A-Z][_A-Z0-9]*\\s*\\((?:\\([^()]*\\)|[^()])*$\", context):\n return False\n\n # operator++(int) and operator--(int)\n if context.endswith((\" operator++\", \" operator--\", \"::operator++\", \"::operator--\")):\n return False\n\n # A single unnamed argument for a function tends to look like old style cast.\n # If we see those, don't issue warnings for deprecated casts.\n remainder = line[match.end(0) :]\n if re.match(r\"^\\s*(?:;|const\\b|throw\\b|final\\b|override\\b|[=>{),]|->)\", remainder):\n return False\n\n # At this point, all that should be left is actual casts.\n error(\n filename,\n linenum,\n \"readability/casting\",\n 4,\n f\"Using C-style cast. Use {cast_type}<{match.group(1)}>(...) instead\",\n )\n\n return True\n\n\ndef ExpectingFunctionArgs(clean_lines, linenum):\n \"\"\"Checks whether where function type arguments are expected.\n\n Args:\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n\n Returns:\n True if the line at 'linenum' is inside something that expects arguments\n of function types.\n \"\"\"\n line = clean_lines.elided[linenum]\n return re.match(r\"^\\s*MOCK_(CONST_)?METHOD\\d+(_T)?\\(\", line) or (\n linenum >= 2\n and (\n re.match(\n r\"^\\s*MOCK_(?:CONST_)?METHOD\\d+(?:_T)?\\((?:\\S+,)?\\s*$\",\n clean_lines.elided[linenum - 1],\n )\n or re.match(\n r\"^\\s*MOCK_(?:CONST_)?METHOD\\d+(?:_T)?\\(\\s*$\", clean_lines.elided[linenum - 2]\n )\n or re.search(r\"\\bstd::m?function\\s*\\<\\s*$\", clean_lines.elided[linenum - 1])\n )\n )\n\n\n_HEADERS_CONTAINING_TEMPLATES: tuple[tuple[str, tuple[str, ...]], ...] = (\n (\"\", (\"deque\",)),\n (\n \"\",\n (\n \"unary_function\",\n \"binary_function\",\n \"plus\",\n \"minus\",\n \"multiplies\",\n \"divides\",\n \"modulus\",\n \"negate\",\n \"equal_to\",\n \"not_equal_to\",\n \"greater\",\n \"less\",\n \"greater_equal\",\n \"less_equal\",\n \"logical_and\",\n \"logical_or\",\n \"logical_not\",\n \"unary_negate\",\n \"not1\",\n \"binary_negate\",\n \"not2\",\n \"bind1st\",\n \"bind2nd\",\n \"pointer_to_unary_function\",\n \"pointer_to_binary_function\",\n \"ptr_fun\",\n \"mem_fun_t\",\n \"mem_fun\",\n \"mem_fun1_t\",\n \"mem_fun1_ref_t\",\n \"mem_fun_ref_t\",\n \"const_mem_fun_t\",\n \"const_mem_fun1_t\",\n \"const_mem_fun_ref_t\",\n \"const_mem_fun1_ref_t\",\n \"mem_fun_ref\",\n ),\n ),\n (\"\", (\"numeric_limits\",)),\n (\"\", (\"list\",)),\n (\"\", (\"multimap\",)),\n (\n \"\",\n (\"allocator\", \"make_shared\", \"make_unique\", \"shared_ptr\", \"unique_ptr\", \"weak_ptr\"),\n ),\n (\n \"\",\n (\n \"queue\",\n \"priority_queue\",\n ),\n ),\n (\n \"\",\n (\n \"set\",\n \"multiset\",\n ),\n ),\n (\"\", (\"stack\",)),\n (\n \"\",\n (\n \"char_traits\",\n \"basic_string\",\n ),\n ),\n (\"\", (\"tuple\",)),\n (\"\", (\"unordered_map\", \"unordered_multimap\")),\n (\"\", (\"unordered_set\", \"unordered_multiset\")),\n (\"\", (\"pair\",)),\n (\"\", (\"vector\",)),\n # gcc extensions.\n # Note: std::hash is their hash, ::hash is our hash\n (\n \"\",\n (\n \"hash_map\",\n \"hash_multimap\",\n ),\n ),\n (\n \"\",\n (\n \"hash_set\",\n \"hash_multiset\",\n ),\n ),\n (\"\", (\"slist\",)),\n)\n\n_HEADERS_MAYBE_TEMPLATES: tuple[tuple[str, tuple[str, ...]], ...] = (\n (\n \"\",\n (\n \"copy\",\n \"max\",\n \"min\",\n \"min_element\",\n \"sort\",\n \"transform\",\n ),\n ),\n (\"\", (\"forward\", \"make_pair\", \"move\", \"swap\")),\n)\n\n# Non templated types or global objects\n_HEADERS_TYPES_OR_OBJS: tuple[tuple[str, tuple[str, ...]], ...] = (\n # String and others are special -- it is a non-templatized type in STL.\n (\"\", (\"string\",)),\n (\"\", (\"cin\", \"cout\", \"cerr\", \"clog\", \"wcin\", \"wcout\", \"wcerr\", \"wclog\")),\n (\"\", (\"FILE\", \"fpos_t\")),\n)\n\n# Non templated functions\n_HEADERS_FUNCTIONS: tuple[tuple[str, tuple[str, ...]], ...] = (\n (\n \"\",\n (\n \"fopen\",\n \"freopen\",\n \"fclose\",\n \"fflush\",\n \"setbuf\",\n \"setvbuf\",\n \"fread\",\n \"fwrite\",\n \"fgetc\",\n \"getc\",\n \"fgets\",\n \"fputc\",\n \"putc\",\n \"fputs\",\n \"getchar\",\n \"gets\",\n \"putchar\",\n \"puts\",\n \"ungetc\",\n \"scanf\",\n \"fscanf\",\n \"sscanf\",\n \"vscanf\",\n \"vfscanf\",\n \"vsscanf\",\n \"printf\",\n \"fprintf\",\n \"sprintf\",\n \"snprintf\",\n \"vprintf\",\n \"vfprintf\",\n \"vsprintf\",\n \"vsnprintf\",\n \"ftell\",\n \"fgetpos\",\n \"fseek\",\n \"fsetpos\",\n \"clearerr\",\n \"feof\",\n \"ferror\",\n \"perror\",\n \"tmpfile\",\n \"tmpnam\",\n ),\n ),\n)\n\n_re_pattern_headers_maybe_templates: list[tuple[re.Pattern, str, str]] = []\nfor _header, _templates in _HEADERS_MAYBE_TEMPLATES:\n # Match max(..., ...), max(..., ...), but not foo->max, foo.max or\n # 'type::max()'.\n _re_pattern_headers_maybe_templates.extend(\n (re.compile(r\"((\\bstd::)|[^>.:])\\b\" + _template + r\"(<.*?>)?\\([^\\)]\"), _template, _header)\n for _template in _templates\n )\n\n# Map is often overloaded. Only check, if it is fully qualified.\n# Match 'std::map(...)', but not 'map(...)''\n_re_pattern_headers_maybe_templates.append(\n (re.compile(r\"(std\\b::\\bmap\\s*\\<)|(^(std\\b::\\b)map\\b\\(\\s*\\<)\"), \"map<>\", \"\")\n)\n\n# Other scripts may reach in and modify this pattern.\n_re_pattern_templates: list[tuple[re.Pattern, str, str]] = []\nfor _header, _templates in _HEADERS_CONTAINING_TEMPLATES:\n _re_pattern_templates.extend(\n (\n re.compile(r\"((^|(^|\\s|((^|\\W)::))std::)|[^>.:]\\b)\" + _template + r\"\\s*\\<\"),\n _template + \"<>\",\n _header,\n )\n for _template in _templates\n )\n\n_re_pattern_types_or_objs: list[tuple[re.Pattern, object | type, str]] = []\nfor _header, _types_or_objs in _HEADERS_TYPES_OR_OBJS:\n _re_pattern_types_or_objs.extend(\n (re.compile(r\"\\b\" + _type_or_obj + r\"\\b\"), _type_or_obj, _header)\n for _type_or_obj in _types_or_objs\n )\n\n_re_pattern_functions: list[tuple[re.Pattern, str, str]] = []\nfor _header, _functions in _HEADERS_FUNCTIONS:\n # Match printf(..., ...), but not foo->printf, foo.printf or\n # 'type::printf()'.\n _re_pattern_functions.extend(\n (re.compile(r\"([^>.]|^)\\b\" + _function + r\"\\([^\\)]\"), _function, _header)\n for _function in _functions\n )\n\n\ndef FilesBelongToSameModule(filename_cc, filename_h):\n \"\"\"Check if these two filenames belong to the same module.\n\n The concept of a 'module' here is a as follows:\n foo.h, foo-inl.h, foo.cc, foo_test.cc and foo_unittest.cc belong to the\n same 'module' if they are in the same directory.\n some/path/public/xyzzy and some/path/internal/xyzzy are also considered\n to belong to the same module here.\n\n If the filename_cc contains a longer path than the filename_h, for example,\n '/absolute/path/to/base/sysinfo.cc', and this file would include\n 'base/sysinfo.h', this function also produces the prefix needed to open the\n header. This is used by the caller of this function to more robustly open the\n header file. We don't have access to the real include paths in this context,\n so we need this guesswork here.\n\n Known bugs: tools/base/bar.cc and base/bar.h belong to the same module\n according to this implementation. Because of this, this function gives\n some false positives. This should be sufficiently rare in practice.\n\n Args:\n filename_cc: is the path for the source (e.g. .cc) file\n filename_h: is the path for the header path\n\n Returns:\n Tuple with a bool and a string:\n bool: True if filename_cc and filename_h belong to the same module.\n string: the additional prefix needed to open the header file.\n \"\"\"\n fileinfo_cc = FileInfo(filename_cc)\n if fileinfo_cc.Extension().lstrip(\".\") not in GetNonHeaderExtensions():\n return (False, \"\")\n\n fileinfo_h = FileInfo(filename_h)\n if not IsHeaderExtension(fileinfo_h.Extension().lstrip(\".\")):\n return (False, \"\")\n\n filename_cc = filename_cc[: -(len(fileinfo_cc.Extension()))]\n if matched_test_suffix := re.search(_TEST_FILE_SUFFIX, fileinfo_cc.BaseName()):\n filename_cc = filename_cc[: -len(matched_test_suffix.group(1))]\n\n filename_cc = filename_cc.replace(\"/public/\", \"/\")\n filename_cc = filename_cc.replace(\"/internal/\", \"/\")\n\n filename_h = filename_h[: -(len(fileinfo_h.Extension()))]\n filename_h = filename_h.removesuffix(\"-inl\")\n filename_h = filename_h.replace(\"/public/\", \"/\")\n filename_h = filename_h.replace(\"/internal/\", \"/\")\n\n files_belong_to_same_module = filename_cc.endswith(filename_h)\n common_path = \"\"\n if files_belong_to_same_module:\n common_path = filename_cc[: -len(filename_h)]\n return files_belong_to_same_module, common_path\n\n\ndef CheckForIncludeWhatYouUse(filename, clean_lines, include_state, error, io=codecs):\n \"\"\"Reports for missing stl includes.\n\n This function will output warnings to make sure you are including the headers\n necessary for the stl containers and functions that you use. We only give one\n reason to include a header. For example, if you use both equal_to<> and\n less<> in a .h file, only one (the latter in the file) of these will be\n reported as a reason to include the .\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n include_state: An _IncludeState instance.\n error: The function to call with any errors found.\n io: The IO factory to use to read the header file. Provided for unittest\n injection.\n \"\"\"\n required = {} # A map of header name to linenumber and the template entity.\n # Example of required: { '': (1219, 'less<>') }\n\n for linenum in range(clean_lines.NumLines()):\n line = clean_lines.elided[linenum]\n if not line or line[0] == \"#\":\n continue\n\n _re_patterns = []\n _re_patterns.extend(_re_pattern_types_or_objs)\n _re_patterns.extend(_re_pattern_functions)\n for pattern, item, header in _re_patterns:\n matched = pattern.search(line)\n if matched:\n # Don't warn about strings in non-STL namespaces:\n # (We check only the first match per line; good enough.)\n prefix = line[: matched.start()]\n if prefix.endswith(\"std::\") or not prefix.endswith(\"::\"):\n required[header] = (linenum, item)\n\n for pattern, template, header in _re_pattern_headers_maybe_templates:\n if pattern.search(line):\n required[header] = (linenum, template)\n\n # The following function is just a speed up, no semantics are changed.\n if \"<\" not in line: # Reduces the cpu time usage by skipping lines.\n continue\n\n for pattern, template, header in _re_pattern_templates:\n matched = pattern.search(line)\n if matched:\n # Don't warn about IWYU in non-STL namespaces:\n # (We check only the first match per line; good enough.)\n prefix = line[: matched.start()]\n if prefix.endswith(\"std::\") or not prefix.endswith(\"::\"):\n required[header] = (linenum, template)\n\n # Let's flatten the include_state include_list and copy it into a dictionary.\n include_dict = dict([item for sublist in include_state.include_list for item in sublist])\n\n # All the lines have been processed, report the errors found.\n for header in sorted(required, key=required.__getitem__):\n template = required[header][1]\n header_stripped = header.strip('<>\"')\n if header_stripped not in include_dict and not (\n header_stripped[0] == \"c\" and (header_stripped[1:] + \".h\") in include_dict\n ):\n error(\n filename,\n required[header][0],\n \"build/include_what_you_use\",\n 4,\n \"Add #include \" + header + \" for \" + template,\n )\n\n\n_RE_PATTERN_EXPLICIT_MAKEPAIR = re.compile(r\"\\bmake_pair\\s*<\")\n\n\ndef CheckMakePairUsesDeduction(filename, clean_lines, linenum, error):\n \"\"\"Check that make_pair's template arguments are deduced.\n\n G++ 4.6 in C++11 mode fails badly if make_pair's template arguments are\n specified explicitly, and such use isn't intended in any case.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n match = _RE_PATTERN_EXPLICIT_MAKEPAIR.search(line)\n if match:\n error(\n filename,\n linenum,\n \"build/explicit_make_pair\",\n 4, # 4 = high confidence\n \"For C++11-compatibility, omit template arguments from make_pair\"\n \" OR use pair directly OR if appropriate, construct a pair directly\",\n )\n\n\ndef CheckRedundantVirtual(filename, clean_lines, linenum, error):\n \"\"\"Check if line contains a redundant \"virtual\" function-specifier.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n # Look for \"virtual\" on current line.\n line = clean_lines.elided[linenum]\n virtual = re.match(r\"^(.*)(\\bvirtual\\b)(.*)$\", line)\n if not virtual:\n return\n\n # Ignore \"virtual\" keywords that are near access-specifiers. These\n # are only used in class base-specifier and do not apply to member\n # functions.\n if re.search(r\"\\b(public|protected|private)\\s+$\", virtual.group(1)) or re.match(\n r\"^\\s+(public|protected|private)\\b\", virtual.group(3)\n ):\n return\n\n # Ignore the \"virtual\" keyword from virtual base classes. Usually\n # there is a column on the same line in these cases (virtual base\n # classes are rare in google3 because multiple inheritance is rare).\n if re.match(r\"^.*[^:]:[^:].*$\", line):\n return\n\n # Look for the next opening parenthesis. This is the start of the\n # parameter list (possibly on the next line shortly after virtual).\n # TODO(google): doesn't work if there are virtual functions with\n # decltype() or other things that use parentheses, but csearch suggests\n # that this is rare.\n end_col = -1\n end_line = -1\n start_col = len(virtual.group(2))\n for start_line in range(linenum, min(linenum + 3, clean_lines.NumLines())):\n line = clean_lines.elided[start_line][start_col:]\n parameter_list = re.match(r\"^([^(]*)\\(\", line)\n if parameter_list:\n # Match parentheses to find the end of the parameter list\n (_, end_line, end_col) = CloseExpression(\n clean_lines, start_line, start_col + len(parameter_list.group(1))\n )\n break\n start_col = 0\n\n if end_col < 0:\n return # Couldn't find end of parameter list, give up\n\n # Look for \"override\" or \"final\" after the parameter list\n # (possibly on the next few lines).\n for i in range(end_line, min(end_line + 3, clean_lines.NumLines())):\n line = clean_lines.elided[i][end_col:]\n match = re.search(r\"\\b(override|final)\\b\", line)\n if match:\n error(\n filename,\n linenum,\n \"readability/inheritance\",\n 4,\n (\n '\"virtual\" is redundant since function is '\n f'already declared as \"{match.group(1)}\"'\n ),\n )\n\n # Set end_col to check whole lines after we are done with the\n # first line.\n end_col = 0\n if re.search(r\"[^\\w]\\s*$\", line):\n break\n\n\ndef CheckRedundantOverrideOrFinal(filename, clean_lines, linenum, error):\n \"\"\"Check if line contains a redundant \"override\" or \"final\" virt-specifier.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n # Look for closing parenthesis nearby. We need one to confirm where\n # the declarator ends and where the virt-specifier starts to avoid\n # false positives.\n line = clean_lines.elided[linenum]\n if (declarator_end := line.rfind(\")\")) >= 0:\n fragment = line[declarator_end:]\n else:\n if linenum > 1 and clean_lines.elided[linenum - 1].rfind(\")\") >= 0:\n fragment = line\n else:\n return\n\n # Check that at most one of \"override\" or \"final\" is present, not both\n if re.search(r\"\\boverride\\b\", fragment) and re.search(r\"\\bfinal\\b\", fragment):\n error(\n filename,\n linenum,\n \"readability/inheritance\",\n 4,\n ('\"override\" is redundant since function is already declared as \"final\"'),\n )\n\n\n# Returns true if we are at a new block, and it is directly\n# inside of a namespace.\ndef IsBlockInNameSpace(nesting_state: NestingState, is_forward_declaration: bool): # noqa: FBT001\n \"\"\"Checks that the new block is directly in a namespace.\n\n Args:\n nesting_state: The NestingState object that contains info about our state.\n is_forward_declaration: If the class is a forward declared class.\n Returns:\n Whether or not the new block is directly in a namespace.\n \"\"\"\n if is_forward_declaration:\n return len(nesting_state.stack) >= 1 and (\n isinstance(nesting_state.stack[-1], _NamespaceInfo)\n )\n\n if len(nesting_state.stack) >= 1:\n if isinstance(nesting_state.stack[-1], _NamespaceInfo):\n return True\n if (\n len(nesting_state.stack) > 1\n and isinstance(nesting_state.previous_stack_top, _NamespaceInfo)\n and (\n isinstance(nesting_state.stack[-2], _NamespaceInfo)\n or len(nesting_state.stack) > 2 # Accommodate for WrappedInfo\n and issubclass(type(nesting_state.stack[-1]), _WrappedInfo)\n and not nesting_state.stack[-2].seen_open_brace\n and isinstance(nesting_state.stack[-3], _NamespaceInfo)\n )\n ):\n return True\n return False\n\n\ndef ShouldCheckNamespaceIndentation(\n nesting_state: NestingState, is_namespace_indent_item, raw_lines_no_comments, linenum\n):\n \"\"\"This method determines if we should apply our namespace indentation check.\n\n Args:\n nesting_state: The current nesting state.\n is_namespace_indent_item: If we just put a new class on the stack, True.\n If the top of the stack is not a class, or we did not recently\n add the class, False.\n raw_lines_no_comments: The lines without the comments.\n linenum: The current line number we are processing.\n\n Returns:\n True if we should apply our namespace indentation check. Currently, it\n only works for classes and namespaces inside of a namespace.\n \"\"\"\n\n # Required by all checks involving nesting_state\n if not nesting_state.stack:\n return False\n\n is_forward_declaration = IsForwardClassDeclaration(raw_lines_no_comments, linenum)\n\n if not (is_namespace_indent_item or is_forward_declaration):\n return False\n\n # If we are in a macro, we do not want to check the namespace indentation.\n if IsMacroDefinition(raw_lines_no_comments, linenum):\n return False\n\n # Skip if we are inside an open parenthesis block (e.g. function parameters).\n if nesting_state.previous_stack_top and nesting_state.previous_open_parentheses > 0:\n return False\n\n # Skip if we are extra-indenting a member initializer list.\n if (\n isinstance(nesting_state.previous_stack_top, _ConstructorInfo) # F/N (A::A() : _a(0) {/{})\n and (\n isinstance(nesting_state.stack[-1], _MemInitListInfo)\n or isinstance(nesting_state.popped_top, _MemInitListInfo)\n )\n ) or ( # popping constructor after MemInitList on the same line (: _a(a) {})\n isinstance(nesting_state.previous_stack_top, _ConstructorInfo)\n and isinstance(nesting_state.popped_top, _ConstructorInfo)\n and re.search(r\"[^:]:[^:]\", raw_lines_no_comments[linenum])\n ):\n return False\n\n return IsBlockInNameSpace(nesting_state, is_forward_declaration)\n\n\n# Call this method if the line is directly inside of a namespace.\n# If the line above is blank (excluding comments) or the start of\n# an inner namespace, it cannot be indented.\ndef CheckItemIndentationInNamespace(filename, raw_lines_no_comments, linenum, error):\n line = raw_lines_no_comments[linenum]\n if re.match(r\"^\\s+\", line):\n error(\n filename, linenum, \"whitespace/indent_namespace\", 4, \"Do not indent within a namespace.\"\n )\n\n\ndef ProcessLine(\n filename,\n file_extension,\n clean_lines,\n line,\n include_state,\n function_state,\n nesting_state,\n error,\n extra_check_functions=None,\n cppvar=None,\n):\n \"\"\"Processes a single line in the file.\n\n Args:\n filename: Filename of the file that is being processed.\n file_extension: The extension (dot not included) of the file.\n clean_lines: An array of strings, each representing a line of the file,\n with comments stripped.\n line: Number of line being processed.\n include_state: An _IncludeState instance in which the headers are inserted.\n function_state: A _FunctionState instance which counts function lines, etc.\n nesting_state: A NestingState instance which maintains information about\n the current stack of nested blocks being parsed.\n error: A callable to which errors are reported, which takes 4 arguments:\n filename, line number, error level, and message\n extra_check_functions: An array of additional check functions that will be\n run on each source line. Each function takes 4\n arguments: filename, clean_lines, line, error\n cppvar: The header guard variable returned by GetHeaderGuardCPPVar.\n \"\"\"\n raw_lines = clean_lines.raw_lines\n ParseNolintSuppressions(filename, raw_lines[line], line, error)\n nesting_state.Update(filename, clean_lines, line, error)\n CheckForNamespaceIndentation(filename, nesting_state, clean_lines, line, error)\n if nesting_state.InAsmBlock():\n return\n CheckForFunctionLengths(filename, clean_lines, line, function_state, error)\n CheckForMultilineCommentsAndStrings(filename, clean_lines, line, error)\n CheckStyle(filename, clean_lines, line, file_extension, nesting_state, error, cppvar)\n CheckLanguage(filename, clean_lines, line, file_extension, include_state, nesting_state, error)\n CheckForNonConstReference(filename, clean_lines, line, nesting_state, error)\n CheckForNonStandardConstructs(filename, clean_lines, line, nesting_state, error)\n CheckVlogArguments(filename, clean_lines, line, error)\n CheckPosixThreading(filename, clean_lines, line, error)\n CheckInvalidIncrement(filename, clean_lines, line, error)\n CheckMakePairUsesDeduction(filename, clean_lines, line, error)\n CheckRedundantVirtual(filename, clean_lines, line, error)\n CheckRedundantOverrideOrFinal(filename, clean_lines, line, error)\n if extra_check_functions:\n for check_fn in extra_check_functions:\n check_fn(filename, clean_lines, line, error)\n\n\ndef FlagCxxHeaders(filename, clean_lines, linenum, error):\n \"\"\"Flag C++ headers that the styleguide restricts.\n\n Args:\n filename: The name of the current file.\n clean_lines: A CleansedLines instance containing the file.\n linenum: The number of the line to check.\n error: The function to call with any errors found.\n \"\"\"\n line = clean_lines.elided[linenum]\n\n include = re.match(r'\\s*#\\s*include\\s+[<\"]([^<\"]+)[\">]', line)\n\n # Flag unapproved C++11 headers.\n if include and include.group(1) in (\n \"cfenv\",\n \"fenv.h\",\n \"ratio\",\n ):\n error(\n filename,\n linenum,\n \"build/c++11\",\n 5,\n f\"<{include.group(1)}> is an unapproved C++11 header.\",\n )\n\n # filesystem is the only unapproved C++17 header\n if include and include.group(1) == \"filesystem\":\n error(filename, linenum, \"build/c++17\", 5, \" is an unapproved C++17 header.\")\n\n\ndef ProcessFileData(filename, file_extension, lines, error, extra_check_functions=None):\n \"\"\"Performs lint checks and reports any errors to the given error function.\n\n Args:\n filename: Filename of the file that is being processed.\n file_extension: The extension (dot not included) of the file.\n lines: An array of strings, each representing a line of the file, with the\n last element being empty if the file is terminated with a newline.\n error: A callable to which errors are reported, which takes 4 arguments:\n filename, line number, error level, and message\n extra_check_functions: An array of additional check functions that will be\n run on each source line. Each function takes 4\n arguments: filename, clean_lines, line, error\n \"\"\"\n lines = (\n [\"// marker so line numbers and indices both start at 1\"]\n + lines\n + [\"// marker so line numbers end in a known way\"]\n )\n\n include_state = _IncludeState()\n function_state = _FunctionState()\n nesting_state = NestingState()\n\n ResetNolintSuppressions()\n\n CheckForCopyright(filename, lines, error)\n ProcessGlobalSuppressions(filename, lines)\n RemoveMultiLineComments(filename, lines, error)\n clean_lines = CleansedLines(lines)\n\n cppvar = None\n if IsHeaderExtension(file_extension):\n cppvar = GetHeaderGuardCPPVariable(filename)\n CheckForHeaderGuard(filename, clean_lines, error, cppvar)\n\n for line in range(clean_lines.NumLines()):\n ProcessLine(\n filename,\n file_extension,\n clean_lines,\n line,\n include_state,\n function_state,\n nesting_state,\n error,\n extra_check_functions,\n cppvar,\n )\n FlagCxxHeaders(filename, clean_lines, line, error)\n if _error_suppressions.HasOpenBlock():\n error(\n filename,\n _error_suppressions.GetOpenBlockStart(),\n \"readability/nolint\",\n 5,\n \"NONLINT block never ended\",\n )\n\n CheckForIncludeWhatYouUse(filename, clean_lines, include_state, error)\n\n # Check that the .cc file has included its header if it exists.\n if _IsSourceExtension(file_extension):\n CheckHeaderFileIncluded(filename, include_state, error)\n\n # We check here rather than inside ProcessLine so that we see raw\n # lines rather than \"cleaned\" lines.\n CheckForBadCharacters(filename, lines, error)\n\n CheckForNewlineAtEOF(filename, lines, error)\n\n\ndef ProcessConfigOverrides(filename):\n \"\"\"Loads the configuration files and processes the config overrides.\n\n Args:\n filename: The name of the file being processed by the linter.\n\n Returns:\n False if the current |filename| should not be processed further.\n \"\"\"\n\n abs_filename = os.path.abspath(filename)\n cfg_filters = []\n keep_looking = True\n while keep_looking:\n abs_path, base_name = os.path.split(abs_filename)\n if not base_name:\n break # Reached the root directory.\n\n cfg_file = os.path.join(abs_path, _config_filename)\n abs_filename = abs_path\n if not os.path.isfile(cfg_file):\n continue\n\n try:\n with codecs.open(cfg_file, \"r\", \"utf8\", \"replace\") as file_handle:\n for line in file_handle:\n line, _, _ = line.partition(\"#\") # Remove comments.\n if not line.strip():\n continue\n\n name, _, val = line.partition(\"=\")\n name = name.strip()\n val = val.strip()\n if name == \"set noparent\":\n keep_looking = False\n elif name == \"filter\":\n cfg_filters.append(val)\n elif name == \"exclude_files\":\n # When matching exclude_files pattern, use the base_name of\n # the current file name or the directory name we are processing.\n # For example, if we are checking for lint errors in /foo/bar/baz.cc\n # and we found the .cfg file at /foo/CPPLINT.cfg, then the config\n # file's \"exclude_files\" filter is meant to be checked against \"bar\"\n # and not \"baz\" nor \"bar/baz.cc\".\n if base_name:\n pattern = re.compile(val)\n if pattern.match(base_name):\n if _cpplint_state.quiet:\n # Suppress \"Ignoring file\" warning when using --quiet.\n return False\n _cpplint_state.PrintInfo(\n f'Ignoring \"{filename}\": file excluded by \"{cfg_file}\". '\n 'File path component \"%s\" matches '\n 'pattern \"%s\"\\n' % (base_name, val)\n )\n return False\n elif name == \"linelength\":\n global _line_length\n try:\n _line_length = int(val)\n except ValueError:\n _cpplint_state.PrintError(\"Line length must be numeric.\")\n elif name == \"extensions\":\n ProcessExtensionsOption(val)\n elif name == \"root\":\n global _root\n # root directories are specified relative to CPPLINT.cfg dir.\n _root = os.path.join(os.path.dirname(cfg_file), val)\n elif name == \"headers\":\n ProcessHppHeadersOption(val)\n elif name == \"includeorder\":\n ProcessIncludeOrderOption(val)\n else:\n _cpplint_state.PrintError(\n f\"Invalid configuration option ({name}) in file {cfg_file}\\n\"\n )\n\n except OSError:\n _cpplint_state.PrintError(\n f\"Skipping config file '{cfg_file}': Can't open for reading\\n\"\n )\n keep_looking = False\n\n # Apply all the accumulated filters in reverse order (top-level directory\n # config options having the least priority).\n for cfg_filter in reversed(cfg_filters):\n _AddFilters(cfg_filter)\n\n return True\n\n\ndef ProcessFile(filename, vlevel, extra_check_functions=None):\n \"\"\"Does google-lint on a single file.\n\n Args:\n filename: The name of the file to parse.\n\n vlevel: The level of errors to report. Every error of confidence\n >= verbose_level will be reported. 0 is a good default.\n\n extra_check_functions: An array of additional check functions that will be\n run on each source line. Each function takes 4\n arguments: filename, clean_lines, line, error\n \"\"\"\n\n _SetVerboseLevel(vlevel)\n _BackupFilters()\n old_errors = _cpplint_state.error_count\n\n if not ProcessConfigOverrides(filename):\n _RestoreFilters()\n return\n\n lf_lines = []\n crlf_lines = []\n try:\n # Support the UNIX convention of using \"-\" for stdin. Note that\n # we are not opening the file with universal newline support\n # (which codecs doesn't support anyway), so the resulting lines do\n # contain trailing '\\r' characters if we are reading a file that\n # has CRLF endings.\n # If after the split a trailing '\\r' is present, it is removed\n # below.\n if filename == \"-\":\n lines = sys.stdin.read().split(\"\\n\")\n else:\n with codecs.open(filename, \"r\", \"utf8\", \"replace\") as target_file:\n lines = target_file.read().split(\"\\n\")\n\n # Remove trailing '\\r'.\n # The -1 accounts for the extra trailing blank line we get from split()\n for linenum in range(len(lines) - 1):\n if lines[linenum].endswith(\"\\r\"):\n lines[linenum] = lines[linenum].rstrip(\"\\r\")\n crlf_lines.append(linenum + 1)\n else:\n lf_lines.append(linenum + 1)\n\n except OSError:\n # TODO(aaronliu0130): Maybe make this have an exit code of 2 after all is done\n _cpplint_state.PrintError(f\"Skipping input '{filename}': Can't open for reading\\n\")\n _RestoreFilters()\n return\n\n # Note, if no dot is found, this will give the entire filename as the ext.\n file_extension = filename[filename.rfind(\".\") + 1 :]\n\n # When reading from stdin, the extension is unknown, so no cpplint tests\n # should rely on the extension.\n if filename != \"-\" and file_extension not in GetAllExtensions():\n _cpplint_state.PrintError(\n f\"Ignoring {filename}; not a valid file name ({(', '.join(GetAllExtensions()))})\\n\"\n )\n else:\n ProcessFileData(filename, file_extension, lines, Error, extra_check_functions)\n\n # If end-of-line sequences are a mix of LF and CR-LF, issue\n # warnings on the lines with CR.\n #\n # Don't issue any warnings if all lines are uniformly LF or CR-LF,\n # since critique can handle these just fine, and the style guide\n # doesn't dictate a particular end of line sequence.\n #\n # We can't depend on os.linesep to determine what the desired\n # end-of-line sequence should be, since that will return the\n # server-side end-of-line sequence.\n if lf_lines and crlf_lines:\n # Warn on every line with CR. An alternative approach might be to\n # check whether the file is mostly CRLF or just LF, and warn on the\n # minority, we bias toward LF here since most tools prefer LF.\n for linenum in crlf_lines:\n Error(\n filename,\n linenum,\n \"whitespace/newline\",\n 1,\n \"Unexpected \\\\r (^M) found; better to use only \\\\n\",\n )\n\n # Suppress printing anything if --quiet was passed unless the error\n # count has increased after processing this file.\n if not _cpplint_state.quiet or old_errors != _cpplint_state.error_count:\n _cpplint_state.PrintInfo(f\"Done processing {filename}\\n\")\n _RestoreFilters()\n\n\ndef PrintUsage(message):\n \"\"\"Prints a brief usage string and exits, optionally with an error message.\n\n Args:\n message: The optional error message.\n \"\"\"\n sys.stderr.write(\n _USAGE\n % (\n sorted(GetAllExtensions()),\n \",\".join(sorted(GetAllExtensions())),\n sorted(GetHeaderExtensions()),\n \",\".join(sorted(GetHeaderExtensions())),\n )\n )\n\n if message:\n sys.exit(\"\\nFATAL ERROR: \" + message)\n else:\n sys.exit(0)\n\n\ndef PrintVersion():\n sys.stdout.write(\"Cpplint fork (https://github.com/cpplint/cpplint)\\n\")\n sys.stdout.write(\"cpplint \" + __VERSION__ + \"\\n\")\n sys.stdout.write(\"Python \" + sys.version + \"\\n\")\n sys.exit(0)\n\n\ndef PrintCategories():\n \"\"\"Prints a list of all the error-categories used by error messages.\n\n These are the categories used to filter messages via --filter.\n \"\"\"\n sys.stderr.write(\"\".join(f\" {cat}\\n\" for cat in _ERROR_CATEGORIES))\n sys.exit(0)\n\n\ndef ParseArguments(args):\n \"\"\"Parses the command line arguments.\n\n This may set the output format and verbosity level as side-effects.\n\n Args:\n args: The command line arguments:\n\n Returns:\n The list of filenames to lint.\n \"\"\"\n try:\n (opts, filenames) = getopt.getopt(\n args,\n \"\",\n [\n \"help\",\n \"output=\",\n \"verbose=\",\n \"v=\",\n \"version\",\n \"counting=\",\n \"filter=\",\n \"root=\",\n \"repository=\",\n \"linelength=\",\n \"extensions=\",\n \"exclude=\",\n \"recursive\",\n \"headers=\",\n \"includeorder=\",\n \"config=\",\n \"quiet\",\n ],\n )\n except getopt.GetoptError:\n PrintUsage(\"Invalid arguments.\")\n\n verbosity = _VerboseLevel()\n output_format = _OutputFormat()\n filters = \"\"\n quiet = _Quiet()\n counting_style = \"\"\n recursive = False\n\n for opt, val in opts:\n if opt == \"--help\":\n PrintUsage(None)\n if opt == \"--version\":\n PrintVersion()\n elif opt == \"--output\":\n if val not in (\"emacs\", \"vs7\", \"eclipse\", \"junit\", \"sed\", \"gsed\"):\n PrintUsage(\n \"The only allowed output formats are emacs, vs7, eclipse sed, gsed and junit.\"\n )\n output_format = val\n elif opt == \"--quiet\":\n quiet = True\n elif opt in {\"--verbose\", \"--v\"}:\n verbosity = int(val)\n elif opt == \"--filter\":\n filters = val\n if not filters:\n PrintCategories()\n elif opt == \"--counting\":\n if val not in (\"total\", \"toplevel\", \"detailed\"):\n PrintUsage(\"Valid counting options are total, toplevel, and detailed\")\n counting_style = val\n elif opt == \"--root\":\n global _root\n _root = val\n elif opt == \"--repository\":\n global _repository\n _repository = val\n elif opt == \"--linelength\":\n global _line_length\n try:\n _line_length = int(val)\n except ValueError:\n PrintUsage(\"Line length must be digits.\")\n elif opt == \"--exclude\":\n global _excludes\n if not _excludes:\n _excludes = set()\n _excludes.update(glob.glob(val))\n elif opt == \"--extensions\":\n ProcessExtensionsOption(val)\n elif opt == \"--headers\":\n ProcessHppHeadersOption(val)\n elif opt == \"--recursive\":\n recursive = True\n elif opt == \"--includeorder\":\n ProcessIncludeOrderOption(val)\n elif opt == \"--config\":\n global _config_filename\n _config_filename = val\n if os.path.basename(_config_filename) != _config_filename:\n PrintUsage(\"Config file name must not include directory components.\")\n\n if not filenames:\n PrintUsage(\"No files were specified.\")\n\n if recursive:\n filenames = _ExpandDirectories(filenames)\n\n if _excludes:\n filenames = _FilterExcludedFiles(filenames)\n\n _SetOutputFormat(output_format)\n _SetQuiet(quiet)\n _SetVerboseLevel(verbosity)\n _SetFilters(filters)\n _SetCountingStyle(counting_style)\n\n filenames.sort()\n return filenames\n\n\ndef _ParseFilterSelector(parameter):\n \"\"\"Parses the given command line parameter for file- and line-specific\n exclusions.\n readability/casting:file.cpp\n readability/casting:file.cpp:43\n\n Args:\n parameter: The parameter value of --filter\n\n Returns:\n [category, filename, line].\n Category is always given.\n Filename is either a filename or empty if all files are meant.\n Line is either a line in filename or -1 if all lines are meant.\n \"\"\"\n colon_pos = parameter.find(\":\")\n if colon_pos == -1:\n return parameter, \"\", -1\n category = parameter[:colon_pos]\n second_colon_pos = parameter.find(\":\", colon_pos + 1)\n if second_colon_pos == -1:\n return category, parameter[colon_pos + 1 :], -1\n return (\n category,\n parameter[colon_pos + 1 : second_colon_pos],\n int(parameter[second_colon_pos + 1 :]),\n )\n\n\ndef _ExpandDirectories(filenames):\n \"\"\"Searches a list of filenames and replaces directories in the list with\n all files descending from those directories. Files with extensions not in\n the valid extensions list are excluded.\n\n Args:\n filenames: A list of files or directories\n\n Returns:\n A list of all files that are members of filenames or descended from a\n directory in filenames\n \"\"\"\n expanded = set()\n for filename in filenames:\n if not os.path.isdir(filename):\n expanded.add(filename)\n continue\n\n for root, _, files in os.walk(filename):\n for loopfile in files:\n fullname = os.path.join(root, loopfile)\n fullname = fullname.removeprefix(\".\" + os.path.sep)\n expanded.add(fullname)\n\n return [\n filename for filename in expanded if os.path.splitext(filename)[1][1:] in GetAllExtensions()\n ]\n\n\ndef _FilterExcludedFiles(fnames):\n \"\"\"Filters out files listed in the --exclude command line switch. File paths\n in the switch are evaluated relative to the current working directory\n \"\"\"\n exclude_paths = [os.path.abspath(f) for f in _excludes]\n # because globbing does not work recursively, exclude all subpath of all excluded entries\n return [\n f\n for f in fnames\n if not any(e for e in exclude_paths if _IsParentOrSame(e, os.path.abspath(f)))\n ]\n\n\ndef _IsParentOrSame(parent, child):\n \"\"\"Return true if child is subdirectory of parent.\n Assumes both paths are absolute and don't contain symlinks.\n \"\"\"\n parent = os.path.normpath(parent)\n child = os.path.normpath(child)\n if parent == child:\n return True\n\n prefix = os.path.commonprefix([parent, child])\n if prefix != parent:\n return False\n # Note: os.path.commonprefix operates on character basis, so\n # take extra care of situations like '/foo/ba' and '/foo/bar/baz'\n child_suffix = child[len(prefix) :]\n child_suffix = child_suffix.lstrip(os.sep)\n return child == os.path.join(prefix, child_suffix)\n\n\ndef main():\n filenames = ParseArguments(sys.argv[1:])\n backup_err = sys.stderr\n try:\n # Change stderr to write with replacement characters so we don't die\n # if we try to print something containing non-ASCII characters.\n sys.stderr = codecs.StreamReader(sys.stderr, \"replace\")\n\n _cpplint_state.ResetErrorCounts()\n for filename in filenames:\n ProcessFile(filename, _cpplint_state.verbose_level)\n # If --quiet is passed, suppress printing error count unless there are errors.\n if not _cpplint_state.quiet or _cpplint_state.error_count > 0:\n _cpplint_state.PrintErrorCounts()\n\n if _cpplint_state.output_format == \"junit\":\n sys.stderr.write(_cpplint_state.FormatJUnitXML())\n\n finally:\n sys.stderr = backup_err\n\n sys.exit(_cpplint_state.error_count > 0)\n\n\nif __name__ == \"__main__\":\n main()\n" }, { "path": "depends/cmake/CamouflageTLS.cmake", "content": "include(FetchContent)\n\nFetchContent_Declare(CamouflageTLS URL https://github.com/fptn-project/camouflage-tls/archive/refs/heads/main.zip)\nFetchContent_MakeAvailable(CamouflageTLS)\n\nset(CamouflageTLS_INCLUDE_DIR \"${camouflagetls_SOURCE_DIR}/include\")\nset(CamouflageTLS_INCLUDE_DIRS ${CamouflageTLS_INCLUDE_DIR} CACHE PATH \"Camouflage Include Directories\")\n\nif(NOT TARGET CamouflageTLS)\n add_library(CamouflageTLS INTERFACE)\n target_include_directories(CamouflageTLS INTERFACE \"${CamouflageTLS_INCLUDE_DIR}\")\nendif()\n\ntarget_include_directories(CamouflageTLS INTERFACE \"${camouflagetls_SOURCE_DIR}/include\")\n" }, { "path": "depends/cmake/FetchBase64.cmake", "content": "include(FetchContent)\n\nFetchContent_Declare(Base64 URL https://github.com/tobiaslocker/base64/archive/refs/heads/master.zip)\n\nFetchContent_GetProperties(Base64)\nif(NOT Base64_POPULATED)\n FetchContent_Populate(Base64)\nendif()\n\nset(Base64_SOURCE_DIR \"${CMAKE_CURRENT_BINARY_DIR}/_deps/base64-src\")\nset(Base64_INCLUDE_DIR \"${Base64_SOURCE_DIR}/include\")\nset(Base64_INCLUDE_DIRS\n ${Base64_INCLUDE_DIR}\n CACHE PATH \"Base64 Include Directories\")\n\nadd_library(Base64 INTERFACE)\ntarget_include_directories(Base64 INTERFACE \"${Base64_INCLUDE_DIR}\")\n\ninclude_directories(${Base64_INCLUDE_DIR})\n" }, { "path": "depends/cmake/FetchLibTunTap.cmake", "content": "cmake_minimum_required(VERSION 3.16)\n\noption(BUILD_TESTING \"Build tests\" OFF)\n\ninclude(FetchContent)\nFetchContent_Declare(Libtuntap URL https://github.com/LaKabane/libtuntap/archive/ec1213733eb2e66e033ff8864d9fd476f9e35ffe.zip)\n#FetchContent_Declare(Libtuntap URL https://github.com/LaKabane/libtuntap/archive/refs/heads/master.zip)\n\nFetchContent_GetProperties(Libtuntap)\nif(NOT Libtuntap_POPULATED)\n FetchContent_Populate(Libtuntap)\nendif()\n\nset(Libtuntap_SOURCE_DIR \"${CMAKE_BINARY_DIR}/_deps/libtuntap-src\")\nset(Libtuntap_BINARY_DIR \"${CMAKE_BINARY_DIR}/_deps/libtuntap-build\")\nset(Libtuntap_INCLUDE_DIR \"${Libtuntap_BINARY_DIR}/include\")\n\nset(BUILD_TESTING OFF)\nset(LIBTUNTAP_BUILD_TESTS\n OFF\n CACHE BOOL \"Disable libtuntap tests\")\nadd_subdirectory(\"${Libtuntap_SOURCE_DIR}\" \"${Libtuntap_BINARY_DIR}\" EXCLUDE_FROM_ALL)\ninclude_directories(\"${Libtuntap_SOURCE_DIR}/libtuntap/\")\ninclude_directories(\"${Libtuntap_SOURCE_DIR}/libtuntap/bindings/cpp\")\n\nlink_directories(\"${Libtuntap_BINARY_DIR}/lib/\")\n" }, { "path": "depends/cmake/FetchWintun.cmake", "content": "include(FetchContent)\n\nFetchContent_Declare(Wintun URL https://www.wintun.net/builds/wintun-0.14.1.zip)\n\nFetchContent_GetProperties(Wintun)\nif(NOT wintun_POPULATED)\n FetchContent_Populate(Wintun)\nendif()\n\nset(Wintun_INCLUDE_DIR \"${wintun_SOURCE_DIR}/include\")\n\nif(CMAKE_SYSTEM_PROCESSOR MATCHES \"x86_64\" OR CMAKE_SYSTEM_PROCESSOR MATCHES \"AMD64\")\n set(Wintun_REDISTRIBUTABLE \"${wintun_SOURCE_DIR}/bin/amd64/wintun.dll\")\n set(Wintun_REDISTRIBUTABLE_DIR \"${wintun_SOURCE_DIR}/bin/amd64\")\nelseif(CMAKE_SYSTEM_PROCESSOR MATCHES \"arm64\" OR CMAKE_SYSTEM_PROCESSOR MATCHES \"aarch64\")\n set(Wintun_REDISTRIBUTABLE \"${wintun_SOURCE_DIR}/bin/arm64/wintun.dll\")\n set(Wintun_REDISTRIBUTABLE_DIR \"${wintun_SOURCE_DIR}/bin/arm64\")\nelse()\n message(FATAL_ERROR \"Unknown architecture: ${CMAKE_SYSTEM_PROCESSOR}\")\nendif()\n\nset(TARGET_DIRECTORY \"${CMAKE_BINARY_DIR}/wintun\")\nfile(MAKE_DIRECTORY ${TARGET_DIRECTORY})\nfile(COPY ${Wintun_REDISTRIBUTABLE} DESTINATION ${TARGET_DIRECTORY})\n\nadd_library(Wintun INTERFACE)\ntarget_include_directories(Wintun INTERFACE \"${Wintun_INCLUDE_DIR}\")\n" }, { "path": "depends/cmake/NtpClient.cmake", "content": "include(FetchContent)\n\nFetchContent_Declare(ntp_client URL https://github.com/batchar2/NTP-client/archive/refs/heads/master.zip)\n\nFetchContent_GetProperties(ntp_client)\nif(NOT ntp_client_POPULATED)\n FetchContent_Populate(ntp_client)\n\n set(ntp_client_SOURCE_DIR \"${ntp_client_SOURCE_DIR}\")\n set(ntp_client_BINARY_DIR \"${ntp_client_BINARY_DIR}\")\n set(ntp_client_INCLUDE_DIR \"${ntp_client_SOURCE_DIR}/include\")\n\n add_subdirectory(\"${ntp_client_SOURCE_DIR}\" \"${ntp_client_BINARY_DIR}\" EXCLUDE_FROM_ALL)\n include_directories(\"${ntp_client_INCLUDE_DIR}\")\nendif()\n" }, { "path": "deploy/docker/Dockerfile", "content": "FROM ubuntu:24.04\n\nARG FPTN_SERVER_PATH\nARG FPTN_PASSWD_PATH\n\nEXPOSE 443/tcp\n\nENV DEBIAN_FRONTEND=noninteractive\nENV TZ=Etc/UTC\n\nRUN apt-get update && \\\n apt-get upgrade -y && \\\n apt-get install -y unbound iproute2 iptables supervisor wget dnsmasq iputils-ping && \\\n apt-get clean && \\\n rm -rf /var/lib/apt/lists/*\n\nRUN mkdir -p /etc/supervisor/conf.d\n\n# Copy binaries\nCOPY \"${FPTN_SERVER_PATH}\" /usr/local/bin/fptn-server\nCOPY \"${FPTN_PASSWD_PATH}\" /usr/local/bin/fptn-passwd\nRUN chmod +x /usr/local/bin/fptn-server && \\\n chmod +x /usr/local/bin/fptn-passwd\n\n# Copy configuration files\nCOPY deploy/docker/config/supervisord.conf /etc/supervisor/supervisord.conf\nCOPY deploy/docker/config/supervisor/*.conf /etc/supervisor/conf.d/\n\n# Copy scripts\nCOPY deploy/docker/scripts/start-fptn.sh /usr/local/bin/start-fptn.sh\nCOPY deploy/docker/scripts/start-dns-server.sh /usr/local/bin/start-dns-server.sh\nCOPY deploy/docker/scripts/token-generator.py /usr/local/bin/token-generator\nRUN chmod +x /usr/local/bin/start-fptn.sh && \\\n chmod +x /usr/local/bin/token-generator && \\\n chmod +x /usr/local/bin/start-dns-server.sh\n\nCMD [\"/usr/bin/supervisord\", \"--nodaemon\", \"-c\", \"/etc/supervisor/supervisord.conf\"]\n" }, { "path": "deploy/docker/config/supervisor/dns-server.conf", "content": "[program:dns-server]\ncommand=/usr/local/bin/start-dns-server.sh\nautostart=true\nautorestart=true\nstartretries=3\nstartsecs=2\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nredirect_stderr=true\nuser=root\n" }, { "path": "deploy/docker/config/supervisor/fptn-server.conf", "content": "[program:fptn-server]\ncommand=/usr/local/bin/start-fptn.sh\nautostart=true\nautorestart=true\nstartretries=3\nstartsecs=5\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\nredirect_stderr=true\nuser=root\n" }, { "path": "deploy/docker/config/supervisord.conf", "content": "[supervisord]\nuser=root\nnodaemon=true\nlogfile=/dev/stdout\nlogfile_maxbytes=0\npidfile=/var/run/supervisord.pid\n\n[rpcinterface:supervisor]\nsupervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface\n\n[unix_http_server]\nfile=/var/run/supervisor.sock\nchmod=0700\nuser=root\n\n[supervisorctl]\nserverurl=unix:///var/run/supervisor.sock\n\n[include]\nfiles = /etc/supervisor/conf.d/*.conf\n" }, { "path": "deploy/docker/scripts/start-dns-server.sh", "content": "#!/bin/bash\n\n\nstart_unbound() {\n echo \"Starting unbound...\"\n\n DO_IP6=\"no\"\n [ \"${DNS_IPV6_ENABLE:-false}\" = \"true\" ] && DO_IP6=\"yes\"\n\n CONFIG_FILE=\"/etc/unbound/unbound.conf\"\n ROOT_HINTS=\"/etc/unbound/root.hints\"\n echo \"Using DNS settings:\"\n echo \" IPv4: yes\"\n echo \" IPv6: $DO_IP6\"\n\n if [ \"${DNS_IPV6_ENABLE:-false}\" = \"true\" ]; then\n cat > \"$CONFIG_FILE\" << 'EOF'\nserver:\n interface: 0.0.0.0\n interface: ::0\n port: 53\n do-ip4: yes\n do-ip6: yes\n do-udp: yes\n do-tcp: yes\n\n access-control: 0.0.0.0/0 allow\n access-control: ::0/0 allow\n\n root-hints: \"/etc/unbound/root.hints\"\n\n cache-max-ttl: 86400\n cache-min-ttl: 3600\n\n hide-identity: yes\n hide-version: yes\nEOF\n else\n cat > \"$CONFIG_FILE\" << 'EOF'\nserver:\n interface: 0.0.0.0\n port: 53\n do-ip4: yes\n do-ip6: no\n do-udp: yes\n do-tcp: yes\n\n access-control: 0.0.0.0/0 allow\n\n root-hints: \"/etc/unbound/root.hints\"\n\n cache-max-ttl: 86400\n cache-min-ttl: 3600\n\n hide-identity: yes\n hide-version: yes\n prefer-ip4: yes\n prefer-ip6: no\n\n private-address: ::/0\n do-not-query-localhost: no\n unwanted-reply-threshold: 0\nEOF\n fi\n\n wget -q -O \"$ROOT_HINTS\" https://www.internic.net/domain/named.root\n exec unbound -d -c \"$CONFIG_FILE\"\n}\n\nstart_dnsmasq() {\n echo \"Starting dnsmasq...\"\n\n CONFIG_FILE=\"/etc/dnsmasq.conf\"\n DNS_IPV6_ENABLE=\"${DNS_IPV6_ENABLE:-false}\"\n\n rm -f \"$CONFIG_FILE\"\n\n if [ \"$DNS_IPV6_ENABLE\" = \"true\" ]; then\n if [ -n \"$DNS_IPV4_PRIMARY\" ]; then\n echo \"server=$DNS_IPV4_PRIMARY\" >> \"$CONFIG_FILE\"\n fi\n if [ -n \"$DNS_IPV4_SECONDARY\" ]; then\n echo \"server=$DNS_IPV4_SECONDARY\" >> \"$CONFIG_FILE\"\n fi\n if [ -n \"$DNS_IPV6_PRIMARY\" ]; then\n echo \"server=$DNS_IPV6_PRIMARY\" >> \"$CONFIG_FILE\"\n fi\n if [ -n \"$DNS_IPV6_SECONDARY\" ]; then\n echo \"server=$DNS_IPV6_SECONDARY\" >> \"$CONFIG_FILE\"\n fi\n if [ ! -s \"$CONFIG_FILE\" ]; then\n echo \"server=8.8.8.8\" >> \"$CONFIG_FILE\"\n echo \"server=8.8.4.4\" >> \"$CONFIG_FILE\"\n echo \"server=2001:4860:4860::8888\" >> \"$CONFIG_FILE\"\n echo \"server=2001:4860:4860::8844\" >> \"$CONFIG_FILE\"\n fi\n else\n if [ -n \"$DNS_IPV4_PRIMARY\" ]; then\n echo \"server=$DNS_IPV4_PRIMARY\" >> \"$CONFIG_FILE\"\n fi\n if [ -n \"$DNS_IPV4_SECONDARY\" ]; then\n echo \"server=$DNS_IPV4_SECONDARY\" >> \"$CONFIG_FILE\"\n fi\n if [ ! -s \"$CONFIG_FILE\" ]; then\n echo \"server=8.8.8.8\" >> \"$CONFIG_FILE\"\n echo \"server=8.8.4.4\" >> \"$CONFIG_FILE\"\n fi\n echo \"filter-AAAA\" >> \"$CONFIG_FILE\"\n fi\n\n cat >> \"$CONFIG_FILE\" << EOF\ndns-forward-max=512\ncache-size=16384\nlocal-ttl=14400\nneg-ttl=120\nno-resolv\nno-poll\nEOF\n\n echo \"Using DNS servers:\"\n echo \" IPv4: ENABLED\"\n echo \" Primary: ${DNS_IPV4_PRIMARY:-8.8.8.8 (default)}\"\n echo \" Secondary: ${DNS_IPV4_SECONDARY:-8.8.4.4 (default)}\"\n\n if [ \"$DNS_IPV6_ENABLE\" = \"true\" ]; then\n echo \" IPv6: ENABLED\"\n echo \" Primary: ${DNS_IPV6_PRIMARY:-2001:4860:4860::8888 (default)}\"\n echo \" Secondary: ${DNS_IPV6_SECONDARY:-2001:4860:4860::8844 (default)}\"\n else\n echo \" IPv6: DISABLED\"\n fi\n\n exec /usr/sbin/dnsmasq --no-daemon\n}\n\n\ncase \"$USING_DNS_SERVER\" in\n \"unbound\")\n start_unbound\n ;;\n \"dnsmasq\")\n start_dnsmasq\n ;;\n *)\n echo \"Unknown USING_DNS_SERVER: $USING_DNS_SERVER, using dnsmasq\"\n start_dnsmasq\n ;;\nesac\nexit 0\n" }, { "path": "deploy/docker/scripts/start-fptn.sh", "content": "#!/bin/bash\n\nexport OUT_NETWORK_INTERFACE=$(ip -o -4 route show to default | awk '{print $5}')\necho \"[FPTN] Using network interface: $OUT_NETWORK_INTERFACE\"\n\nexec /usr/local/bin/fptn-server \\\n --server-key=/etc/fptn/server.key \\\n --server-crt=/etc/fptn/server.crt \\\n --out-network-interface=\"${OUT_NETWORK_INTERFACE}\" \\\n --server-port=443 \\\n --enable-detect-probing=\"${ENABLE_DETECT_PROBING}\" \\\n --default-proxy-domain=\"${DEFAULT_PROXY_DOMAIN}\" \\\n --allowed-sni-list=\"${ALLOWED_SNI_LIST}\" \\\n --tun-interface-name=fptn0 \\\n --disable-bittorrent=\"$DISABLE_BITTORRENT\" \\\n --prometheus-access-key=\"$PROMETHEUS_SECRET_ACCESS_KEY\" \\\n --use-remote-server-auth=\"$USE_REMOTE_SERVER_AUTH\" \\\n --remote-server-auth-host=\"$REMOTE_SERVER_AUTH_HOST\" \\\n --remote-server-auth-port=\"$REMOTE_SERVER_AUTH_PORT\" \\\n --max-active-sessions-per-user=\"$MAX_ACTIVE_SESSIONS_PER_USER\" \\\n --server-external-ips=\"${SERVER_EXTERNAL_IPS}\"\n" }, { "path": "deploy/docker/scripts/token-generator.py", "content": "#!/usr/bin/env python3\n\nimport argparse\nimport base64\nimport json\nimport subprocess\nimport os\nimport sys\n\n\ndef get_md5_fingerprint(cert_path=\"/etc/fptn/server.crt\"):\n if not os.path.exists(cert_path):\n print(f\"Certificate file not found: {cert_path}\", file=sys.stderr)\n sys.exit(1)\n try:\n cmd = [\"openssl\", \"x509\", \"-noout\", \"-fingerprint\", \"-md5\", \"-in\", cert_path]\n output = subprocess.check_output(cmd).decode(\"utf-8\").strip()\n # Output format: MD5 Fingerprint=AB:CD:EF:...\n fingerprint = output.split(\"=\")[1].replace(\":\", \"\").lower()\n return fingerprint\n except subprocess.CalledProcessError as e:\n print(f\"Error computing MD5 fingerprint: {e}\", file=sys.stderr)\n sys.exit(1)\n\n\ndef generate_token(username, password, server_ip, service_name, md5_fingerprint, port=443):\n token_data = {\n \"version\": 1,\n \"service_name\": service_name,\n \"username\": username,\n \"password\": password,\n \"servers\": [{\"name\": service_name, \"host\": server_ip, \"md5_fingerprint\": md5_fingerprint, \"port\": port}],\n \"censored_zone_servers\": [],\n }\n json_str = json.dumps(token_data, separators=(\",\", \":\"))\n b64_bytes = base64.b64encode(json_str.encode(\"utf-8\"))\n b64_str = b64_bytes.decode(\"utf-8\").rstrip(\"=\")\n return f\"fptn:{b64_str}\"\n\n\ndef main():\n parser = argparse.ArgumentParser(description=\"FPTN VPN Token Generator\")\n parser.add_argument(\"--user\", required=True, help=\"VPN username\")\n parser.add_argument(\"--password\", required=True, help=\"VPN password\")\n parser.add_argument(\"--server-ip\", required=True, help=\"VPN server public IP\")\n parser.add_argument(\"--service-name\", default=\"MyFptnServer\", help=\"VPN service name\")\n parser.add_argument(\"--cert-path\", default=\"/etc/fptn/server.crt\", help=\"Path to server certificate\")\n parser.add_argument(\"--port\", type=int, default=443, help=\"Port number (default: 443)\")\n\n args = parser.parse_args()\n\n # Validate port\n if not (1 <= args.port <= 65535):\n print(f\"Error: Port {args.port} is out of range (1-65535).\", file=sys.stderr)\n sys.exit(1)\n\n md5_fingerprint = get_md5_fingerprint(args.cert_path)\n\n token = generate_token(\n username=args.user,\n password=args.password,\n server_ip=args.server_ip,\n service_name=args.service_name,\n md5_fingerprint=md5_fingerprint,\n port=args.port,\n )\n print(token)\n\n\nif __name__ == \"__main__\":\n main()\n" }, { "path": "deploy/linux/deb/README.md", "content": "### Setup GitHub Runner\n\nBefore setting up the GitHub runner, you need to install the following packages on your system:\n\n```bash\npip install clang-tidy\npip install clang-format\npip install cmake-format\nsudo wget -qO- https://apt.llvm.org/llvm.sh | sudo bash -s -- 20\nsudo apt install cppcheck \n\nsudo apt-get update\nsudo apt-get install -y libx11-dev libx11-xcb-dev libfontenc-dev libice-dev libsm-dev libxau-dev libxaw7-dev \\\nlibxcomposite-dev libxcursor-dev libxdamage-dev libxfixes-dev libxi-dev libxinerama-dev libxkbfile-dev \\\nlibxmuu-dev libxrandr-dev libxrender-dev libxres-dev libxss-dev libxtst-dev libxv-dev libxxf86vm-dev \\\nlibxcb-glx0-dev libxcb-render0-dev libxcb-render-util0-dev libxcb-xkb-dev libxcb-icccm4-dev libxcb-image0-dev \\\nlibxcb-keysyms1-dev libxcb-randr0-dev libxcb-shape0-dev libxcb-sync-dev libxcb-xfixes0-dev libxcb-xinerama0-dev \\\nlibxcb-dri3-dev uuid-dev libxcb-cursor-dev libxcb-dri2-0-dev libxcb-dri3-dev libxcb-present-dev libxcb-composite0-dev \\\nlibxcb-ewmh-dev libxcb-res0-dev libxcb-util-dev pkg-config libgl-dev libgl1-mesa-dev\n```\n" }, { "path": "deploy/linux/deb/create-client-cli-deb-package.sh", "content": "#!/usr/bin/env bash\n\n# Function to print usage\nprint_usage() {\n echo \"Usage: $0 \"\n exit 1\n}\n\n# Check if the correct number of arguments are provided\nif [ \"$#\" -ne 2 ]; then\n print_usage\nfi\n\nCLIENT_CLI=\"$1\"\nVERSION=\"$2\"\nMAINTAINER=\"FPTN Project\"\n\nOS_NAME=$(lsb_release -i | awk -F':\\t' '{print $2}' | tr '[:upper:]' '[:lower:]')\nOS_VERSION=$(lsb_release -r | awk -F':\\t' '{print $2}')\n\nCLIENT_TMP_DIR=$(mktemp -d -t fptn-client-cli-XXXXXX)\n\nmkdir -p \"$CLIENT_TMP_DIR/DEBIAN\"\nmkdir -p \"$CLIENT_TMP_DIR/usr/bin\"\nmkdir -p \"$CLIENT_TMP_DIR/etc/fptn-client\"\nmkdir -p \"$CLIENT_TMP_DIR/lib/systemd/system\"\n\n# Copy client binary\ncp \"$CLIENT_CLI\" \"$CLIENT_TMP_DIR/usr/bin/\"\nchmod 755 \"$CLIENT_TMP_DIR/usr/bin/$(basename \"$CLIENT_CLI\")\"\n\n\n# Create client configuration file\ncat < \"$CLIENT_TMP_DIR/etc/fptn-client/client.conf\"\n# FPTN Client Configuration\n# =========================\n\n\n# Required: Authentication token for server access\nACCESS_TOKEN=\n\n\n# Required: Domain name used for SNI (Server Name Indication)\n# This should be a popular, non-blocked domain in your region\n# Example: rutube.ru, youtube.com, cloudflare.com\nSNI=rutube.ru\n\n\n# Optional: Connect to specific server instead of auto-selecting fastest\n# Name matching is case-insensitive\nPREFERRED_SERVER=\n\n\n# Optional: Bind to specific network interface\n# Leave empty to use default interface. Examples: eth0, wlan0, tun0\nNETWORK_INTERFACE=\n\n\n# Optional: Specify the gateway IPv4 (e.g., router IPv4)\nGATEWAY_IP=\n\n# Optional: Specify the gateway IPv6 (e.g., router IPv6)\nGATEWAY_IPv6=\n\n# Censorship Bypass Settings\n# Optional: Method to bypass censorship mechanisms\n# Available options:\n# - obfuscation - Masks traffic as regular HTTPS using TLS obfuscation\n# - sni-reality-chrome147 - SNI reality with Chrome 147 browser fingerprint\n# - sni-reality-chrome146 - SNI reality with Chrome 146 browser fingerprint\n# - sni-reality-chrome145 - SNI reality with Chrome 145 browser fingerprint\n# - sni-reality-firefox149 - SNI reality with Firefox 149 browser fingerprint\n# - sni-reality-yandex26 - SNI reality with Yandex Browser 26 fingerprint\n# - sni-reality-yandex25 - SNI reality with Yandex Browser 25 fingerprint\n# - sni-reality-yandex24 - SNI reality with Yandex Browser 24 fingerprint\n# - sni-reality-safari26 - SNI reality with Safari 26 browser fingerprint\nBYPASS_METHOD=sni-reality-yandex25\n\n\n# Blacklist domains - always blocked regardless of other settings\n# Completely block access to the main domain AND all its subdomains\n# Format: domain:[,domain:...]\n# Example: domain:ria.ru blocks ria.ru and all *.ria.ru sites\nBLACKLIST_DOMAINS=domain:solovev-live.ru,domain:ria.ru,domain:tass.ru,domain:1tv.ru,domain:ntv.ru,domain:rt.com\n\n\n# Networks that always bypass VPN (highest priority)\n# Traffic to these networks never uses VPN, regardless of other settings\n# Format: CIDR notation, comma-separated\n# Default: Private networks (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) bypass VPN\nEXCLUDE_TUNNEL_NETWORKS=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n\n\n# Networks that always use VPN (highest priority)\n# Traffic to these networks always uses VPN, regardless of other settings\n# Format: CIDR notation, comma-separated\n# Empty by default - no networks forced through VPN\nINCLUDE_TUNNEL_NETWORKS=\n\n\n# Split Tunneling Settings\n# Enable split tunneling feature\n# When enabled, traffic routing is controlled by TUNNEL_MODE and domain/network lists\n# true: Enable split tunneling - configure routing with TUNNEL_MODE below\n# false: Disable split tunneling - all traffic goes through VPN tunnel\nENABLE_SPLIT_TUNNEL=true\n\n\n# Split tunneling mode - defines traffic routing strategy\n# exclude: Route specified domains/networks directly, all other traffic through VPN\n# Use case: Local/trusted sites bypass VPN for better performance\n# include: Route only specified domains/networks through VPN, all other traffic directly\n# Use case: Protect only sensitive/blocked sites with VPN\nSPLIT_TUNNEL_MODE=exclude\n\n\n# Domains for split tunneling - traffic classification based on TUNNEL_MODE\n# Format: domain:[,domain:...]\n# With TUNNEL_MODE=exclude: These domains bypass VPN tunnel\n# With TUNNEL_MODE=include: Only these domains use VPN tunnel\n# Examples for Russia: Local sites (.ru, .su) bypass VPN, foreign sites use VPN\nSPLIT_TUNNEL_DOMAINS=domain:ru,domain:su,domain:рф,domain:vk.com,domain:yandex.com,domain:userapi.com,domain:yandex.net,domain:clstorage.net\n\nEOL\n\n\n# Create systemd service file for client\ncat < \"$CLIENT_TMP_DIR/lib/systemd/system/fptn-client.service\"\n[Unit]\nDescription=FPTN Client Service\nAfter=network.target\n\n[Service]\nEnvironmentFile=/etc/fptn-client/client.conf\nExecStart=/usr/bin/$(basename \"$CLIENT_CLI\") \\\n --access-token \"\\${ACCESS_TOKEN}\" \\\n --out-network-interface \"\\${NETWORK_INTERFACE}\" \\\n --gateway-ip \"\\${GATEWAY_IP}\" \\\n --gateway-ipv6 \"\\${GATEWAY_IPv6}\" \\\n --sni \"\\${SNI}\" \\\n --bypass-method \"\\${BYPASS_METHOD}\" \\\n --blacklist-domains \"\\${BLACKLIST_DOMAINS}\" \\\n --enable-split-tunnel=\\${ENABLE_SPLIT_TUNNEL} \\\n --split-tunnel-domains \"\\${SPLIT_TUNNEL_DOMAINS}\" \\\n --exclude-tunnel-networks \"\\${EXCLUDE_TUNNEL_NETWORKS}\" \\\n --include-tunnel-networks \"\\${INCLUDE_TUNNEL_NETWORKS}\" \\\n --preferred-server \"\\${PREFERRED_SERVER}\"\n\nRestart=always\nRestartSec=5\nUser=root\n\n[Install]\nWantedBy=multi-user.target\nEOL\n\n# Create control file for client package\nINSTALLED_SIZE=$(du -s \"$CLIENT_TMP_DIR/usr\" | cut -f1)\ncat < \"$CLIENT_TMP_DIR/DEBIAN/control\"\nPackage: fptn-client-cli\nVersion: ${VERSION}\nArchitecture: $(dpkg --print-architecture)\nMaintainer: ${MAINTAINER}\nInstalled-Size: ${INSTALLED_SIZE}\nDepends: iptables, iproute2, net-tools\nSection: admin\nReplaces: fptn-client-cli\nConflicts: fptn-client-cli\nProvides: fptn-client-cli\nPriority: optional\nDescription: fptn client\nEOL\n\n\n# Create prerm file\ncat < \"$CLIENT_TMP_DIR/DEBIAN/prerm\"\n#!/bin/bash\n\nsystemctl daemon-reload || echo \"Failed to reload\"\nsystemctl stop fptn-client 2>/dev/null || echo \"Failed to stop\"\nEOL\nchmod 755 \"$CLIENT_TMP_DIR/DEBIAN/prerm\"\n\n\n# Create postrm file\ncat < \"$CLIENT_TMP_DIR/DEBIAN/postrm\"\n#!/bin/bash\n\nif [ \"\\$1\" != \"upgrade\" ]; then\n systemctl disable fptn-client.service 2>/dev/null || true\n rm -f /lib/systemd/system/fptn-client.service 2>/dev/null || echo \"Failed to remove\"\nfi\nEOL\nchmod 755 \"$CLIENT_TMP_DIR/DEBIAN/postrm\"\n\n\n\n# Build the Debian package\ndpkg-deb --root-owner-group --build \"$CLIENT_TMP_DIR\" \"fptn-client-cli-${VERSION}-${OS_NAME}${OS_VERSION}-$(dpkg --print-architecture).deb\"\n\n# Clean up temporary directories\nrm -rf \"$CLIENT_TMP_DIR\"\n\necho \"Client Debian package created successfully.\"\n" }, { "path": "deploy/linux/deb/create-client-gui-deb-package.sh", "content": "#!/usr/bin/env bash\n\nprint_usage() {\n echo \"Usage: $0 \"\n exit 1\n}\nif [ \"$#\" -ne 4 ]; then\n print_usage\nfi\n\nCLIENT_GUI=\"$1\"\nCLIENT_ICON=\"$2\"\nVERSION=\"$3\"\nSNI_SOURCE_DIR=\"$4\"\n\nMAINTAINER=\"FPTN Project\"\nOS_NAME=$(lsb_release -i | awk -F':\\t' '{print $2}' | tr '[:upper:]' '[:lower:]')\nOS_VERSION=$(lsb_release -r | awk -F':\\t' '{print $2}')\nCLIENT_TMP_DIR=$(mktemp -d -t fptn-client-XXXXXX)\n\n# create structure\nmkdir -p \"$CLIENT_TMP_DIR/DEBIAN\"\nmkdir -p \"$CLIENT_TMP_DIR/usr/bin\"\nmkdir -p \"$CLIENT_TMP_DIR/opt/fptn/qt6\" # Qt directory\nmkdir -p \"$CLIENT_TMP_DIR/opt/fptn/SNI\" # SNI directory\nmkdir -p \"$CLIENT_TMP_DIR/usr/share/applications\" # Directory for .desktop file\nmkdir -p \"$CLIENT_TMP_DIR/usr/share/icons/hicolor/512x512/apps\" # Directory for icon\n\n# copy program\ncp -v \"$CLIENT_GUI\" \"$CLIENT_TMP_DIR/opt/fptn/fptn-client-gui\"\nchmod 755 \"$CLIENT_TMP_DIR/opt/fptn/fptn-client-gui\"\n\n# copy SNI files\nif [ -d \"$SNI_SOURCE_DIR\" ]; then\n echo \"Copying SNI files from $SNI_SOURCE_DIR to $CLIENT_TMP_DIR/opt/fptn/SNI\"\n cp -r \"$SNI_SOURCE_DIR\"/* \"$CLIENT_TMP_DIR/opt/fptn/SNI/\"\nelse\n echo \"Warning: SNI source directory not found: $SNI_SOURCE_DIR\"\nfi\n\n# copy qt\nQT_LIBS_DIR=$CLIENT_TMP_DIR/opt/fptn/qt6/\nQT_PLUGINS_DIR=\"$QT_LIBS_DIR/plugins\"\nmkdir -p \"$QT_LIBS_DIR\"\nmkdir -p \"$QT_PLUGINS_DIR\"\n\nfind ~/.conan2 -path \"*/Release/qtbase/lib/libQt6*.so*\" -print0 | xargs -0 cp -av -t \"$QT_LIBS_DIR\"\nfind ~/.conan2 -type d -path \"*/Release/qtbase/plugins\" | grep -E \"/qt[0-9a-f]+\" | while read -r dir; do\n cp -rv \"$dir\"/* \"$QT_PLUGINS_DIR\"\ndone\n\n# Create wrapper script\ncat < \"$CLIENT_TMP_DIR/usr/bin/fptn-client\"\n#!/usr/bin/env bash\n\nexport FPTN_QT_DIR=\"/opt/fptn/qt6\"\nexport QT_PLUGIN_PATH=\"\\$FPTN_QT_DIR/plugins\"\nexport QT_QPA_PLATFORM_PLUGIN_PATH=\"\\$FPTN_QT_DIR/plugins/platforms\"\nexport LD_LIBRARY_PATH=\"\\$FPTN_QT_DIR:\\$QT_QPA_PLATFORM_PLUGIN_PATH\"\n\ncleanup_dns() {\n echo \"Cleaning up DNS settings...\"\n resolvectl revert tun0\n}\n\nnotify_error() {\n local message=\"\\$1\"\n notify-send -u critical \"Error in Script\" \"\\$message\" || echo \"D'oh\"\n}\n\ndeclare -a VARS\nVARS+=(\n \"QT_PLUGIN_PATH=\\$QT_PLUGIN_PATH\"\n \"QT_QPA_PLATFORM_PLUGIN_PATH=\\$QT_QPA_PLATFORM_PLUGIN_PATH\"\n \"LD_LIBRARY_PATH=\\$LD_LIBRARY_PATH\"\n)\nfor VAR in \\$(env | sed 's/=/\\t/g' | awk '{ print \\$1 }' | tr '\\n' ' '); do\n if [[ ! \" \\${VARS[@]} \" =~ \" \\$VAR=\" ]]; then\n VARS+=(\"\\$VAR=\\${!VAR}\")\n fi\ndone\n\nPROCESS_NAME=\"fptn-client-gui\"\nPID=\\$(pgrep \"\\$PROCESS_NAME\")\nif [ -n \"\\$PID\" ]; then\n cleanup_dns || echo \"Failed to clean dns\"\n\n echo \"Process \\$PROCESS_NAME found with PID \\$PID. Attempting to kill it.\"\n kill \"\\$PID\" || echo \"Failed to stop\"\n sleep 5\n\n PID=\\$(pgrep \"\\$PROCESS_NAME\")\n if [ -n \"\\$PID\" ]; then\n echo \"Process \\$PROCESS_NAME still running. Force killing it.\"\n pkill -9 \"\\$PROCESS_NAME\" || echo \"Failed to kill\"\n else\n echo \"Process \\$PROCESS_NAME successfully terminated.\"\n fi\nelse\n echo \"Process \\$PROCESS_NAME not found.\"\nfi\n\nTUN_INTERFACE=\\$(ip link show | grep -o 'tun0')\nif [ -n \"\\$TUN_INTERFACE\" ]; then\n notify_error \"TUN interface \\$TUN_INTERFACE found. Disabling another VPN.\"\nelse\n echo \"No TUN interface found.\"\nfi\n\nchattr -i /etc/resolv.conf\ntrap cleanup_dns EXIT\nexec pkexec env -u PKEXEC_UID \"SUDO_USER=\\$USER\" \"SUDO_UID=\\$(id -u)\" \"SUDO_GID=\\$(id -g)\" \"\\${VARS[@]}\" \"/bin/sh\" -c \"exec /opt/fptn/fptn-client-gui \\\"\\$@\\\"\" \"\\$@\"\n\nEOL\nchmod 755 \"$CLIENT_TMP_DIR/usr/bin/fptn-client\"\n\n# Create .desktop file\ncp \"$CLIENT_ICON\" \"$CLIENT_TMP_DIR/usr/share/icons/hicolor/512x512/apps/fptn-client.png\"\ncat < \"$CLIENT_TMP_DIR/usr/share/applications/fptn-client.desktop\"\n[Desktop Entry]\nName=FPTN Client\nComment=FPTN VPN Client\nExec=/usr/bin/fptn-client\nIcon=/usr/share/icons/hicolor/512x512/apps/fptn-client.png\nTerminal=false\nType=Application\nCategories=Network;Utility;\nEOL\n\n# Create control file for client package\nINSTALLED_SIZE=$(du -s \"$CLIENT_TMP_DIR/usr\" | cut -f1)\ncat < \"$CLIENT_TMP_DIR/DEBIAN/control\"\nPackage: fptn-client\nVersion: ${VERSION}\nArchitecture: $(dpkg --print-architecture)\nMaintainer: ${MAINTAINER}\nInstalled-Size: ${INSTALLED_SIZE}\nDepends: iptables, iproute2, net-tools, libgl-dev, libgl1-mesa-dev, libx11-dev, libx11-xcb-dev, libfontenc-dev, libxcb-cursor0\nProvides: fptn-client\nReplaces: fptn-client\nConflicts: fptn-client\nSection: admin\nPriority: optional\nDescription: fptn client\nEOL\n\n# Create postinst file\ncat < \"$CLIENT_TMP_DIR/DEBIAN/postinst\"\n#!/bin/bash\n\nupdate-desktop-database || true\nEOL\nchmod 755 \"$CLIENT_TMP_DIR/DEBIAN/postinst\"\n\n# Create prerm file\ncat < \"$CLIENT_TMP_DIR/DEBIAN/prerm\"\n#!/bin/bash\n\nPROCESS_NAME=\"fptn-client-gui\"\nPID=\\$(pgrep \"\\$PROCESS_NAME\")\nif [ -n \"\\$PID\" ]; then\n echo \"Process \\$PROCESS_NAME found with PID \\$PID. Attempting to kill it.\"\n kill \"\\$PID\" || echo \"Failed to stop process \\$PROCESS_NAME\"\n sleep 5\n\n PID=\\$(pgrep \"\\$PROCESS_NAME\")\n if [ -n \"\\$PID\" ]; then\n echo \"Process \\$PROCESS_NAME still running. Force killing it.\"\n pkill -9 \"\\$PROCESS_NAME\" || echo \"Failed to force kill process \\$PROCESS_NAME\"\n else\n echo \"Process \\$PROCESS_NAME successfully terminated.\"\n fi\nelse\n echo \"Process \\$PROCESS_NAME not found.\"\nfi\nEOL\nchmod 755 \"$CLIENT_TMP_DIR/DEBIAN/prerm\"\n\n# Create postrm file\ncat < \"$CLIENT_TMP_DIR/DEBIAN/postrm\"\n#!/bin/bash\n\nif [ \"\\$1\" != \"upgrade\" ]; then\n rm -rf \"/opt/fptn\" || true\n rm -f \"/usr/bin/fptn-client\" || true\n rm -f \"/usr/share/icons/hicolor/512x512/apps/fptn-client.png\" || true\n rm -f \"/usr/share/applications/fptn-client.desktop\" || true\nfi\nupdate-desktop-database || true\nEOL\nchmod 755 \"$CLIENT_TMP_DIR/DEBIAN/postrm\"\n\n# Build the Debian package\ndpkg-deb --root-owner-group --build \"$CLIENT_TMP_DIR\" \"fptn-client-${VERSION}-${OS_NAME}${OS_VERSION}-$(dpkg --print-architecture).deb\"\n\n# Clean up temporary directories\nrm -rf \"$CLIENT_TMP_DIR\"\n\necho \"Client Debian package created successfully.\"\n" }, { "path": "deploy/linux/deb/create-server-deb-package.sh", "content": "#!/usr/bin/env bash\n\n# Function to print usage\nprint_usage() {\n echo \"Usage: $0 \"\n exit 1\n}\n\nif [ \"$#\" -ne 3 ]; then\n print_usage\nfi\n\nSERVER_BIN=\"$1\"\nPASSWD_BIN=\"$2\"\nVERSION=\"$3\"\n\nMAINTAINER=\"FPTN Project\"\n\nOS_NAME=$(lsb_release -i | awk -F':\\t' '{print $2}' | tr '[:upper:]' '[:lower:]')\nOS_VERSION=$(lsb_release -r | awk -F':\\t' '{print $2}')\n\nSERVER_TMP_DIR=$(mktemp -d -t fptn-server-XXXXXX)\n\nmkdir -p \"$SERVER_TMP_DIR/DEBIAN\"\nmkdir -p \"$SERVER_TMP_DIR/usr/bin\"\nmkdir -p \"$SERVER_TMP_DIR/etc/fptn\"\nmkdir -p \"$SERVER_TMP_DIR/lib/systemd/system\"\n\n# Copy server files\ncp \"$SERVER_BIN\" \"$SERVER_TMP_DIR/usr/bin/\"\nchmod 755 \"$SERVER_TMP_DIR/usr/bin/$(basename \"$SERVER_BIN\")\"\ncp \"$PASSWD_BIN\" \"$SERVER_TMP_DIR/usr/bin/\"\nchmod 755 \"$SERVER_TMP_DIR/usr/bin/$(basename \"$PASSWD_BIN\")\"\n\n# Create server configuration file\ncat < \"$SERVER_TMP_DIR/etc/fptn/server.conf\"\n# Configuration for fptn server\n\nOUT_NETWORK_INTERFACE=\n\n# KEYS\nSERVER_KEY=\nSERVER_CRT=\n\nPORT=443\nTUN_INTERFACE_NAME=fptn0\n\n# Enable detection of probing attempts (experimental; accepted values: true or false)\nENABLE_DETECT_PROBING=false\n\n# Default domain where non-VPN client traffic will be redirected\n# When someone scans your server (not using VPN), their connection will be forwarded to this domain instead\nDEFAULT_PROXY_DOMAIN=cdnvideo.com\n\n# Comma-separated list of allowed website domains for non-VPN clients\n# This acts like a \"whitelist\" of websites that scanning bots are allowed to reach\n# Behavior logic:\n# - List is empty (default): allows ALL domains, proxy all non-VPN traffic to the SNI in the TLS-handshake\n# - List is NOT empty: use as whitelist:\n# - Client SNI in list -> proxy to client's SNI\n# - Client SNI not in list -> proxy to --default-proxy-domain\n# Domain matching includes all subdomains:\n# - If \"example.com\" is in the list, it will match:\n# - example.com (exact match)\n# - www.example.com\n# - api.example.com\n# - any.other.sub.example.com\n# Examples:\n# ALLOWED_SNI_LIST=example.com,test.org\n# This allows: example.com, test.org and ALL their subdomains\nALLOWED_SNI_LIST=\n\n# Block BitTorrent traffic to prevent abuse (accepted values: true or false)\nDISABLE_BITTORRENT=true\n\n# Set the USE_REMOTE_SERVER_AUTH variable to true if you need to\n# redirect requests to a master FPTN server for authorization.\n# This is used for cluster operations.\nUSE_REMOTE_SERVER_AUTH=false\n# Specify the remote FPTN server's host address for authorization.\n# This should be the IP address or domain name of the server.\nREMOTE_SERVER_AUTH_HOST=\n# Specify the port of the remote FPTN server for authorization.\n# The default is port 443 for secure HTTPS connections.\nREMOTE_SERVER_AUTH_PORT=443\n\n# Set a secret key to allow Prometheus to access the server's statistics.\n# This key must be alphanumeric (letters and numbers only) and must not include spaces or special characters.\nPROMETHEUS_SECRET_ACCESS_KEY=\n\n# Maximum number of active sessions allowed per VPN user\nMAX_ACTIVE_SESSIONS_PER_USER=3\n\n# Public IPv4 addresses of this VPN server (comma-separated).\n# Used to prevent proxy loops when clients connect.\n# Example: 1.2.3.4,5.6.7.8\nSERVER_EXTERNAL_IPS=\n\nEOL\n\n# Create systemd service file for server\ncat < \"$SERVER_TMP_DIR/lib/systemd/system/fptn-server.service\"\n[Unit]\nDescription=FPTN Server Service\nAfter=network.target\n\n[Service]\nEnvironmentFile=/etc/fptn/server.conf\nExecStart=/usr/bin/$(basename \"$SERVER_BIN\") \\\n --server-key=\\${SERVER_KEY} \\\n --server-crt=\\${SERVER_CRT} \\\n --out-network-interface=\\${OUT_NETWORK_INTERFACE} \\\n --server-port=\\${PORT} \\\n --enable-detect-probing=\\${ENABLE_DETECT_PROBING} \\\n --default-proxy-domain=\\${DEFAULT_PROXY_DOMAIN} \\\n --allowed-sni-list=\\${ALLOWED_SNI_LIST} \\\n --tun-interface-name=\\${TUN_INTERFACE_NAME} \\\n --disable-bittorrent=\\${DISABLE_BITTORRENT} \\\n --prometheus-access-key=\\${PROMETHEUS_SECRET_ACCESS_KEY} \\\n --use-remote-server-auth=\\${USE_REMOTE_SERVER_AUTH} \\\n --remote-server-auth-host=\\${REMOTE_SERVER_AUTH_HOST} \\\n --remote-server-auth-port=\\${REMOTE_SERVER_AUTH_PORT} \\\n --max-active-sessions-per-user=\\${MAX_ACTIVE_SESSIONS_PER_USER} \\\n --server-external-ips=\\${SERVER_EXTERNAL_IPS}\nRestart=always\nWorkingDirectory=/etc/fptn\nRestartSec=5\nUser=root\n\n[Install]\nWantedBy=multi-user.target\nEOL\n\n# Create control file for server package\nINSTALLED_SIZE=$(du -s \"$SERVER_TMP_DIR/usr\" | cut -f1)\ncat < \"$SERVER_TMP_DIR/DEBIAN/control\"\nPackage: fptn-server\nVersion: ${VERSION}\nArchitecture: $(dpkg --print-architecture)\nMaintainer: ${MAINTAINER}\nInstalled-Size: ${INSTALLED_SIZE}\nDepends: iptables, iproute2, net-tools\nSection: admin\nReplaces: fptn-server\nConflicts: fptn-server\nProvides: fptn-server\nPriority: optional\nDescription: fptn server\nEOL\n\n\n# Create preinst file\ncat < \"$SERVER_TMP_DIR/DEBIAN/preinst\"\n#!/bin/bash\n\nif [ -f /etc/fptn/server.conf ]; then\n cp /etc/fptn/server.conf \"/etc/fptn/server.conf.backup.\\$(date +'%Y-%m-%d__%H-%M-%S')\"\nfi\nEOL\nchmod 755 \"$SERVER_TMP_DIR/DEBIAN/preinst\"\n\n\n# Create postinst file\ncat < \"$SERVER_TMP_DIR/DEBIAN/postinst\"\n#!/bin/bash\n\nchown root:root /etc/fptn/server.conf 2>/dev/null || true\nEOL\nchmod 755 \"$SERVER_TMP_DIR/DEBIAN/postinst\"\n\n\ncat < \"$SERVER_TMP_DIR/DEBIAN/prerm\"\n#!/bin/bash\n\nsystemctl daemon-reload 2>/dev/null || echo \"Failed to reload\"\nsystemctl stop fptn-server 2>/dev/null || echo \"Failed to stop\"\nEOL\nchmod 755 \"$SERVER_TMP_DIR/DEBIAN/prerm\"\n\n\ncat < \"$SERVER_TMP_DIR/DEBIAN/postrm\"\n#!/bin/bash\n\nif [ \"\\$1\" != \"upgrade\" ]; then\n systemctl disable fptn-server.service 2>/dev/null || echo \"Failed to disable\"\n rm -f /lib/systemd/system/fptn-server.service 2>/dev/null || echo \"Failed to remove\"\nfi\nEOL\nchmod 755 \"$SERVER_TMP_DIR/DEBIAN/postrm\"\n\n# Build the Debian package\ndpkg-deb --build \"$SERVER_TMP_DIR\" \"fptn-server-${VERSION}-${OS_NAME}${OS_VERSION}-$(dpkg --print-architecture).deb\"\n\n# Clean up temporary directory\nrm -rf \"$SERVER_TMP_DIR\"\n\n\nchmod 644 \"fptn-server-${VERSION}-${OS_NAME}${OS_VERSION}-$(dpkg --print-architecture).deb\"\n\necho \"Server Debian package created successfully.\"" }, { "path": "deploy/linux/wifi/README.md", "content": "### Setting Up a WiFi-VPN Access Point on Raspberry Pi\n\nThis guide outlines the process of setting up a WiFi access point on a Raspberry Pi or another computer with all traffic routed through a VPN. Follow the instructions to turn your Raspberry Pi into a full-fledged access point.\n\n#### Step 1: Download VPN Client Version for ARM\n\nSet up the VPN client according to [this section](https://github.com/batchar2/fptn?tab=readme-ov-file#fptn-client-installation-and-configuration).\n\n#### Step 2: Install Required Packages\n\nYou will need the following packages to set up the access point:\n\n```bash\nsudo apt install hostapd dnsmasq\n```\n\n#### Step 3: System Configuration\n\nDisable and stop the hostapd and dnsmasq services to avoid conflicts:\n\n```bash\nsudo systemctl stop hostapd\nsudo systemctl disable hostapd\nsudo systemctl stop dnsmasq\nsudo systemctl disable dnsmasq\n```\n\n\n#### Step 4: Additional settings for systemd\n\nIf you are using Ubuntu 24.04/22.04, follow these additional steps:\n\nOpen the file `/etc/systemd/resolved.conf`\n\n\nFind the DNSStubListener parameter, uncomment it, and change the value to no:\n\n```bash\nDNSStubListener=no\n``` \n\nRestart the systemd-resolved service:\n\n```bash\nsudo systemctl restart systemd-resolved\n```\n\nReboot your system:\n\n```bash\nsudo reboot\n```\n\n\n\n\n\n#### Step 5: Configure Hostapd\n\nHostapd is a utility that creates a WiFi access point. Copy the hostapd configuration file:\n\n\n```bash\nsudo cp hostapd/fptn-hostapd.conf /etc/\n```\nCopy the hostapd service file:\n\n```bash\nsudo cp hostapd/fptn-hostapd.service /etc/systemd/system/\n```\n\nOpen the file /etc/fptn-hostapd.conf and replace the values with your own:\n\n```bash\n# Replace with your WiFi interface\ninterface=wlan0\n\n# Replace with your WiFi network name\nssid=VPN-FPTN\n\n# Replace with your WiFi password\nwpa_passphrase=1passwordpassword\n```\n\n#### Step 6: Configure Dnsmasq\n\nDnsmasq is a tool that automatically assigns IP addresses to all clients connected to the WiFi. Copy the dnsmasq configuration file:\n\n```bash\nsudo cp dnsmasq/fptn-dnsmasq.conf /etc/\n```\n\nCopy the dnsmasq service file:\n\n\n```bash\nsudo cp dnsmasq/fptn-dnsmasq.service /etc/systemd/system/\n```\n\n### Step 7: Traffic Routing Setup\n\nTo route packets from the WiFi interface through the VPN, perform the following steps:\nCopy the network setup service file:\n\n\n```bash\nsudo cp fptn-setup-network/fptn-setup-network.service /etc/systemd/system/\n```\n\nCopy the network setup script:\n\n```bash\nsudo cp fptn-setup-network/fptn-setup-network.sh /usr/sbin/\n```\n\nОткройте файл `/usr/sbin/fptn-setup-network.sh` и замените данные на ваши:\n\n```bash\n# Replace with your WiFi interface\nWIFI_INTERFACE=wlan0\n\n# Replace with your Ethernet interface\nETH_INTERFACE=eth0\n```\n\n### Step 8: Restart and Enable Services\n\nReload the systemd daemon:\n\n```bash\nsudo systemctl daemon-reload\n```\n\nEnable and restart the hostapd service:\n\n```bash\nsudo systemctl enable fptn-hostapd.service\nsudo systemctl restart fptn-hostapd.service\n```\n\nEnable and restart the dnsmasq service:\n\n```bash\nsudo systemctl enable fptn-dnsmasq.service\nsudo systemctl restart fptn-dnsmasq.service\n```\n\nEnable and start the network setup service:\n\n```bash\nsudo systemctl enable fptn-setup-network.service\nsudo systemctl start fptn-setup-network.service\n```\n\nEnable and start FPNT\n\n```bash\nsudo systemctl enable fptn-client.service\nsudo systemctl start fptn-client.service\n```\n\nAfter completing these steps, your Raspberry Pi will be configured as a WiFi access point with VPN functionality.\n" }, { "path": "deploy/linux/wifi/README.ru.md", "content": "\n### Настройка WiFi-VPN точки доступа на Raspberry Pi\n\nВ этом руководстве описан процесс настройки точки доступа WiFi на Raspberry Pi или другом компьютере с функцией пропусканием всего трафика через VPN. Следуйте инструкциям, чтобы ваш Raspberry Pi стал полноценной точкой доступа.\n\n#### Шаг 1: Скачайте клиентскую версию VPN клиента для ARM\n\nВыполните настройку VPN клиента в соответсвии с этим [пунктом](https://github.com/batchar2/fptn?tab=readme-ov-file#fptn-client-installation-and-configuration)\n\n#### Шаг 2: Установите необходимые пакеты\n\nДля настройки точки доступа вам потребуются следующие пакеты:\n\n```bash\nsudo apt install hostapd dnsmasq\n```\n\n#### Шаг 3: Настройки системы\n\nОтключите и остановите службы hostapd и dnsmasq, чтобы избежать конфликтов:\n\n```bash\nsudo systemctl stop hostapd\nsudo systemctl disable hostapd\nsudo systemctl stop dnsmasq\nsudo systemctl disable dnsmasq\n```\n\n#### Шаг 4: Дополнительные настройки для systemd\n\nЕсли вы используете Ubuntu 24.04/22.04, выполните следующие дополнительные шаги:\n\nОткройте файл `/etc/systemd/resolved.conf`\n\n\nНайдите параметр DNSStubListener, раскомментируйте его и измените значение на no:\n\n```bash\nDNSStubListener=no\n``` \n\nПерезапустите службу systemd-resolved:\n\n```bash\nsudo systemctl restart systemd-resolved\n```\n\nПерезагрузите систему:\n\n```bash\nsudo reboot\n```\n\n\n#### Шаг 5: Настройка Hostapd\n\nHostapd утилита которая создаст wifi-точку доступа. Скопируйте файл конфигурации hostapd:\n\n```bash\nsudo cp hostapd/fptn-hostapd.conf /etc/\n```\nСкопируйте файл службы hostapd:\n\n```bash\nsudo cp hostapd/fptn-hostapd.service /etc/systemd/system/\n```\n\nОткройте файл /etc/fptn-hostapd.conf и замените значения на ваши:\n\n```bash\n# Замените на ваш интерфейс WiFi\ninterface=wlan0\n\n# Замените на имя вашей WiFi сети\nssid=VPN-FPTN\n\n# Замените на ваш пароль\nwpa_passphrase=1passwordpassword\n```\n\n#### Шаг 6: Настройка dnsmasq\n\nDnsmasq инструмент, который всем клиентам подключенным к WiFi будет автоматически выдавать IP адреса.\n\nСкопируйте файл конфигурации dnsmasq:\n\n```bash\nsudo cp hostapd/fptn-dnsmasq.conf /etc/\n```\n\nСкопируйте файл службы dnsmasq:\n\n```bash\nsudo cp hostapd/fptn-dnsmasq.service /etc/systemd/system/\n```\n\n### Шаг 7: Настройка маршрутизации трафика\n\nДля того, чтобы пакеты с wifi-интерфейса попадали в VPN нужно сделать маршрутизацию трафика\n\nСкопируйте файл службы для настройки сети:\n\n```bash\nsudo cp fptn-setup-network/fptn-setup-network.service /etc/systemd/system/\n```\n\nСкопируйте скрипт настройки сети:\n```bash\nsudo cp fptn-setup-network/fptn-setup-network.sh /usr/sbin/\n```\n\nОткройте файл `/usr/sbin/fptn-setup-network.sh` и замените данные на ваши:\n\n```bash\n# Замените на ваш WiFi интерфейс\nWIFI_INTERFACE=wlan0\n\n# Замените на ваш Ethernet интерфейс\nETH_INTERFACE=eth0\n```\n\n### Шаг 8: Перезапустите и включите службы\n\nПерезагрузите демон systemd:\n\n```bash\nsudo systemctl daemon-reload\n```\n\nВключите и перезапустите службу hostapd:\n```bash\nsudo systemctl enable fptn-hostapd.service\nsudo systemctl restart fptn-hostapd.service\n```\n\nВключите и перезапустите службу dnsmasq:\n\n```bash\nsudo systemctl enable fptn-dnsmasq.service\nsudo systemctl restart fptn-dnsmasq.service\n```\n\nВключите и запустите службу настройки сети:\n\n```bash\nsudo systemctl enable fptn-setup-network.service\nsudo systemctl start fptn-setup-network.service\n```\n\nВключите и запустите FPTN\n```bash\nsudo systemctl enable fptn-client.service\nsudo systemctl start fptn-client.service\n```\n\nПосле выполнения этих шагов ваш Raspberry Pi будет настроен как точка доступа WiFi с функцией VPN." }, { "path": "deploy/linux/wifi/dnsmasq/fptn-dnsmasq.conf", "content": "# /etc/fptn-dnsmasq.conf\n\n# REPALCE IT\ninterface=wlan0\n\nlog-facility=/var/log/dnsmasq.log\n\ndhcp-range=192.168.180.100,192.168.180.250,12h\ndhcp-option=3,192.168.180.1\nlisten-address=192.168.180.1,127.0.0.1\n#dhcp-option=option:router,10.10.0.1\n# dns\ndhcp-option=6,8.8.8.8\n#no-resolv\nlog-queries\n" }, { "path": "deploy/linux/wifi/dnsmasq/fptn-dnsmasq.service", "content": "[Unit]\nDescription=FPTN dnsmasq Service\nAfter=network.target fptn-client.service fptn-hostapd.service\n\n[Service]\nExecStart=bash -c \"sleep 20 && dnsmasq --conf-file=/etc/fptn-dnsmasq.conf -d\" \nRestart=always\nUser=root\nRestartSec=5\n \n[Install]\nWantedBy=multi-user.target" }, { "path": "deploy/linux/wifi/fptn-setup-network/fptn-setup-network.service", "content": "[Unit]\nDescription=FPTN dnsmasq Service\nAfter=network.target fptn-client.service fptn-hostapd.service fptn-dnsmasq.service\n\n[Service]\nExecStart=bash -c \"sleep 2 && bash /usr/sbin/fptn-setup-network.sh\" \nRestart=always\nUser=root\nRestartSec=5\n \n[Install]\nWantedBy=multi-user.target\n" }, { "path": "deploy/linux/wifi/fptn-setup-network/fptn-setup-network.sh", "content": "## /usr/sbin/fptn-setup-network.sh\n\n#replace to your\nWIFI_INTERFACE=wlan0\n\n#replace to your\nETH_INTERFACE=eth0\n\necho \"Telling kernel to turn on ipv4 ip_forwarding\"\necho 1 > /proc/sys/net/ipv4/ip_forward\necho \"Done. Setting up iptables rules to allow FORWARDING\"\n\niptables -A FORWARD -i $WIFI_INTERFACE -o tun0 -j ACCEPT\niptables -A FORWARD -i tun0 -o $WIFI_INTERFACE -j ACCEPT\n\niptables -A FORWARD -i tun0 -o $ETH_INTERFACE -j ACCEPT\niptables -A FORWARD -i $ETH_INTERFACE -o tun0 -j ACCEPT\n\niptables -t nat -A POSTROUTING -o $ETH_INTERFACE -j MASQUERADE\niptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE\n\nip addr add 192.168.180.1/24 dev $WIFI_INTERFACE\n\n## fix route wifi -> tun\n#IP_TUN0=$(ip -o -4 addr list tun0 | awk '{print $4}' | cut -d/ -f1)\n#ip route add default via $IP_TUN0 dev tun0 table 100\n#ip rule add from 192.168.1.180 lookup 100\n\nsleep 60\necho \"Done setting up iptables rules. Forwarding enabled\"\n" }, { "path": "deploy/linux/wifi/hostapd/fptn-hostapd.conf", "content": "# Replace with your WiFi interface\ninterface=wlan0\n# Replace with your WiFi network name\nssid=VPN-FPTN\n# Replace with your WiFi password\nwpa_passphrase=1passwordpassword\n\n\nignore_broadcast_ssid=0\n\ncountry_code=BR\nchannel=11\n\nwpa=1\nwpa_pairwise=TKIP CCMP\nrsn_pairwise=CCMP\n\nlogger_syslog=-1\nlogger_syslog_level=2\nlogger_stdout=-1\nlogger_stdout_level=2\n\nctrl_interface=/var/run/hostapd\n\nctrl_interface_group=0\n\nhw_mode=b\n\nbeacon_int=100\ndtim_period=2\nmax_num_sta=255\nrts_threshold=2347\nfragm_threshold=2346\nmacaddr_acl=0\nauth_algs=1\n\nlogger_stdout=-1\nlogger_stdout_level=2\n\nwmm_enabled=1\n#\n# WMM-PS Unscheduled Automatic Power Save Delivery [U-APSD]\n# Enable this flag if U-APSD supported outside hostapd (eg., Firmware/driver)\n#uapsd_advertisement_enabled=1\n#\n# Low priority / AC_BK = background\nwmm_ac_bk_cwmin=4\nwmm_ac_bk_cwmax=10\nwmm_ac_bk_aifs=7\nwmm_ac_bk_txop_limit=0\nwmm_ac_bk_acm=0\n# Note: for IEEE 802.11b mode: cWmin=5 cWmax=10\n#\n# Normal priority / AC_BE = best effort\nwmm_ac_be_aifs=3\nwmm_ac_be_cwmin=4\nwmm_ac_be_cwmax=10\nwmm_ac_be_txop_limit=0\nwmm_ac_be_acm=0\n# Note: for IEEE 802.11b mode: cWmin=5 cWmax=7\n#\n# High priority / AC_VI = video\nwmm_ac_vi_aifs=2\nwmm_ac_vi_cwmin=3\nwmm_ac_vi_cwmax=4\nwmm_ac_vi_txop_limit=94\nwmm_ac_vi_acm=0\n# Note: for IEEE 802.11b mode: cWmin=4 cWmax=5 txop_limit=188\n#\n# Highest priority / AC_VO = voice\nwmm_ac_vo_aifs=2\nwmm_ac_vo_cwmin=2\nwmm_ac_vo_cwmax=3\nwmm_ac_vo_txop_limit=47\nwmm_ac_vo_acm=0\n\neapol_key_index_workaround=0\neap_server=0\nown_ip_addr=127.0.0.1\n" }, { "path": "deploy/linux/wifi/hostapd/fptn-hostapd.service", "content": "[Unit]\nDescription=FPTN hostapd Service\nAfter=network.target fptn-client.service\n\n[Service]\nExecStart=bash -c \"sleep 20 && hostapd /etc/fptn-hostapd.conf\" \nRestart=always\nUser=root\nRestartSec=5\n \n[Install]\nWantedBy=multi-user.target" }, { "path": "deploy/macos/README.md", "content": "# README.md\n\nRequires Python 3.6+ and macOS host with pkgbuild and productbuild available\n\npip3 install macos-pkg-builder\n\npip install clang-tidy\npip install clang-format\npip install cmake-format\nbrew install cppcheck" }, { "path": "deploy/macos/create-pkg.py", "content": "#!/usr/bin/env python3\n\nimport os\nimport sys\nimport shutil\nimport pathlib\nimport argparse\nimport platform\nimport plistlib\nimport tempfile\nimport subprocess\n\nfrom macos_pkg_builder import Packages\n\n\nAPP_NAME = \"FptnClient\"\nSCRIPT_FOLDER = pathlib.Path(__file__).parent\nREPOSITORY_FOLDER = pathlib.Path(__file__).parent.parent.parent\nICON = SCRIPT_FOLDER / \"assets\" / \"FptnClient.icns\"\n\n\ndef run_command(command, cwd=None):\n result = subprocess.run(\n command,\n shell=True,\n cwd=cwd,\n text=True,\n capture_output=True,\n )\n if result.returncode != 0:\n raise RuntimeError(f\"Command '{command}' failed with error: {result.stderr.strip()}\")\n return result.stdout.strip()\n\n\n\ndef create_app(\n app_path: pathlib.Path,\n fptn_client_cli: pathlib.Path,\n fptn_client_gui: pathlib.Path,\n version: str,\n) -> bool:\n print(app_path)\n try:\n app_contents_path = app_path / \"Contents\"\n macos_path = app_contents_path / \"MacOS\"\n resources_path = app_contents_path / \"Resources\"\n frameworks_path = app_contents_path / \"Frameworks\"\n frameworks_qt_plugins_path = app_contents_path / \"Frameworks\" / \"plugins\"\n os.makedirs(macos_path, exist_ok=True)\n os.makedirs(resources_path, exist_ok=True)\n os.makedirs(frameworks_path, exist_ok=True)\n os.makedirs(frameworks_qt_plugins_path, exist_ok=True)\n\n # Сopy SNI files from deploy/sni to Resources/SNI\n sni_source = REPOSITORY_FOLDER / \"deploy\" / \"sni\"\n sni_dest = resources_path / \"SNI\"\n if sni_source.exists():\n print(f\"Copying SNI files from {sni_source} to {sni_dest}\")\n shutil.copytree(sni_source, sni_dest, dirs_exist_ok=True)\n else:\n print(f\"Warning: SNI source folder not found: {sni_source}\")\n\n # copy cli program\n binary_dest = macos_path / \"fptn-client-cli\"\n shutil.copy(fptn_client_cli, binary_dest)\n os.chmod(binary_dest, 0o755)\n # copy wrapper of program\n fptn_client_cli_wrapper_sh = SCRIPT_FOLDER / \"scripts\" / \"fptn-client-cli-wrapper.sh\"\n fptn_client_cli_wrapper_sh_dest = macos_path / \"fptn-client-cli-wrapper.sh\"\n shutil.copy(fptn_client_cli_wrapper_sh, fptn_client_cli_wrapper_sh_dest)\n os.chmod(binary_dest, 0o755)\n\n # --- copy gui program ---\n binary_dest = macos_path / \"fptn-client-gui\"\n shutil.copy(fptn_client_gui, binary_dest)\n # Fix rpath\n run_command(f'install_name_tool -add_rpath @executable_path/../Frameworks {macos_path / \"fptn-client-gui\"}')\n\n os.chmod(binary_dest, 0o755)\n fptn_client_gui_wrapper_sh = SCRIPT_FOLDER / \"scripts\" / \"fptn-client-gui-wrapper.sh\"\n fptn_client_gui_wrapper_sh_dest = macos_path / \"fptn-client-gui-wrapper.sh\"\n shutil.copy(fptn_client_gui_wrapper_sh, fptn_client_gui_wrapper_sh_dest)\n os.chmod(binary_dest, 0o4755) # 0o755)\n\n qt_libs = run_command(r'find ~/.conan2 -type f \\( -name \"*.dylib\" \\) | grep Release')\n\n qt_lib_paths = qt_libs.splitlines()\n for lib in qt_lib_paths:\n lib_path = pathlib.Path(lib)\n lib_name = lib_path.name\n if r\"qtbase/lib/\" in lib:\n if r\".6.7.3.dylib\" in lib_name:\n lib_name = lib_name.replace(\".6.7.3.dylib\", \".6.dylib\")\n print(f\"Copy {lib} -> {frameworks_path / lib_name}\")\n shutil.copy(lib, frameworks_path / lib_name)\n elif \"qtbase/plugins/\" in str(lib_path):\n separeted = lib.split(r\"qtbase/plugins/\")\n plugin_folder = frameworks_qt_plugins_path / separeted[1].replace(lib_name, \"\")\n os.makedirs(plugin_folder, exist_ok=True)\n\n print(f\"Copy {lib_path} -> {plugin_folder / lib_name}\")\n shutil.copy(lib, plugin_folder / lib_name)\n\n # copy icon\n icon_dest = resources_path / ICON.name\n shutil.copy(ICON, icon_dest)\n # Create Info.plist\n plist = {\n \"CFBundleName\": APP_NAME,\n \"CFBundleExecutable\": \"fptn-client-gui-wrapper.sh\",\n \"CFBundleIdentifier\": \"com.fptn.vpn\",\n \"CFBundlePackageType\": \"APPL\",\n \"CFBundleVersion\": version,\n \"CFBundleIconFile\": ICON.name,\n \"LSUIElement\": True,\n \"LSApplicationCategoryType\": \"public.app-category.utilities\",\n \"LSRequiresNativeExecution\": True,\n \"NSHighResolutionCapable\": True,\n \"LD_LIBRARY_PATH\": \"@executable_path/../Frameworks\",\n \"RunAtLoad\": True,\n \"KeepAlive\": True,\n \"UserName\": \"root\",\n \"NSAllowsArbitraryLoads\": True,\n \"NSClipboardUsageDescription\": \"Requires clipboard access to copy and paste data.\",\n }\n\n with open(app_contents_path / \"Info.plist\", \"wb\") as plist_file:\n plistlib.dump(plist, plist_file)\n\n except Exception as e:\n print(f\"Error creating .app: {e}\")\n raise e\n return True\n\n\ndef create_pkg(app_path: pathlib.Path, version: str) -> bool:\n try:\n post_install = SCRIPT_FOLDER / \"scripts\" / \"post_install.sh\"\n machine = \"apple-silicon\" if platform.machine() == \"arm64\" else \"intel\"\n pkg_obj = Packages(\n pkg_output=f\"fptn-client-{version}-{machine}.pkg\",\n pkg_bundle_id=\"com.fptn-vpn.installer\",\n pkg_as_distribution=True,\n pkg_title=\"FPTN-VPN\",\n pkg_postinstall_script=str(post_install.resolve()),\n pkg_file_structure={\n str(app_path.resolve()): f\"/Applications/{APP_NAME}.app\",\n },\n )\n if pkg_obj.build():\n return True\n else:\n print(\"Error building package.\")\n except Exception as e:\n print(f\"Error creating package: {e}\")\n raise e\n return False\n\n\nif __name__ == \"__main__\":\n parser = argparse.ArgumentParser(description=\"PKG build configuration.\")\n parser.add_argument(\"--fptn-client-cli\", required=True, help=\"Path to the cli application binary.\")\n parser.add_argument(\"--fptn-client-gui\", required=True, help=\"Path to the gui application binary.\")\n parser.add_argument(\"--version\", required=True, help=\"Version\")\n args = parser.parse_args()\n\n fptn_client_cli = pathlib.Path(args.fptn_client_cli)\n fptn_client_gui = pathlib.Path(args.fptn_client_gui)\n if not fptn_client_cli.is_file() or not fptn_client_gui.is_file():\n print(f\"Binary file does not exist: {fptn_client_cli} or {fptn_client_gui}\")\n sys.exit(1)\n with tempfile.TemporaryDirectory() as temp_dir:\n app_path = pathlib.Path(temp_dir) / f\"{APP_NAME}-{args.version}.app\"\n if create_app(app_path, fptn_client_cli, fptn_client_gui, args.version):\n if create_pkg(app_path, args.version):\n print(f\"Package created successfully\")\n else:\n print(\"Failed to create package.\")\n sys.exit(1)\n else:\n print(\"Failed to create .app\")\n sys.exit(1)\n" }, { "path": "deploy/macos/scripts/fptn-client-cli-wrapper.sh", "content": "#!/bin/bash\n\n# Check for root privileges\nif [ \"$(id -u)\" -ne 0 ]; then\n echo \"This operation requires root privileges.\"\n exit 1\nfi\n\n\n# Function to clean DNS settings\ncleanup_dns() {\n echo \"Cleaning up DNS settings...\"\n networksetup -listallnetworkservices | grep -v '^An asterisk' | xargs -I {} networksetup -setdnsservers \"{}\" empty\n}\n\ncd /tmp/\n\nnetworksetup -listallnetworkservices | grep -v '^An asterisk' | xargs -I {} networksetup -setdnsservers \"{}\" empty\n\ntrap cleanup_dns EXIT\n/Applications/FptnClient.app/Contents/MacOS/fptn-client-cli \"$@\"\n" }, { "path": "deploy/macos/scripts/fptn-client-gui-wrapper.sh", "content": "#!/bin/bash\n\n# Dialog display functions\nshow_error() {\n osascript -e \"display dialog \\\"$1\\\" buttons {\\\"OK\\\"} default button \\\"OK\\\" with icon stop\"\n exit 1\n}\n\nis_client_running() {\n pgrep -f \"fptn-client-gui\" > /dev/null\n}\n\nshow_dialog() {\n local message=\"$1\"\n local buttons=\"$2\"\n local default_button=\"$3\"\n local icon=\"$4\"\n\n osascript -e \"display dialog \\\"$message\\\" buttons {$buttons} default button \\\"$default_button\\\" with icon $icon\"\n}\n\ncopy_sni_files() {\n local SNI_SRC=\"/Applications/FptnClient.app/Contents/Resources/SNI\"\n local USER_HOME=\"$HOME\"\n local SNI_USER_DIR=\"$USER_HOME/Library/Preferences/SNI\"\n\n # Check if SNI directory exists and has all files\n local need_copy=false\n\n if [ ! -d \"$SNI_USER_DIR\" ]; then\n echo \"SNI directory doesn't exist, need to copy files\"\n need_copy=true\n else\n # Check if any SNI files are missing in user directory\n for file in \"$SNI_SRC\"/*; do\n if [ -f \"$file\" ]; then\n filename=$(basename \"$file\")\n user_file=\"$SNI_USER_DIR/$filename\"\n if [ ! -f \"$user_file\" ]; then\n echo \"File $filename missing in user directory, need to copy\"\n need_copy=true\n break\n fi\n fi\n done\n fi\n\n # Copy files if needed\n if [ \"$need_copy\" = true ] && [ -d \"$SNI_SRC\" ]; then\n echo \"Copying SNI files to user directory...\"\n mkdir -p \"$SNI_USER_DIR\"\n cp -R \"$SNI_SRC/\"* \"$SNI_USER_DIR/\"\n echo \"SNI files copied successfully to $SNI_USER_DIR\"\n elif [ ! -d \"$SNI_SRC\" ]; then\n echo \"Warning: SNI source folder not found: $SNI_SRC\"\n else\n echo \"SNI files are already up to date\"\n fi\n}\n\n# Reset DNS settings\nclean_dns() {\n networksetup -listallnetworkservices | grep -v '^An asterisk' | \\\n xargs -I {} networksetup -setdnsservers \"{}\" empty\n}\n\ncopy_sni_files\n\n# Set environment and launch application\nexport QT_PLUGIN_PATH=/Applications/FptnClient.app/Contents/Frameworks/plugins\nexport QT_QPA_PLATFORM_PLUGIN_PATH=$QT_PLUGIN_PATH/platforms\nexport LD_LIBRARY_PATH=/Applications/FptnClient.app/Contents/Frameworks\n\nclean_dns\n\n# run in background\n/Applications/FptnClient.app/Contents/MacOS/fptn-client-gui \"$@\" &\n\n# wait for end of client\nwhile is_client_running; do\n sleep 1\ndone\n\nclean_dns\n" }, { "path": "deploy/macos/scripts/post_install.sh", "content": "#!/bin/bash\n\nset -e\n\n# Function to show error messages\nshow_error() {\n local message=\"$1\"\n osascript < \")\n sys.exit(1)\n\n file_path = sys.argv[1]\n new_version = sys.argv[2]\n\n print(\"new_version>>>\", new_version)\n replace_version(file_path, new_version)\n print(f\"Replaced version in {file_path} with {new_version}\")\n" }, { "path": "deploy/windows/create-installer.py", "content": "import os\r\nimport re\r\nimport sys\r\nimport shutil\r\nimport pathlib\r\nimport platform\r\nimport datetime\r\nimport argparse\r\nimport subprocess\r\n\r\nimport requests\r\n\r\nINNOSETUP_DEFAULT_PATH = r\"C:\\Program Files (x86)\\Inno Setup 6\\ISCC.exe\"\r\n\r\nREPOSITORY_FOLDER = pathlib.Path(__file__).parent.parent.parent\r\n\r\nINSTALLER_DIR = pathlib.Path(__file__).parent.resolve() / \"installer\"\r\n\r\nTMP_DIR = INSTALLER_DIR / \"tmp\"\r\nTMP_DIR.mkdir(parents=True, exist_ok=True)\r\n\r\nDEPENDS_DIR = INSTALLER_DIR / \"depends\"\r\nDEPENDS_DIR.mkdir(parents=True, exist_ok=True)\r\n\r\nDEPENDS_QT_DIR = DEPENDS_DIR / \"qt\"\r\nDEPENDS_QT_DIR.mkdir(parents=True, exist_ok=True)\r\n\r\nOUTPUT_DIR = INSTALLER_DIR / \"Output\"\r\nOUTPUT_DIR.mkdir(parents=True, exist_ok=True)\r\n\r\nDEPENDS_WINTUN_DLL_PATH = DEPENDS_DIR / \"wintun.dll\"\r\nDEPENDS_VC_REDIST_PATH = DEPENDS_DIR / \"vc_redist.exe\"\r\n\r\nAPP_FPTN_CLIENT = DEPENDS_DIR / \"fptn-client.exe\"\r\nAPP_FPTN_CLIENT_CLI = DEPENDS_DIR / \"fptn-client-cli.exe\"\r\n\r\n\r\ndef is_windows_x86_64() -> bool:\r\n if platform.system() != \"Windows\":\r\n raise EnvironmentError(\"This function is only for Windows systems.\")\r\n architecture = platform.machine().lower()\r\n return architecture in (\"x86_64\", \"amd64\")\r\n\r\n\r\ndef is_arm_64() -> bool:\r\n architecture = platform.machine().lower()\r\n return architecture in (\"aarch64\", \"arm64\")\r\n\r\n\r\ndef download_file(url: str, destination_path: pathlib.Path) -> bool:\r\n try:\r\n response = requests.get(url, allow_redirects=True, timeout=120)\r\n if response.status_code == 200:\r\n with open(destination_path, \"wb\") as file:\r\n file.write(response.content)\r\n print(f\"File downloaded successfully: {destination_path}\")\r\n return True\r\n raise ConnectionError(f\"Failed to download file: HTTP {response.status_code} {response.reason}\")\r\n except Exception as err:\r\n raise err\r\n\r\n\r\ndef replace_values_in_innosetupfile(file_path: pathlib.Path, replacements: dict):\r\n with open(file_path, \"r\", encoding=\"utf-8\") as file:\r\n content = file.read()\r\n\r\n for key, value in replacements.items():\r\n pattern = rf'#define {key} \".*?\"'\r\n replacement = rf'#define {key} \"{value}\"'\r\n content = re.sub(pattern, replacement, content)\r\n with open(file_path, \"w\", encoding=\"utf-8\") as file:\r\n file.write(content)\r\n\r\n\r\ndef run_command(command: str) -> str:\r\n \"\"\"Run a shell command and return its output.\"\"\"\r\n try:\r\n print(\"COMMAND>\", command)\r\n result = subprocess.run(command, shell=True, capture_output=True, text=True)\r\n result.check_returncode()\r\n print(result.stderr)\r\n return result.stdout\r\n except Exception as err:\r\n print(\"Output:\", err.stdout)\r\n print(\"Errors:\", err.stderr)\r\n raise err\r\n\r\n\r\ndef get_conan_path() -> pathlib.Path:\r\n home_path = pathlib.Path.home()\r\n conan_paths = [home_path / \".conan2\", home_path / \".conan\"]\r\n for path in conan_paths:\r\n if path.exists() and path.is_dir():\r\n return path\r\n raise FileNotFoundError(\"Conan path could not be detected in the home directory.\")\r\n\r\n\r\ndef copy_qt_libraries(frameworks_path: pathlib.Path):\r\n conan_path = get_conan_path()\r\n print(f\"Detected Conan path: {conan_path}\")\r\n\r\n qt_libs = run_command(f'dir /S /B \"{conan_path}\"\\\\*.dll')\r\n qt_lib_paths = qt_libs.splitlines()\r\n frameworks_qt_plugins_path = frameworks_path / \"plugins\"\r\n for lib in qt_lib_paths:\r\n lib_path = pathlib.Path(lib)\r\n lib_name = lib_path.name\r\n for lib in qt_lib_paths:\r\n lib_path = pathlib.Path(lib)\r\n lib_name = lib_path.name\r\n if r\"qtbase/bin/\" in str(lib_path.as_posix()):\r\n if r\".6.7.3.dll\" in lib_name:\r\n lib_name = lib_name.replace(\".6.7.3.dll\", \".6.dll\")\r\n print(f\"Copy {lib} -> {frameworks_path / lib_name}\")\r\n shutil.copy(lib, frameworks_path / lib_name)\r\n elif \"qtbase/plugins\" in str(lib_path.as_posix()):\r\n separated = str(lib_path.as_posix()).split(\"qtbase/plugins/\")\r\n plugin_folder = frameworks_qt_plugins_path / separated[1].replace(lib_name, \"\")\r\n os.makedirs(plugin_folder, exist_ok=True)\r\n print(f\"Copy {lib_path} -> {plugin_folder / lib_name}\")\r\n shutil.copy(lib, plugin_folder / lib_name)\r\n\r\n\r\ndef compile_inno_setup_script(script_path: pathlib.Path, output_dir: pathlib.Path) -> bool:\r\n command = [INNOSETUP_DEFAULT_PATH, script_path]\r\n # if output_dir:\r\n # command.append(f\"/O{output_dir}\")\r\n try:\r\n result = subprocess.run(\r\n command,\r\n check=True,\r\n stdout=subprocess.PIPE,\r\n stderr=subprocess.PIPE,\r\n text=True,\r\n )\r\n print(\"Inno Setup compiled successfully.\")\r\n\r\n output = result.stdout\r\n if len(output) > 0:\r\n print(output)\r\n\r\n warnings = result.stderr\r\n if len(warnings) > 0:\r\n print(\"Warnings:\", result.stderr)\r\n return True\r\n except Exception as err:\r\n print(\"Failed to compile Inno Setup script: \", err)\r\n print(\"Output:\", err.stdout)\r\n print(\"Errors:\", err.stderr)\r\n raise err\r\n\r\n\r\nif __name__ == \"__main__\":\r\n parser = argparse.ArgumentParser(description=\"A script to manage the build process for FPTN Client.\")\r\n parser.add_argument(\r\n \"--wintun-dll\",\r\n type=pathlib.Path,\r\n required=True,\r\n help=\"The path to the wintun dll\",\r\n )\r\n parser.add_argument(\r\n \"--fptn-client\",\r\n type=pathlib.Path,\r\n required=True,\r\n help=\"The path to the FPTN client executable.\",\r\n )\r\n parser.add_argument(\r\n \"--fptn-client-cli\",\r\n type=pathlib.Path,\r\n required=True,\r\n help=\"The path to the FPTN client CLI executable.\",\r\n )\r\n parser.add_argument(\"--version\", required=True, help=\"Version\")\r\n parser.add_argument(\"--output-folder\", required=True, help=\"output-folder\")\r\n\r\n args = parser.parse_args()\r\n\r\n if is_arm_64():\r\n download_file(\"https://aka.ms/vs/17/release/vc_redist.arm64.exe\", DEPENDS_VC_REDIST_PATH)\r\n elif is_windows_x86_64():\r\n download_file(\"https://aka.ms/vs/17/release/vc_redist.x64.exe\", DEPENDS_VC_REDIST_PATH)\r\n else:\r\n raise EnvironmentError(\"Unsuported system!\")\r\n\r\n # copy wintun dll\r\n shutil.copy(args.wintun_dll, DEPENDS_WINTUN_DLL_PATH)\r\n # copy clients\r\n shutil.copy(args.fptn_client, APP_FPTN_CLIENT)\r\n shutil.copy(args.fptn_client_cli, APP_FPTN_CLIENT_CLI)\r\n\r\n # copy SNI files from deploy/sni to depends/sni\r\n sni_source = REPOSITORY_FOLDER / \"deploy\" / \"sni\"\r\n sni_dest = DEPENDS_DIR / \"sni\"\r\n if sni_source.exists():\r\n print(f\"Copying SNI files from {sni_source} to {sni_dest}\")\r\n shutil.copytree(sni_source, sni_dest, dirs_exist_ok=True)\r\n else:\r\n print(f\"Warning: SNI source folder not found: {sni_source}\")\r\n\r\n # prepare innosetup\r\n INNOSETUP_SCRIPT_PATH = INSTALLER_DIR / \"fptn-installer.iss\"\r\n PREPARED_INNOSETUP_SCRIPT_PATH = INSTALLER_DIR / \"tmp.iss\"\r\n shutil.copy(INNOSETUP_SCRIPT_PATH, PREPARED_INNOSETUP_SCRIPT_PATH)\r\n arch = is_arm_64()\r\n replace_values_in_innosetupfile(\r\n PREPARED_INNOSETUP_SCRIPT_PATH,\r\n {\r\n \"APP_VERSION_NAME\": args.version,\r\n \"APP_VERSION_NUMBER\": datetime.datetime.now().strftime(\"%Y.%m.%d.%H%M\"),\r\n \"APP_COPYRIGHT_YEAR\": str(datetime.datetime.now().year),\r\n },\r\n )\r\n\r\n # prepare qt\r\n conan_path = get_conan_path()\r\n copy_qt_libraries(DEPENDS_QT_DIR)\r\n\r\n # change dir\r\n os.chdir(INSTALLER_DIR.resolve().as_posix())\r\n\r\n # change resources\r\n TOOLS_RC_EDIT = TMP_DIR / \"rcedit.exe\"\r\n download_file(\r\n \"https://github.com/electron/rcedit/releases/download/v2.0.0/rcedit-x64.exe\",\r\n TOOLS_RC_EDIT,\r\n )\r\n ICON_FILE = INSTALLER_DIR / \"resources\" / \"icons\" / \"app.ico\"\r\n run_command(\r\n f'\"{TOOLS_RC_EDIT.as_posix()}\" \"{APP_FPTN_CLIENT.as_posix()}\" --set-product-version \"{args.version}\" --set-icon \"{ICON_FILE.as_posix()}\"'\r\n )\r\n\r\n # change permissions\r\n manifest = INSTALLER_DIR / \"app.manifest\"\r\n run_command(f'mt.exe -manifest \"{manifest.as_posix()}\" -outputresource:\"{APP_FPTN_CLIENT.as_posix()}\";1')\r\n run_command(f'mt.exe -manifest \"{manifest.as_posix()}\" -outputresource:\"{APP_FPTN_CLIENT_CLI.as_posix()}\";1')\r\n\r\n compile_inno_setup_script(PREPARED_INNOSETUP_SCRIPT_PATH, OUTPUT_DIR)\r\n arch = \"arm64\" if is_arm_64() else \"x64_x86\"\r\n output_file = pathlib.Path(args.output_folder) / f\"FptnClientInstaller-{args.version}-windows-{arch}.exe\"\r\n shutil.copy(INSTALLER_DIR / \"Output\" / \"FptnClientInstaller.exe\", output_file)\r\n" }, { "path": "deploy/windows/installer/app.manifest", "content": "\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\n" }, { "path": "deploy/windows/installer/fptn-installer.iss", "content": "// replacement automatically\r\n#define APP_VERSION_NAME \"1.0.0\"\r\n// replacement automatically\r\n#define APP_VERSION_NUMBER \"1.0.0\"\r\n// replacement automatically\r\n#define APP_COPYRIGHT_YEAR \"2024\"\r\n\r\n#define APP_ID\t\t\t\t\"{D2D2C1f8-5F5F-5f79-9C5F-7E2B9F1C39A4}\"\r\n#define APP_URL \t\t\t\"fptn.org\"\r\n#define APP_NAME \t\t\t\"FPTN Client\"\r\n#define APP_PUBLISHER \t\t\"fptn.org\"\r\n\r\n[Setup]\r\nAppId={{#APP_ID}\r\nAppName={#APP_NAME}\r\nAppVersion={#APP_VERSION_NAME}\r\n\r\nMinVersion=10.0.10240\r\nAppPublisher={#APP_PUBLISHER}\r\nAppPublisherURL={#APP_URL}\r\nAppSupportURL={#APP_URL}\r\nAppUpdatesURL={#APP_URL}\r\nDefaultDirName={autopf}\\{#APP_NAME}\r\nDefaultGroupName={#APP_NAME}\r\nOutputDir=Output\r\nOutputBaseFilename=FptnClientInstaller\r\nSetupIconFile=resources\\icons\\app.ico\r\nCompression=lzma\r\nSolidCompression=yes\r\nDisableDirPage=no\r\n// # LicenseFile=installer\\license\\LicenseFile.rtf\r\nVersionInfoVersion={#APP_VERSION_NUMBER}\r\nWizardStyle=modern\r\nUninstallLogMode=overwrite\r\nAppCopyright=Copyright (C) {#APP_COPYRIGHT_YEAR} {#APP_PUBLISHER}.\r\nPrivilegesRequired=admin\r\nAppendDefaultDirName=yes\r\nArchitecturesAllowed=x64compatible\r\nArchitecturesInstallIn64BitMode=x64compatible\r\nSetupLogging=Yes\r\n\r\n[Dirs]\r\nName: \"{app}\\\";\r\nName: \"{app}\\logs\";\r\nName: \"{app}\\plugins\";\r\n\r\n[Files]\r\nSource: \"depends/qt/*\"; DestDir: \"{app}\"; Flags: ignoreversion recursesubdirs createallsubdirs uninsneveruninstall\r\nSource: \"depends/wintun.dll\"; DestDir: \"{app}\"; Flags: ignoreversion recursesubdirs createallsubdirs uninsneveruninstall\r\nSource: \"depends/fptn-client.exe\"; DestDir: \"{app}\"; Flags: ignoreversion recursesubdirs createallsubdirs uninsneveruninstall\r\nSource: \"depends/fptn-client-cli.exe\"; DestDir: \"{app}\"; Flags: ignoreversion recursesubdirs createallsubdirs uninsneveruninstall\r\nSource: \"depends/vc_redist.exe\"; DestDir: \"{tmp}\"; AfterInstall: InstallVCRedist(); Flags: ignoreversion recursesubdirs createallsubdirs\r\n// ------- generate bat files -------\r\nSource: \"depends/wintun.dll\"; DestDir: \"{app}\"; AfterInstall: GenerateBatFile('{app}\\fptn-client.exe','{app}\\FptnClient.bat'); Flags: ignoreversion recursesubdirs createallsubdirs uninsneveruninstall\r\n// ------- copy SNI files -------\r\nSource: \"depends/sni/*\"; DestDir: \"{app}\\SNI\"; Flags: ignoreversion recursesubdirs createallsubdirs\r\n\r\n[Tasks]\r\nName: \"desktopicon\"; Description: \"{cm:CreateDesktopIcon}\";\r\n// --- Name: \"startup\"; Description: {cm:AutoStartProgram,{#APP_NAME}};\r\n\r\n[Run]\r\n// Filename: \"cmd.exe\"; Parameters: \"/c reg add \"\"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\"\" /v IPEnableRouter /t REG_DWORD /d 1 /f\"; Flags: runhidden\r\nFilename: \"{app}\\FptnClient.bat\"; Description: \"{cm:LaunchProgram,{#APP_NAME}}\"; Flags: nowait postinstall skipifdoesntexist\r\n\r\n[UninstallRun]\r\nFilename: \"taskkill\"; Parameters: \"/F /IM fptn-client.exe\"; Flags: runhidden waituntilterminated\r\nFilename: \"taskkill\"; Parameters: \"/F /IM fptn-client-cli.exe\"; Flags: runhidden waituntilterminated\r\n\r\n[Icons]\r\nName: \"{group}\\{#APP_NAME}\"; Filename: \"{app}\\fptn-client.exe\"\r\nName: \"{group}\\{cm:UninstallProgram,{#APP_NAME}}\"; Filename: \"{uninstallexe}\";\r\nName: \"{commondesktop}\\{#APP_NAME}\"; Filename: \"{app}\\fptn-client.exe\"; Tasks: desktopicon\r\n// --- Name: \"{userstartup}\\{#APP_NAME}\"; Filename: \"{app}\\fptn-client.exe\"; Tasks: startup\r\n// --- Name: \"{userstartup}\\{#APP_NAME}\"; Filename: \"{app}\\FptnClient.bat\"; Tasks: startup\r\n\r\n\r\n[InstallDelete]\r\nType: filesandordirs; Name: \"{app}\\qt\"\r\nType: filesandordirs; Name: \"{app}\\bin\"\r\nType: filesandordirs; Name: \"{app}\\SNI\"\r\nType: filesandordirs; Name: \"{app}\\logs\"\r\nType: filesandordirs; Name: \"{app}\\plugins\"\r\nType: files; Name: \"{app}\\*\"\r\n\r\n[UninstallDelete]\r\nType: filesandordirs; Name: \"{app}\\qt\"\r\nType: filesandordirs; Name: \"{app}\\bin\"\r\nType: filesandordirs; Name: \"{app}\\SNI\"\r\nType: filesandordirs; Name: \"{app}\\logs\"\r\nType: filesandordirs; Name: \"{app}\\plugins\"\r\nType: files; Name: \"{app}\\*\"\r\n\r\n[Languages]\r\nName: \"en\"; MessagesFile: \"compiler:Default.isl\"\r\n// \"English\" seems to always break the default language detection with unknown reasons.\r\nName: \"polish\"; MessagesFile: \"compiler:Languages\\Polish.isl\"\r\nName: \"russian\"; MessagesFile: \"compiler:Languages\\Russian.isl\"\r\nName: \"ukrainian\"; MessagesFile: \"compiler:Languages\\Ukrainian.isl\"\r\n\r\n\r\n[Code]\r\n\r\nfunction cmd(command: string): integer;\r\nbegin\r\n\texec('cmd.exe', \r\n\t\t'/c ' + command, \r\n\t\tExpandConstant('{app}'), \r\n\t\tSW_HIDE, \r\n\t\tewwaituntilterminated, \r\n\t\tresult\r\n\t)\r\nend;\r\n\r\nprocedure InstallVCRedist();\r\nvar\r\n ExitCode: Integer;\r\nbegin \r\n ExitCode := cmd(ExpandConstant(CurrentFileName) + ' /install /quiet /norestart ');\r\n if ExitCode <> 0 then\r\n begin\r\n ExitCode := cmd(ExpandConstant(CurrentFileName) + ' /repair /quiet /norestart ');\r\n //MsgBox('Failed to install Visual C++ Redistributable.', mbError, MB_OK);\r\n end;\r\nend;\r\n\r\nprocedure GenerateBatFile(programPath: String; batFilePath: String);\r\nvar\r\n content: String;\r\nbegin\r\n\tcontent := '@echo off' + #13#10\r\n\t\t+ ExpandConstant('cd \"{app}\"') + #13#10\r\n\t\t+ 'Net session >nul 2>&1 || (PowerShell start -verb runas ' + #39 + '%~0' + #39 +' &exit /b)' + #13#10\r\n\t\t+ 'cmd /c start \"\" \"' + ExpandConstant(programPath) + ' ' + #13#10\r\n\t\t+ 'exit /s';\r\n\tSaveStringToFile(ExpandConstant(batFilePath), content, False);\r\nend;\r\n\r\nprocedure CurStepChanged(CurStep: TSetupStep);\r\nbegin\r\n \tif CurStep = ssPostInstall then\r\n \tbegin\r\n\t\t//if MsgBox('The installation has completed. For changes to take effect, please restart your computer. Do you want to restart now?', mbConfirmation, MB_YESNO) = IDYES then\r\n //begin\r\n // cmd('shutdown /r /t 0');\r\n //end;\r\n \tend;\r\nend;\r\n" }, { "path": "docker-compose/.gitignore", "content": ".env\nfptn-server-data/\nlogs/\n" }, { "path": "docker-compose/README.md", "content": "" }, { "path": "docker-compose/docker-compose.yml", "content": "services:\n fptn-server:\n restart: unless-stopped\n image: fptnvpn/fptn-vpn-server:latest\n cap_add:\n - NET_ADMIN\n - SYS_MODULE\n - NET_RAW\n - SYS_ADMIN\n sysctls:\n net.ipv4.ip_forward: \"1\"\n net.ipv4.conf.all.src_valid_mark: \"1\"\n net.ipv6.conf.all.disable_ipv6: \"0\"\n net.ipv6.conf.all.forwarding: \"1\"\n net.ipv6.conf.default.forwarding: \"1\"\n net.ipv4.conf.all.rp_filter: \"0\"\n net.ipv4.conf.default.rp_filter: \"0\"\n net.ipv4.ip_local_port_range: \"1024 65535\"\n net.core.somaxconn: \"65535\"\n ulimits:\n nproc:\n soft: 524288\n hard: 524288\n nofile:\n soft: 524288\n hard: 524288\n memlock:\n soft: 524288\n hard: 524288\n devices:\n - /dev/net/tun:/dev/net/tun\n ports:\n - \"${FPTN_PORT}:443/tcp\"\n volumes:\n - ./fptn-server-data:/etc/fptn\n environment:\n - ENABLE_DETECT_PROBING=${ENABLE_DETECT_PROBING}\n - DEFAULT_PROXY_DOMAIN=${DEFAULT_PROXY_DOMAIN}\n - ALLOWED_SNI_LIST=${ALLOWED_SNI_LIST}\n - DISABLE_BITTORRENT=${DISABLE_BITTORRENT}\n - PROMETHEUS_SECRET_ACCESS_KEY=${PROMETHEUS_SECRET_ACCESS_KEY}\n - USE_REMOTE_SERVER_AUTH=${USE_REMOTE_SERVER_AUTH}\n - REMOTE_SERVER_AUTH_HOST=${REMOTE_SERVER_AUTH_HOST}\n - REMOTE_SERVER_AUTH_PORT=${REMOTE_SERVER_AUTH_PORT}\n - MAX_ACTIVE_SESSIONS_PER_USER=${MAX_ACTIVE_SESSIONS_PER_USER}\n - SERVER_EXTERNAL_IPS=${SERVER_EXTERNAL_IPS}\n - USING_DNS_SERVER=${USING_DNS_SERVER:-dnsmasq}\n - DNS_IPV6_ENABLE=${DNS_IPV6_ENABLE:-false}\n - DNS_IPV4_PRIMARY=${DNS_IPV4_PRIMARY:-8.8.8.8}\n - DNS_IPV4_SECONDARY=${DNS_IPV4_SECONDARY:-8.8.4.4}\n - DNS_IPV6_PRIMARY=${DNS_IPV6_PRIMARY:-2001:4860:4860::8888}\n - DNS_IPV6_SECONDARY=${DNS_IPV6_SECONDARY:-2001:4860:4860::8844}\n healthcheck:\n test: [\"CMD\", \"sh\", \"-c\", \"pgrep dnsmasq && pgrep fptn-server\"]\n interval: 30s\n timeout: 10s\n retries: 3\n start_period: 40s\n networks:\n - fptn-network\nnetworks:\n fptn-network:\n driver: bridge\n enable_ipv6: true\n ipam:\n config:\n - subnet: dead:beef:cafe::/48\n gateway: dead:beef:cafe::1\n - subnet: 192.168.200.0/24\n gateway: 192.168.200.1\n" }, { "path": "docs/CNAME", "content": "fptn.org" }, { "path": "docs/index-ru.html", "content": "\n\n\n \n \n \n FPTN Project\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n FPTN Project\n \n\n\n
\n \n
\n
\n
\n
\n \n
\n
\n
\n
\n

FPTN Project

\n\n
\n\n

\n FPTN is a fully custom-built VPN technology — developed from scratch, including the core protocol, server implementation, and cross-platform clients.\n It is a non-commercial, open-source project developed by volunteers and designed to bypass censorship.\n

\n\n

\n The VPN-client is a mobile application or a compact desktop application with an interface located in the system tray.\n No registration process is required! We will send the access token via the bot on Telegram.\n

\n\n
\n
\n
\n \"Application\"/\n
\n
\n \"Application\"/\n
\n
\n
\n
\n
\n
\n\n

\n FPTN operates over the HTTPS protocol, effectively masking traffic and enabling users to bypass censorship restrictions.\n The project's source code is available on GitHub.\n

\n
\n\n
\n

FPTN Project

\n\n
\n\n

\n FPTN — это полностью разработанная с нуля технология VPN, включая собственный протокол, сервер и кроссплатформенные клиенты.\n Это некоммерческий проект с открытым исходным кодом, развиваемый волонтерами и предназначенный для обхода цензуры.\n

\n\n

\n VPN-клиент — мобильное приложение или миниатюрная программа для компьютера, интерфейс которой размещается в трее.\n Здесь нет процесса регистрации! Мы пришлем токен доступа через бота в Telegram\n

\n\n
\n
\n
\n \"Application\"/\n
\n
\n \"Application\"/\n
\n
\n
\n
\n
\n
\n\n

\n FPTN работает через протокол HTTPS, эффективно маскируя трафик и позволяя обходить ограничения цензуры.\n Исходный код проекта доступен на Github.\n

\n
\n\n
\n\n
\n

Download FPTN

\n
\n
\n

Скачать FPTN

\n
\n\n
\n \n \n \n \n
\n\n
\n
\n
\n

\n Google play\n Google play\n

\n
\n Скачать\n Download\n
\n
\n
\n

\n Download Android app from the site\n Скачать Android приложение с сайта\n

\n
\n Скачать\n Download\n
\n
\n
\n\n
\n

Установка и настройка

\n
\n\n

\n Перейдите в Telegram-бот и сгенерируйте токен командой /token, затем скопируйте его.\n \"Settings\"/\n\n
\n Вставьте токен в соответствующее поле.\n

\n \"Application\"/\n
\n Войдите в приложение, используя полученный токен.\n

\n \"Application\"/\n
\n Выберите VPN-сервер из списка доступных (Режим \"Авто\" подберет наиболее оптимальный сервер или можете выбрать сервер из списка доступных). Для включения VPN-сервиса нажмите на кнопку в центре экрана, которая активирует подключение к выбранному серверу.\n

\n \"Application\"/\n
\n Готово!\n

\n \"Application\"/\n\n

\n\n
\n\n
\n

Installation and Setup

\n
\n\n

\n Go to the Telegram bot and generate your token by sending the /token command. Then copy the token.\n \"Settings\"/\n\n
\n Insert the token into the appropriate field.\n

\n \"Application\"/\n
\n Log into the application using the obtained token.\n

\n \"Application\"/\n
\n Select a VPN server from the list of available servers (the \"Auto\" mode will choose the most optimal server, or you can manually select a server from the list). To enable the VPN service, press the button in the center of the screen, which will activate the connection to the selected server.\n

\n \"Application\"/\n
\n Done!\n

\n \"Application\"/\n

\n\n
\n\n\n
\n
\n
\n
\n

\n MacOS client (Apple Silicon)\n Клиент для MacOS (Apple Silicon)\n

\n
\n Скачать\n Download\n
\n
\n
\n\n
\n

Установка и настройка

\n\n
\n\n

\n При установке клиента на MacOS вам может понадобиться более детальная инструкция из-за проблем с драйверами\n

\n\n

\n Перейдите в Telegram-бот и сгенерируйте токен командой /token, затем скопируйте его.\n \"Settings\"/\n

\n\n

\n После запуска приложения нажмите на иконку в системном трее чтобы открыть контекстное меню.\n \"Application\"/\n

\n\n

\n Вставьте сюда токен из Telegram-бота\n \"Settings\"/\n

\n\n

\n Сохраните токен.\n \"Settings\"/\n

\n\n

\n Закройте окно настроек и попробуйте подключиться\n \"Settings\"/\n

\n
\n\n
\n

Installation and Setup

\n\n
\n\n

\n When installing the client on macOS, you may need a more detailed guide due to driver-related issues.\n

\n\n

\n Go to the Telegram bot and generate your token by sending the /token command. Then copy the token.\n \"Settings\"/\n

\n\n

\n After launching the app, click on the tray icon to open the context menu.\n \"Application\"/\n

\n\n

\n Paste the token you received from the Telegram bot into the token field.\n \"Settings\"/\n

\n\n

\n Save the token.\n \"Settings\"/\n

\n\n

\n Close the settings window and try connecting.\n \"Settings\"/\n

\n
\n
\n
\n
\n
\n

\n Download Linux client\n Скачать Linux клиент\n

\n
\n Linux клиент\n Linux client\n
\n Ubuntu (x86_64)\n Ubuntu (ARM64)\n
\n
\n
\n
\n

\n Commandline tools\n Инструменты командной строки\n

\n
\n Linux утилиты\n Linux utils\n
\n FPTN Server (Ubuntu x86_64)\n FPTN Server (Ubuntu ARM64)\n CmdClient (Ubuntu x86_64)\n CmdClient (Ubuntu ARM64)\n
\n
\n
\n
\n
\n

Установка и настройка

\n\n
\n\n

\n Скачайте .deb пакет FPTN-клиента и установите его вместе со всеми зависимостями, выполнив следующую команду (не забудьте заменить путь до пакета):\n

\n\n \n sudo apt install -f ~/Downloads/path-to-deb\n \n
\n
\n\n

\n Перейдите в Telegram-бот и сгенерируйте токен командой /token, затем скопируйте его.\n \"Settings\"/\n

\n\n

\n Запустите FPTN-клиент.\n \"Application\"/\n
\n

\n\n

\n Нажмите на иконку FPTN-клиента в системном трее, чтобы открыть контекстное меню.\n \"Application\"/\n
\n

\n\n

\n Откройте настройки FPTN-клиента и нажмите кнопку \"Добавить токен\".\n \"Settings\"/\n
\n

\n\n

\n Вставьте сюда токен из Telegram-бота и сохраните\n \"Settings\"/\n
\n

\n\n

\n Закройте окно настроек\n \"Settings\"/\n
\n

\n\n

\n В системном трее кликните по иконке приложения и выберите \"Умное подключение\". Эта функция автоматически подберет наиболее оптимальный сервер.\n \"Settings\"/\n
\n

\n\n

\n Готово!\n \"Settings\"/\n

\n
\n\n\n
\n

Installation and Setup

\n
\n\n

\n Download the .deb package for the FPTN client and install it along with all dependencies by running the following command (make sure to replace the package path):\n

\n\n \n sudo apt install -f ~/Downloads/path-to-deb\n \n
\n
\n\n

\n Go to the Telegram bot and generate a token by sending the /token command, then copy it.\n \"Settings\"/\n

\n\n

\n Launch the FPTN client.\n \"Application\"/\n
\n

\n\n

\n Click on the FPTN client icon in the system tray to open the context menu.\n \"Application\"/\n
\n

\n\n

\n Open the FPTN client settings and click the \"Add token\" button.\n \"Settings\"/\n
\n

\n\n

\n Paste the token from the Telegram bot here and save it.\n \"Settings\"/\n
\n

\n\n

\n Close the settings window.\n \"Settings\"/\n
\n

\n\n

\n In the system tray, click on the application icon and select \"Smart Connection\". This feature will automatically select the most optimal server.\n \"Settings\"/\n
\n

\n\n

\n Done!\n \"Settings\"/\n

\n
\n\n\n
\n
\n

\n Download the client for Windows (supports Windows 10 and Windows 11, x86_64 architecture)\n Скачать клиент для Windows (поддерживаются Windows 10 и Windows 11, архитектура x86_64)\n

\n
\n Скачать\n Download\n
\n\n
\n

Установка и настройка

\n
\n\n

\n Перейдите в Telegram-бот и сгенерируйте токен командой /token, затем скопируйте его.\n \"Settings\"/\n

\n\n

\n Скачайте и запустите установщик. При запуске установщика, Windows покажет окно с предупреждением, нажмите \"подробнее\".\n\n \"Application\"/\n\n И нажмите на кнопку \"Запустить в любом случае\".\n\n \"Application\"/\n\n После чего подтвердите запуск установщика.\n\n \"Application\"/\n\n После завершения установки нажмите кнопку завершить и приложение запустится автоматически.\n\n \"Application\"/\n\n После запуска клиента в системном трее появится иконка приложения. Кликните по иконке и откройте настройки.\n\n \"Application\"/\n
\n Нажмите кнопку \"Добавить токен\".\n
\n \"Application\"/\n
\n Вставьте сюда токен из Telegram-бота и сохраните\n

\n \"Application\"/\n
\n После открытия появится список доступных серверов, далее нужно просто закрыть окно настроек.\n

\n \"Application\"/\n
\n В системном трее кликните по иконке приложения и выберите \"Умное подключение\". \"Умное подключение\" подберет наиболее оптимальный сервер.\n

\n \"Application\"/\n
\n Готово!\n

\n \"Application\"/\n

\n\n
\n\n
\n

Installation and Setup

\n
\n\n

\n Go to the Telegram bot and generate a token by sending the /token command, then copy it.\n \"Settings\"/\n

\n\n

\n \"Application\"/\n\n Then click \"Run anyway\".\n\n \"Application\"/\n\n Confirm the installer launch.\n\n \"Application\"/\n\n After the installation is complete, click the finish button, and the application will launch automatically.\n\n \"Application\"/\n\n After the client launches, the application icon will appear in the system tray. Click on the icon and open the settings.\n\n \"Application\"/\n
\n Click the \"Add Token\" button.\n
\n \"Application\"/\n
\n Paste the token from the Telegram bot and save it.\n

\n \"Application\"/\n
\n After saving, a list of available servers will appear. Simply close the settings window.\n

\n \"Application\"/\n
\n In the system tray, click on the application icon and select \"Smart Connection\". This will choose the most optimal server for you.\n

\n \"Application\"/\n
\n Done!\n

\n \"Application\"/\n

\n\n
\n\n\n
\n\n
\n

\n А еще, можно легко превратить RaspberryPi/OrangePi в WiFi-точку доступа и установить на неё FPTN-клиент.\n В этом случае все устройства, подключённые к WiFi, получат доступ к интернету, обходя любые ограничения.\n Информация тут\n\n \"Settings\"/\n

\n

Любую помощь можно получить в \n нашем Telegram чате!

\n\n
\n
\n

\n You can also easily turn a Raspberry Pi or Orange Pi into a WiFi access point and install the FPTN client on it.\n In this case, all devices connected to the WiFi will have unrestricted internet access, bypassing any limitations.\n More information here\n\n \"Settings\"/\n

\n

For any assistance, feel free to join \n our Telegram chat!

\n
\n
\n
\n
\n
\n
\n
\n
\n
\n FPTN Project 2024\n
\n
\n
\n
\n\n\n\n\n" }, { "path": "docs/index.html", "content": "\n\n\n \n \n \n FPTN Project\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n FPTN Project\n \n\n\n
\n \n
\n
\n
\n
\n \n
\n
\n
\n
\n

FPTN Project

\n\n
\n\n

\n FPTN is a fully custom-built VPN technology — developed from scratch, including the core protocol, server implementation, and cross-platform clients.\n It is a non-commercial, open-source project developed by volunteers and designed to bypass censorship.\n

\n\n

\n The VPN-client is a mobile application or a compact desktop application with an interface located in the system tray.\n No registration process is required! We will send the access token via the bot on Telegram.\n

\n\n
\n
\n
\n \"Application\"/\n
\n
\n \"Application\"/\n
\n
\n
\n
\n
\n
\n\n

\n FPTN operates over the HTTPS protocol, effectively masking traffic and enabling users to bypass censorship restrictions.\n The project's source code is available on GitHub.\n

\n
\n\n
\n

FPTN Project

\n\n
\n\n

\n FPTN — это полностью разработанная с нуля технология VPN, включая собственный протокол, сервер и кроссплатформенные клиенты.\n Это некоммерческий проект с открытым исходным кодом, развиваемый волонтерами и предназначенный для обхода цензуры.\n

\n\n

\n VPN-клиент — мобильное приложение или миниатюрная программа для компьютера, интерфейс которой размещается в трее.\n Здесь нет процесса регистрации! Мы пришлем токен доступа через бота в Telegram\n

\n\n
\n
\n
\n \"Application\"/\n
\n
\n \"Application\"/\n
\n
\n
\n
\n
\n
\n\n

\n FPTN работает через протокол HTTPS, эффективно маскируя трафик и позволяя обходить ограничения цензуры.\n Исходный код проекта доступен на Github.\n

\n
\n\n
\n\n
\n

Download FPTN

\n
\n
\n

Скачать FPTN

\n
\n\n
\n \n \n \n \n
\n\n
\n
\n
\n

\n Google play\n Google play\n

\n
\n Скачать\n Download\n
\n
\n
\n

\n Download Android app from the site\n Скачать Android приложение с сайта\n

\n
\n Скачать\n Download\n
\n
\n
\n\n
\n

Установка и настройка

\n
\n\n

\n Перейдите в Telegram-бот и сгенерируйте токен командой /token, затем скопируйте его.\n \"Settings\"/\n\n
\n Вставьте токен в соответствующее поле.\n

\n \"Application\"/\n
\n Войдите в приложение, используя полученный токен.\n

\n \"Application\"/\n
\n Выберите VPN-сервер из списка доступных (Режим \"Авто\" подберет наиболее оптимальный сервер или можете выбрать сервер из списка доступных). Для включения VPN-сервиса нажмите на кнопку в центре экрана, которая активирует подключение к выбранному серверу.\n

\n \"Application\"/\n
\n Готово!\n

\n \"Application\"/\n\n

\n\n
\n\n
\n

Installation and Setup

\n
\n\n

\n Go to the Telegram bot and generate your token by sending the /token command. Then copy the token.\n \"Settings\"/\n\n
\n Insert the token into the appropriate field.\n

\n \"Application\"/\n
\n Log into the application using the obtained token.\n

\n \"Application\"/\n
\n Select a VPN server from the list of available servers (the \"Auto\" mode will choose the most optimal server, or you can manually select a server from the list). To enable the VPN service, press the button in the center of the screen, which will activate the connection to the selected server.\n

\n \"Application\"/\n
\n Done!\n

\n \"Application\"/\n

\n\n
\n\n\n
\n
\n
\n
\n

\n MacOS client (Apple Silicon)\n Клиент для MacOS (Apple Silicon)\n

\n
\n Скачать\n Download\n
\n
\n
\n\n
\n

Установка и настройка

\n\n
\n\n

\n При установке клиента на MacOS вам может понадобиться более детальная инструкция из-за проблем с драйверами\n

\n\n

\n Перейдите в Telegram-бот и сгенерируйте токен командой /token, затем скопируйте его.\n \"Settings\"/\n

\n\n

\n После запуска приложения нажмите на иконку в системном трее чтобы открыть контекстное меню.\n \"Application\"/\n

\n\n

\n Вставьте сюда токен из Telegram-бота\n \"Settings\"/\n

\n\n

\n Сохраните токен.\n \"Settings\"/\n

\n\n

\n Закройте окно настроек и попробуйте подключиться\n \"Settings\"/\n

\n
\n\n
\n

Installation and Setup

\n\n
\n\n

\n When installing the client on macOS, you may need a more detailed guide due to driver-related issues.\n

\n\n

\n Go to the Telegram bot and generate your token by sending the /token command. Then copy the token.\n \"Settings\"/\n

\n\n

\n After launching the app, click on the tray icon to open the context menu.\n \"Application\"/\n

\n\n

\n Paste the token you received from the Telegram bot into the token field.\n \"Settings\"/\n

\n\n

\n Save the token.\n \"Settings\"/\n

\n\n

\n Close the settings window and try connecting.\n \"Settings\"/\n

\n
\n
\n
\n
\n
\n

\n Download Linux client\n Скачать Linux клиент\n

\n
\n Linux клиент\n Linux client\n
\n Ubuntu (x86_64)\n Ubuntu (ARM64)\n
\n
\n
\n
\n

\n Commandline tools\n Инструменты командной строки\n

\n
\n Linux утилиты\n Linux utils\n
\n FPTN Server (Ubuntu x86_64)\n FPTN Server (Ubuntu ARM64)\n CmdClient (Ubuntu x86_64)\n CmdClient (Ubuntu ARM64)\n
\n
\n
\n
\n
\n

Установка и настройка

\n\n
\n\n

\n Скачайте .deb пакет FPTN-клиента и установите его вместе со всеми зависимостями, выполнив следующую команду (не забудьте заменить путь до пакета):\n

\n\n \n sudo apt install -f ~/Downloads/path-to-deb\n \n
\n
\n\n

\n Перейдите в Telegram-бот и сгенерируйте токен командой /token, затем скопируйте его.\n \"Settings\"/\n

\n\n

\n Запустите FPTN-клиент.\n \"Application\"/\n
\n

\n\n

\n Нажмите на иконку FPTN-клиента в системном трее, чтобы открыть контекстное меню.\n \"Application\"/\n
\n

\n\n

\n Откройте настройки FPTN-клиента и нажмите кнопку \"Добавить токен\".\n \"Settings\"/\n
\n

\n\n

\n Вставьте сюда токен из Telegram-бота и сохраните\n \"Settings\"/\n
\n

\n\n

\n Закройте окно настроек\n \"Settings\"/\n
\n

\n\n

\n В системном трее кликните по иконке приложения и выберите \"Умное подключение\". Эта функция автоматически подберет наиболее оптимальный сервер.\n \"Settings\"/\n
\n

\n\n

\n Готово!\n \"Settings\"/\n

\n
\n\n\n
\n

Installation and Setup

\n
\n\n

\n Download the .deb package for the FPTN client and install it along with all dependencies by running the following command (make sure to replace the package path):\n

\n\n \n sudo apt install -f ~/Downloads/path-to-deb\n \n
\n
\n\n

\n Go to the Telegram bot and generate a token by sending the /token command, then copy it.\n \"Settings\"/\n

\n\n

\n Launch the FPTN client.\n \"Application\"/\n
\n

\n\n

\n Click on the FPTN client icon in the system tray to open the context menu.\n \"Application\"/\n
\n

\n\n

\n Open the FPTN client settings and click the \"Add token\" button.\n \"Settings\"/\n
\n

\n\n

\n Paste the token from the Telegram bot here and save it.\n \"Settings\"/\n
\n

\n\n

\n Close the settings window.\n \"Settings\"/\n
\n

\n\n

\n In the system tray, click on the application icon and select \"Smart Connection\". This feature will automatically select the most optimal server.\n \"Settings\"/\n
\n

\n\n

\n Done!\n \"Settings\"/\n

\n
\n\n\n
\n
\n

\n Download the client for Windows (supports Windows 10 and Windows 11, x86_64 architecture)\n Скачать клиент для Windows (поддерживаются Windows 10 и Windows 11, архитектура x86_64)\n

\n
\n Скачать\n Download\n
\n\n
\n

Установка и настройка

\n
\n\n

\n Перейдите в Telegram-бот и сгенерируйте токен командой /token, затем скопируйте его.\n \"Settings\"/\n

\n\n

\n Скачайте и запустите установщик. При запуске установщика, Windows покажет окно с предупреждением, нажмите \"подробнее\".\n\n \"Application\"/\n\n И нажмите на кнопку \"Запустить в любом случае\".\n\n \"Application\"/\n\n После чего подтвердите запуск установщика.\n\n \"Application\"/\n\n После завершения установки нажмите кнопку завершить и приложение запустится автоматически.\n\n \"Application\"/\n\n После запуска клиента в системном трее появится иконка приложения. Кликните по иконке и откройте настройки.\n\n \"Application\"/\n
\n Нажмите кнопку \"Добавить токен\".\n
\n \"Application\"/\n
\n Вставьте сюда токен из Telegram-бота и сохраните\n

\n \"Application\"/\n
\n После открытия появится список доступных серверов, далее нужно просто закрыть окно настроек.\n

\n \"Application\"/\n
\n В системном трее кликните по иконке приложения и выберите \"Умное подключение\". \"Умное подключение\" подберет наиболее оптимальный сервер.\n

\n \"Application\"/\n
\n Готово!\n

\n \"Application\"/\n

\n\n
\n\n
\n

Installation and Setup

\n
\n\n

\n Go to the Telegram bot and generate a token by sending the /token command, then copy it.\n \"Settings\"/\n

\n\n

\n \"Application\"/\n\n Then click \"Run anyway\".\n\n \"Application\"/\n\n Confirm the installer launch.\n\n \"Application\"/\n\n After the installation is complete, click the finish button, and the application will launch automatically.\n\n \"Application\"/\n\n After the client launches, the application icon will appear in the system tray. Click on the icon and open the settings.\n\n \"Application\"/\n
\n Click the \"Add Token\" button.\n
\n \"Application\"/\n
\n Paste the token from the Telegram bot and save it.\n

\n \"Application\"/\n
\n After saving, a list of available servers will appear. Simply close the settings window.\n

\n \"Application\"/\n
\n In the system tray, click on the application icon and select \"Smart Connection\". This will choose the most optimal server for you.\n

\n \"Application\"/\n
\n Done!\n

\n \"Application\"/\n

\n\n
\n\n\n
\n\n
\n

\n А еще, можно легко превратить RaspberryPi/OrangePi в WiFi-точку доступа и установить на неё FPTN-клиент.\n В этом случае все устройства, подключённые к WiFi, получат доступ к интернету, обходя любые ограничения.\n Информация тут\n\n \"Settings\"/\n

\n

Любую помощь можно получить в \n нашем Telegram чате!

\n\n
\n
\n

\n You can also easily turn a Raspberry Pi or Orange Pi into a WiFi access point and install the FPTN client on it.\n In this case, all devices connected to the WiFi will have unrestricted internet access, bypassing any limitations.\n More information here\n\n \"Settings\"/\n

\n

For any assistance, feel free to join \n our Telegram chat!

\n
\n
\n
\n
\n
\n
\n
\n
\n
\n FPTN Project 2024\n
\n
\n
\n
\n\n\n\n\n" }, { "path": "pyproject.toml", "content": "[tool.black]\nline-length = 120\nextend-exclude = '''\ncpplint\\.py\n'''" }, { "path": "renovate.json", "content": "{\n \"extends\": [\n \"config:recommended\",\n \":dependencyDashboard\"\n ],\n \"enabledManagers\": [\n \"conan\"\n ],\n \"conan\": {\n \"enabled\": true,\n \"managerFilePatterns\": [\n \"/conanfile.txt/\",\n \"/conanfile.py/\"\n ]\n }\n}\n" }, { "path": "src/common/client_id.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n\nnamespace fptn {\nusing ClientID = std::uint64_t;\n\n#define MAX_CLIENT_ID (UINT64_MAX)\n} // namespace fptn\n" }, { "path": "src/common/data/channel.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n\n#include \"common/network/ip_packet.h\"\n\nnamespace fptn::common::data {\nclass Channel {\n public:\n // Increase default capacity for high throughput\n explicit Channel(std::size_t max_capacity = 8192) {\n buffer_.set_capacity(max_capacity);\n }\n void Push(network::IPPacketPtr pkt) noexcept {\n {\n const std::unique_lock lock(mutex_); // mutex\n if (buffer_.size() < buffer_.capacity()) {\n buffer_.push_back(std::move(pkt));\n }\n // If buffer full, drop packet (better than unbounded growth or blocking)\n }\n condvar_.notify_one();\n }\n\n network::IPPacketPtr WaitForPacket(\n const std::chrono::milliseconds& duration) noexcept {\n std::unique_lock lock(mutex_); // mutex\n\n // exists\n if (!buffer_.empty()) {\n auto pkt = std::move(buffer_.front());\n buffer_.pop_front();\n return pkt;\n }\n // wait for data or timeout\n if (condvar_.wait_for(\n lock, duration, [this] { return !buffer_.empty(); })) {\n auto pkt = std::move(buffer_.front());\n buffer_.pop_front();\n return pkt;\n }\n return nullptr;\n }\n\n protected:\n mutable std::mutex mutex_;\n std::condition_variable condvar_;\n boost::circular_buffer_space_optimized buffer_;\n};\n\nusing ChannelPtr = std::unique_ptr;\n} // namespace fptn::common::data\n" }, { "path": "src/common/data/channel_async.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \"common/network/ip_packet.h\"\n\nnamespace fptn::common::data {\nnamespace this_coro = boost::asio::this_coro;\nusing boost::asio::use_awaitable;\n\nclass ChannelAsync {\n public:\n explicit ChannelAsync(\n boost::asio::io_context& ioc, const std::size_t max_capacity = 8192)\n : ioc_(ioc), notify_timer_(ioc) {\n buffer_.set_capacity(max_capacity);\n notify_timer_.expires_at(std::chrono::steady_clock::time_point::max());\n }\n\n void Push(network::IPPacketPtr pkt) {\n {\n const std::unique_lock lock(mutex_);\n if (buffer_.size() < buffer_.capacity()) {\n buffer_.push_back(std::move(pkt));\n }\n }\n try {\n condvar_.notify_one();\n notify_timer_.cancel(); // Trigger async waiter if any\n } catch (...) {\n SPDLOG_WARN(\"ChannelAsync::Push unexpected exception: \");\n }\n }\n\n network::IPPacketPtr WaitForPacket(\n const std::chrono::milliseconds& duration) {\n std::unique_lock lock(mutex_); // mutex\n\n // exists\n if (!buffer_.empty()) {\n auto pkt = std::move(buffer_.front());\n buffer_.pop_front();\n return pkt;\n }\n // wait for data or timeout\n if (condvar_.wait_for(\n lock, duration, [this] { return !buffer_.empty(); })) {\n auto pkt = std::move(buffer_.front());\n buffer_.pop_front();\n return pkt;\n }\n return nullptr;\n }\n\n boost::asio::awaitable>\n WaitForPacketAsync(std::chrono::milliseconds timeout) {\n {\n const std::lock_guard lock(mutex_); // mutex\n if (!buffer_.empty()) {\n auto pkt = std::move(buffer_.front());\n buffer_.pop_front();\n co_return pkt;\n }\n }\n\n boost::asio::steady_timer timeout_timer(ioc_);\n timeout_timer.expires_after(timeout);\n\n boost::asio::steady_timer local_notify_timer(ioc_);\n local_notify_timer.expires_at(std::chrono::steady_clock::time_point::max());\n {\n std::unique_lock lock(mutex_); // mutex\n\n if (!buffer_.empty()) {\n auto pkt = std::move(buffer_.front());\n buffer_.pop_front();\n co_return pkt;\n }\n lock.unlock();\n\n co_await boost::asio::experimental::make_parallel_group(\n timeout_timer.async_wait(boost::asio::deferred),\n local_notify_timer.async_wait(boost::asio::deferred))\n .async_wait(\n boost::asio::experimental::wait_for_one(), boost::asio::deferred);\n }\n\n {\n const std::lock_guard lock(mutex_); // mutex\n if (!buffer_.empty()) {\n auto pkt = std::move(buffer_.front());\n buffer_.pop_front();\n co_return pkt;\n }\n }\n co_return std::nullopt;\n }\n\n protected:\n boost::asio::io_context& ioc_;\n mutable boost::asio::steady_timer notify_timer_;\n\n mutable std::mutex mutex_;\n std::condition_variable condvar_;\n\n boost::circular_buffer_space_optimized buffer_;\n};\n\nusing ChannelAsyncPtr = std::unique_ptr;\n} // namespace fptn::common::data\n" }, { "path": "src/common/jwt_token/token_manager.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\nnamespace fptn::common::jwt_token {\nclass TokenManager {\n public:\n TokenManager(\n const std::string& server_crt_path, const std::string& server_key_path)\n : server_crt_path_(server_crt_path),\n server_key_path_(server_key_path),\n server_crt_(ReadFromFile(server_crt_path_)),\n server_key_(ReadFromFile(server_key_path_)) {}\n\n [[nodiscard]] std::pair Generate(\n const std::string& username, int bandwidth_bit) const noexcept {\n const auto now = std::chrono::system_clock::now();\n // CHECK JWT\n const auto access_token =\n jwt::create()\n .set_issuer(\"auth0\")\n .set_type(\"JWT\")\n .set_id(\"fptn\")\n .set_issued_at(now)\n .set_expires_at(now + std::chrono::seconds{36000})\n .set_payload_claim(\"username\", username)\n .set_payload_claim(\"bandwidth_bit\", bandwidth_bit)\n .sign(jwt::algorithm::rs256(\"\", server_key_, \"\", \"\"));\n return std::make_pair(access_token, \"\");\n }\n\n bool Validate(const std::string& token,\n std::string& username,\n std::size_t& bandwidth_bit) const noexcept {\n // CHECK IT\n try {\n auto decoded = jwt::decode(token);\n username = decoded.get_payload_claim(\"username\").as_string();\n bandwidth_bit = decoded.get_payload_claim(\"bandwidth_bit\").as_integer();\n\n auto verifier =\n jwt::verify(\n jwt::default_clock())\n .allow_algorithm(jwt::algorithm::rs256(\"\", server_key_, \"\", \"\"))\n .with_issuer(\"auth0\");\n return true;\n } catch (const jwt::error::invalid_json_exception& e) {\n SPDLOG_ERROR(\"Token parsing error: {}\", e.what());\n } catch (const jwt::error::token_verification_exception& e) {\n SPDLOG_ERROR(\"Unauthorized: Invalid token: {}\", e.what());\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Handle other standard exceptions: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"Undefined error\");\n }\n return false;\n }\n\n const std::string& ServerCrtPath() const noexcept { return server_crt_path_; }\n\n const std::string& ServerKeyPath() const noexcept { return server_key_path_; }\n\n private:\n std::string ReadFromFile(const std::string& path) noexcept {\n std::ifstream is(path, std::ios::binary);\n if (!is) {\n SPDLOG_ERROR(\"Failed to open file: {}\", path);\n return {};\n }\n std::string contents(\n (std::istreambuf_iterator(is)), std::istreambuf_iterator());\n return contents;\n }\n\n private:\n const std::string server_crt_path_;\n const std::string server_key_path_;\n\n const std::string server_crt_;\n const std::string server_key_;\n};\n\nusing TokenManagerSPtr = std::shared_ptr;\n} // namespace fptn::common::jwt_token\n" }, { "path": "src/common/logger/logger.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#ifdef __ANDROID__\n#include // NOLINT(build/include_order)\n#elif __APPLE__\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#elif __linux__\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#elif _WIN32\n#include \n#endif\n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\nnamespace fptn::logger {\ninline bool init(const std::string& app_name) {\n // Set locale\n#ifdef _WIN32\n SetConsoleOutputCP(CP_UTF8);\n SetConsoleCP(CP_UTF8);\n std::ios::sync_with_stdio(false);\n std::wcout.imbue(std::locale(\".UTF-8\"));\n#endif\n std::locale::global(std::locale::classic());\n setlocale(LC_ALL, \"en_US.UTF-8\");\n try {\n#ifdef __ANDROID__\n auto logger = spdlog::android_logger_mt(\"android\", app_name);\n#elif TARGET_OS_IPHONE || TARGET_IPHONE_SIMULATOR\n // iOS specific logging - use console only since filesystem access is\n // restricted\n auto console_sink = std::make_shared();\n auto logger = std::make_shared(app_name, console_sink);\n logger->flush_on(spdlog::level::debug);\n spdlog::flush_every(std::chrono::seconds(3));\n#else\n\n#ifdef __linux__\n const std::filesystem::path log_dir = \"/var/log/fptn/\";\n#elif defined(__APPLE__) && TARGET_OS_MAC\n const std::filesystem::path log_dir = []() {\n if (const char* home = getenv(\"HOME\")) {\n return std::filesystem::path(home) / \"Library/Logs/fptn\";\n }\n struct passwd pwd = {};\n struct passwd* result = nullptr;\n char buffer[1024] = {};\n if (getpwuid_r(getuid(), &pwd, buffer, sizeof(buffer), &result) != 0 ||\n !result) {\n throw std::runtime_error(\"Failed to get user home directory\");\n }\n return std::filesystem::path(pwd.pw_dir) / \"Library/Logs/fptn\";\n }();\n#elif _WIN32\n const std::filesystem::path log_dir = \"./logs/\";\n#endif\n const std::filesystem::path log_file = log_dir / (app_name + \".log\");\n if (!std::filesystem::exists(log_dir)) {\n try {\n std::filesystem::create_directories(log_dir);\n } catch (const std::filesystem::filesystem_error& e) {\n std::cerr << \"Failed to create log directory: \" << e.what() << \"\\n\";\n return false;\n }\n }\n auto console_sink = std::make_shared();\n auto file_sink = std::make_shared(\n log_file.string(), 12 * 1024 * 1024, 3, true);\n auto logger = std::make_shared(\n app_name, spdlog::sinks_init_list{console_sink, file_sink});\n logger->flush_on(spdlog::level::debug);\n spdlog::flush_every(std::chrono::seconds(3));\n#endif\n\n spdlog::set_default_logger(logger);\n spdlog::set_level(spdlog::level::info);\n spdlog::set_pattern(\"[%Y-%m-%d %H:%M:%S] [%^%l%$] [%s:%#] %v\");\n\n#if TARGET_OS_IPHONE || TARGET_IPHONE_SIMULATOR\n SPDLOG_INFO(\"Logger initialized for iOS - console output only\");\n#elif __ANDROID__\n SPDLOG_INFO(\"Logger inited\");\n#else\n SPDLOG_INFO(\"Logging to file: {}\", log_file.string());\n SPDLOG_INFO(\"FPTN version: {}\", FPTN_VERSION);\n#endif\n return true;\n } catch (const spdlog::spdlog_ex& ex) {\n#ifdef __ANDROID__\n __android_log_print(ANDROID_LOG_ERROR, \"FPTN\",\n \"Logger initialization failed: %s\", ex.what());\n#else\n std::cerr << \"Logger initialization failed: \" << ex.what() << \"\\n\";\n#endif\n } catch (...) {\n std::cerr << \"Unhandled exception caught in logger\\n\";\n }\n return false;\n}\n} // namespace fptn::logger\n" }, { "path": "src/common/network/ip_address.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#ifdef FPTN_IP_ADDRESS_WITHOUT_PCAP\n#include \n#else\n#include \n#endif\n\nnamespace fptn::common::network {\n\n#ifdef FPTN_IP_ADDRESS_WITHOUT_PCAP\n\ntemplate \nclass IPAddress {\n public:\n // Default constructor\n IPAddress() = default;\n\n explicit IPAddress(const std::string& ip) : ip_(ip) {\n if (!ip.empty()) {\n try {\n ip_impl_ = boost::asio::ip::make_address(ip);\n } catch (const boost::system::system_error&) {\n // Invalid address, leave ip_impl_ as default constructed\n ip_impl_ = T();\n }\n }\n }\n\n T Get() const noexcept { return ip_impl_; }\n\n bool IsEmpty() const { return ip_.empty() || ip_impl_ == T(); }\n\n bool IsValid() const { return !ip_.empty() && ip_impl_ != T(); }\n\n const std::string& ToString() const { return ip_; }\n\n // Add copy and move constructors/assignment for base class\n IPAddress(const IPAddress& other)\n : ip_(other.ip_), ip_impl_(other.ip_impl_) {}\n\n IPAddress(IPAddress&& other) noexcept\n : ip_(std::move(other.ip_)), ip_impl_(std::move(other.ip_impl_)) {}\n\n IPAddress& operator=(const IPAddress& other) {\n if (this != &other) {\n ip_ = other.ip_;\n ip_impl_ = other.ip_impl_;\n }\n return *this;\n }\n\n IPAddress& operator=(IPAddress&& other) noexcept {\n if (this != &other) {\n ip_ = std::move(other.ip_);\n ip_impl_ = std::move(other.ip_impl_);\n }\n return *this;\n }\n\n bool operator!=(const IPAddress& other) const noexcept {\n return ip_ != other.ip_ || ip_impl_ != other.ip_impl_;\n }\n\n bool operator==(const IPAddress& other) const noexcept {\n return ip_ == other.ip_ && ip_impl_ == other.ip_impl_;\n }\n\n std::uint32_t ToInt() const {\n if (ip_impl_.is_v4()) {\n return ip_impl_.to_v4().to_uint();\n }\n return 0; // For IPv6, return 0 or handle differently\n }\n\n protected:\n std::string ip_;\n T ip_impl_;\n};\n\nclass IPv4Address : public IPAddress {\n public:\n // Default constructor\n IPv4Address() = default;\n\n // Constructor from string\n explicit IPv4Address(const std::string& ip)\n : IPAddress(ip) {\n // Additional validation for IPv4\n if (!ip_.empty() && !ip_impl_.is_v4()) {\n ip_impl_ = boost::asio::ip::address();\n }\n }\n\n // Constructor from boost::asio::ip::address object\n explicit IPv4Address(const boost::asio::ip::address& ip_addr)\n : IPAddress(ip_addr.to_string()) {\n if (!ip_addr.is_v4()) {\n ip_impl_ = boost::asio::ip::address();\n }\n }\n\n // Copy constructor\n IPv4Address(const IPv4Address& other)\n : IPAddress(other) {}\n\n // Move constructor\n IPv4Address(IPv4Address&& other) noexcept\n : IPAddress(std::move(other)) {}\n\n // Copy assignment operator\n IPv4Address& operator=(const IPv4Address& other) {\n if (this != &other) {\n IPAddress::operator=(other);\n }\n return *this;\n }\n\n // Move assignment operator\n IPv4Address& operator=(IPv4Address&& other) noexcept {\n if (this != &other) {\n IPAddress::operator=(std::move(other));\n }\n return *this;\n }\n\n static IPv4Address Create(const std::string& ip) { return IPv4Address(ip); }\n\n static IPv4Address Create(const boost::asio::ip::address& ip_addr) {\n return IPv4Address(ip_addr);\n }\n\n static IPv4Address Create(const IPv4Address& ip_addr) {\n return IPv4Address(ip_addr);\n }\n\n // Additional IPv4-specific methods\n virtual bool IsValid() const {\n return IPAddress::IsValid() && ip_impl_.is_v4();\n }\n\n virtual std::uint32_t ToInt() const {\n if (ip_impl_.is_v4()) {\n return ip_impl_.to_v4().to_uint();\n }\n return 0;\n }\n};\n\nclass IPv6Address : public IPAddress {\n public:\n // Default constructor\n IPv6Address() = default;\n\n // Constructor from string\n explicit IPv6Address(const std::string& ip)\n : IPAddress(ip) {\n // Additional validation for IPv6\n if (!ip_.empty() && !ip_impl_.is_v6()) {\n ip_impl_ = boost::asio::ip::address();\n }\n }\n\n // Constructor from boost::asio::ip::address object\n explicit IPv6Address(const boost::asio::ip::address& ip_addr)\n : IPAddress(ip_addr.to_string()) {\n if (!ip_addr.is_v6()) {\n ip_impl_ = boost::asio::ip::address();\n }\n }\n\n // Copy constructor\n IPv6Address(const IPv6Address& other)\n : IPAddress(other) {}\n\n // Move constructor\n IPv6Address(IPv6Address&& other) noexcept\n : IPAddress(std::move(other)) {}\n\n // Copy assignment operator\n IPv6Address& operator=(const IPv6Address& other) {\n if (this != &other) {\n IPAddress::operator=(other);\n }\n return *this;\n }\n\n // Move assignment operator\n IPv6Address& operator=(IPv6Address&& other) noexcept {\n if (this != &other) {\n IPAddress::operator=(std::move(other));\n }\n return *this;\n }\n\n static IPv6Address Create(const std::string& ip) { return IPv6Address(ip); }\n\n static IPv6Address Create(const boost::asio::ip::address& ip_addr) {\n return IPv6Address(ip_addr);\n }\n\n static IPv6Address Create(const IPv6Address& ip_addr) {\n return IPv6Address(ip_addr);\n }\n\n // Additional IPv6-specific methods\n virtual bool IsValid() const {\n return IPAddress::IsValid() && ip_impl_.is_v6();\n }\n};\n\n#else\n\ntemplate \nclass IPAddress {\n public:\n // Default constructor\n IPAddress() = default;\n\n explicit IPAddress(const std::string& ip) : ip_(ip) {\n try {\n ip_impl_ = T(ip);\n } catch (...) {\n ip_impl_ = T();\n }\n }\n\n T Get() const noexcept { return ip_impl_; }\n\n bool IsEmpty() const { return ip_.empty() || ip_impl_ == T(); }\n\n const std::string& ToString() const { return ip_; }\n\n // Add copy and move constructors/assignment for base class\n IPAddress(const IPAddress& other)\n : ip_(other.ip_), ip_impl_(other.ip_impl_) {}\n IPAddress(IPAddress&& other) noexcept\n : ip_(std::move(other.ip_)), ip_impl_(std::move(other.ip_impl_)) {}\n\n IPAddress& operator=(const IPAddress& other) {\n if (this != &other) {\n ip_ = other.ip_;\n ip_impl_ = other.ip_impl_;\n }\n return *this;\n }\n\n IPAddress& operator=(IPAddress&& other) noexcept {\n if (this != &other) {\n ip_ = std::move(other.ip_);\n ip_impl_ = std::move(other.ip_impl_);\n }\n return *this;\n }\n\n bool operator!=(const IPAddress& other) const noexcept {\n return ip_ != other.ip_ || ip_impl_ != other.ip_impl_;\n }\n\n bool operator==(const IPAddress& other) const noexcept {\n return ip_ == other.ip_ && ip_impl_ == other.ip_impl_;\n }\n\n std::uint32_t ToInt() const { return ip_impl_.toInt(); }\n\n private:\n std::string ip_;\n T ip_impl_;\n};\n\nclass IPv4Address : public IPAddress {\n public:\n // Default constructor - explicitly calls base class default constructor\n IPv4Address() = default;\n\n // Constructor from string - explicitly calls base class constructor\n explicit IPv4Address(std::string ip)\n : IPAddress(std::move(ip)) {}\n\n // Constructor from pcpp::IPv4Address object - explicitly calls base class\n // constructor\n explicit IPv4Address(const pcpp::IPv4Address& ip_addr)\n : IPAddress(ip_addr.toString()) {}\n\n // Copy constructor - explicitly calls base class copy constructor\n IPv4Address(const IPv4Address& other) : IPAddress(other) {}\n\n // Move constructor - explicitly calls base class move constructor\n IPv4Address(IPv4Address&& other) noexcept\n : IPAddress(std::move(other)) {}\n\n // Copy assignment operator\n IPv4Address& operator=(const IPv4Address& other) {\n if (this != &other) {\n IPAddress::operator=(other);\n }\n return *this;\n }\n\n // Move assignment operator\n IPv4Address& operator=(IPv4Address&& other) noexcept {\n if (this != &other) {\n IPAddress::operator=(std::move(other));\n }\n return *this;\n }\n\n static IPv4Address Create(std::string ip) {\n return IPv4Address(std::move(ip));\n }\n\n static IPv4Address Create(const pcpp::IPv4Address& ip_addr) {\n return IPv4Address(ip_addr);\n }\n\n static IPv4Address Create(const IPv4Address& ip_addr) {\n return IPv4Address(ip_addr);\n }\n};\n\nclass IPv6Address : public IPAddress {\n public:\n // Default constructor - explicitly calls base class default constructor\n IPv6Address() = default;\n\n // Constructor from string - explicitly calls base class constructor\n explicit IPv6Address(std::string ip)\n : IPAddress(std::move(ip)) {}\n\n // Constructor from pcpp::IPv6Address object - explicitly calls base class\n // constructor\n explicit IPv6Address(const pcpp::IPv6Address& ip_addr)\n : IPAddress(ip_addr.toString()) {}\n\n // Copy constructor - explicitly calls base class copy constructor\n IPv6Address(const IPv6Address& other) : IPAddress(other) {}\n\n // Move constructor - explicitly calls base class move constructor\n IPv6Address(IPv6Address&& other) noexcept\n : IPAddress(std::move(other)) {}\n\n // Copy assignment operator\n IPv6Address& operator=(const IPv6Address& other) {\n if (this != &other) {\n IPAddress::operator=(other);\n }\n return *this;\n }\n\n // Move assignment operator\n IPv6Address& operator=(IPv6Address&& other) noexcept {\n if (this != &other) {\n IPAddress::operator=(std::move(other));\n }\n return *this;\n }\n\n static IPv6Address Create(std::string ip) {\n return IPv6Address(std::move(ip));\n }\n\n static IPv6Address Create(const pcpp::IPv6Address& ip_addr) {\n return IPv6Address(ip_addr);\n }\n\n static IPv6Address Create(const IPv6Address& ip_addr) {\n return IPv6Address(ip_addr);\n }\n};\n\n#endif\n\n} // namespace fptn::common::network\n" }, { "path": "src/common/network/ip_packet.h", "content": "/*=============================================================================\r\nCopyright (c) 2024-2026 Stas Skokov\r\n\r\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\r\n=============================================================================*/\r\n\r\n#pragma once\r\n\r\n#include \r\n#include \r\n#include \r\n#include \r\n#include \r\n#include \r\n#include \r\n\r\n#include \"common/utils/utils.h\"\r\n\r\n#if _WIN32\r\n#pragma warning(disable : 4996)\r\n#endif\r\n\r\n#if _WIN32\r\n#include // NOLINT(build/include_order)\r\n\r\n#include // NOLINT(build/include_order)\r\n#else\r\n#include \r\n#endif\r\n\r\n#include \r\n\r\n#ifdef FPTN_IP_ADDRESS_WITHOUT_PCAP\r\n#include \"common/network/ip_address.h\"\r\n#else\r\n\r\n#include \r\n#include \r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n\r\n#ifdef TCPOPT_CC\r\n#undef TCPOPT_CC\r\n#endif // TCPOPT_CC\r\n#ifdef TCPOPT_CCNEW\r\n#undef TCPOPT_CCNEW\r\n#endif // TCPOPT_CCNEW\r\n#ifdef TCPOPT_CCECHO\r\n#undef TCPOPT_CCECHO\r\n#endif // TCPOPT_CCECHO\r\n\r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n\r\n#if _WIN32\r\n#pragma warning(default : 4996)\r\n#endif\r\n\r\n#endif\r\n\r\n#ifdef FPTN_WITH_LIBIDN2\r\n#include \r\n#endif\r\n\r\n#include // NOLINT(build/include_order)\r\n\r\n#include \"common/client_id.h\"\r\n#include \"common/network/ip_address.h\"\r\n\r\nnamespace fptn::common::network {\r\n\r\nusing IPPacketData = std::vector;\r\n\r\n#define FPTN_PACKET_UNDEFINED_CLIENT_ID MAX_CLIENT_ID\r\n\r\n#ifndef FPTN_IP_ADDRESS_WITHOUT_PCAP\r\n\r\ninline bool CheckIPv4(const IPPacketData& buffer) {\r\n return (static_cast(buffer[0]) >> 4) == 4;\r\n}\r\n\r\ninline bool CheckIPv6(const IPPacketData& buffer) {\r\n return (static_cast(buffer[0]) >> 4) == 6;\r\n}\r\n\r\n#ifdef FPTN_WITH_LIBIDN2\r\n\r\ninline bool IsPunycode(const std::string& str) {\r\n return str.find(\"xn--\") != std::string::npos;\r\n}\r\n\r\ninline std::string ConvertDomainToUnicode(const std::string& domain) {\r\n if (domain.empty()) {\r\n return domain;\r\n }\r\n\r\n char* result = nullptr;\r\n const int ret = idn2_to_unicode_8z8z(domain.c_str(), &result, 0);\r\n\r\n if (ret == IDN2_OK && result != nullptr) {\r\n std::string unicode_result = result;\r\n free(result);\r\n return unicode_result;\r\n }\r\n if (result != nullptr) {\r\n free(result);\r\n }\r\n return domain;\r\n}\r\n#endif\r\n\r\nclass IPPacket {\r\n public:\r\n static std::unique_ptr Parse(IPPacketData buffer,\r\n fptn::ClientID client_id = FPTN_PACKET_UNDEFINED_CLIENT_ID) {\r\n // Minimum IPv4 header size\r\n if (buffer.empty() || buffer.size() < 20) {\r\n return nullptr;\r\n }\r\n if (CheckIPv4(buffer)) {\r\n auto packet = std::make_unique(\r\n std::move(buffer), client_id, pcpp::LINKTYPE_IPV4);\r\n if (nullptr != packet->IPv4Layer()) {\r\n return packet;\r\n }\r\n } else if (CheckIPv6(buffer)) {\r\n auto packet = std::make_unique(\r\n std::move(buffer), client_id, pcpp::LINKTYPE_IPV6);\r\n if (nullptr != packet->IPv6Layer()) {\r\n return packet;\r\n }\r\n }\r\n return nullptr;\r\n }\r\n\r\n public:\r\n IPPacket(IPPacketData data,\r\n fptn::ClientID client_id,\r\n const pcpp::LinkLayerType& ip_type)\r\n : packet_data_(std::move(data)), client_id_(client_id) {\r\n try {\r\n raw_packet_ = pcpp::RawPacket(\r\n reinterpret_cast(packet_data_.data()),\r\n static_cast(packet_data_.size()), timeval{0, 0}, false, ip_type);\r\n\r\n parsed_packet_ = pcpp::Packet(&raw_packet_, false);\r\n if (pcpp::LINKTYPE_IPV4 == ip_type) {\r\n ipv4_layer_ = parsed_packet_.getLayerOfType();\r\n } else if (pcpp::LINKTYPE_IPV6 == ip_type) {\r\n ipv6_layer_ = parsed_packet_.getLayerOfType();\r\n }\r\n } catch (const std::exception& e) {\r\n SPDLOG_WARN(\r\n \"IP Packet parsing exception (client {}): {}\", client_id_, e.what());\r\n } catch (...) {\r\n SPDLOG_WARN(\"Unknown error while parsing IP Packet\");\r\n }\r\n }\r\n\r\n // NOLINTNEXTLINE(readability-convert-member-functions-to-static)\r\n void ComputeCalculateFields() noexcept {\r\n auto* tcp_layer = parsed_packet_.getLayerOfType();\r\n if (tcp_layer) {\r\n tcp_layer->computeCalculateFields();\r\n } else {\r\n auto* udp_layer = parsed_packet_.getLayerOfType();\r\n if (udp_layer) {\r\n udp_layer->computeCalculateFields();\r\n }\r\n }\r\n if (ipv4_layer_) {\r\n ipv4_layer_->computeCalculateFields();\r\n } else if (ipv6_layer_) {\r\n auto* icmp_layer = parsed_packet_.getLayerOfType();\r\n if (icmp_layer) {\r\n icmp_layer->computeCalculateFields();\r\n }\r\n ipv6_layer_->computeCalculateFields();\r\n }\r\n }\r\n\r\n void SetClientId(fptn::ClientID client_id) noexcept {\r\n client_id_ = client_id;\r\n }\r\n\r\n void SetDstIPv4Address(const pcpp::IPv4Address& dst) noexcept {\r\n if (ipv4_layer_) {\r\n ipv4_layer_->getIPv4Header()->timeToLive -= 1;\r\n ipv4_layer_->setDstIPv4Address(dst);\r\n }\r\n }\r\n\r\n void SetSrcIPv4Address(const pcpp::IPv4Address& src) noexcept {\r\n if (ipv4_layer_) {\r\n ipv4_layer_->getIPv4Header()->timeToLive -= 1;\r\n ipv4_layer_->setSrcIPv4Address(src);\r\n }\r\n }\r\n\r\n void SetDstIPv6Address(const pcpp::IPv6Address& dst) noexcept {\r\n if (ipv6_layer_) {\r\n ipv6_layer_->setDstIPv6Address(dst);\r\n }\r\n }\r\n\r\n void SetSrcIPv6Address(const pcpp::IPv6Address& src) noexcept {\r\n if (ipv6_layer_) {\r\n ipv6_layer_->setSrcIPv6Address(src);\r\n }\r\n }\r\n\r\n bool IsICMPv4() const {\r\n const auto* icmp_v4 = parsed_packet_.getLayerOfType();\r\n return icmp_v4 != nullptr;\r\n }\r\n\r\n bool IsICMPv6() const {\r\n const auto* icmp_v6 = parsed_packet_.getLayerOfType();\r\n return icmp_v6 != nullptr;\r\n }\r\n\r\n bool IsDns() const {\r\n const auto* udp = parsed_packet_.getLayerOfType();\r\n if (udp && (udp->getDstPort() == 53 || udp->getSrcPort() == 53)) {\r\n return GetDnsLayer() != nullptr;\r\n }\r\n\r\n const auto* tcp = parsed_packet_.getLayerOfType();\r\n if (tcp && (tcp->getDstPort() == 53 || tcp->getSrcPort() == 53)) {\r\n return GetDnsLayer() != nullptr;\r\n }\r\n return false;\r\n }\r\n\r\n std::optional GetDnsDomain() const {\r\n const auto* dns_layer = GetDnsLayer();\r\n if (dns_layer) {\r\n const auto* query = dns_layer->getFirstQuery();\r\n if (query) {\r\n std::string domain_name = query->getName();\r\n#ifdef FPTN_WITH_LIBIDN2\r\n if (IsPunycode(domain_name)) {\r\n return ConvertDomainToUnicode(domain_name);\r\n }\r\n#endif\r\n return domain_name;\r\n }\r\n }\r\n return std::nullopt;\r\n }\r\n\r\n std::vector GetDnsIPv4Addresses() const {\r\n const auto* dns_layer = GetDnsLayer();\r\n if (!dns_layer) {\r\n return {};\r\n }\r\n\r\n if (dns_layer->getDnsHeader()->queryOrResponse != 1) {\r\n return {};\r\n }\r\n\r\n std::vector ipv4_addresses;\r\n auto* answer = dns_layer->getFirstAnswer();\r\n\r\n while (answer != nullptr) {\r\n if (answer->getDnsType() == pcpp::DNS_TYPE_A) {\r\n try {\r\n const std::size_t data_offset = answer->getDataOffset();\r\n const std::size_t data_length = answer->getDataLength();\r\n if (data_length == 4) {\r\n const std::uint8_t* dns_raw_data = dns_layer->getData();\r\n const std::size_t dns_data_len = dns_layer->getDataLen();\r\n\r\n if (data_offset + 4 <= dns_data_len) {\r\n const uint8_t* ip_bytes = dns_raw_data + data_offset;\r\n const std::uint32_t ip_int =\r\n (static_cast(ip_bytes[0]) << 24) |\r\n (static_cast(ip_bytes[1]) << 16) |\r\n (static_cast(ip_bytes[2]) << 8) |\r\n static_cast(ip_bytes[3]);\r\n\r\n const auto addr = boost::asio::ip::make_address_v4(ip_int);\r\n ipv4_addresses.emplace_back(addr.to_string());\r\n }\r\n }\r\n } catch (const std::exception& e) {\r\n SPDLOG_WARN(\"Failed to parse IPv4 from DNS answer '{}': {}\",\r\n answer->getName(), e.what());\r\n }\r\n }\r\n answer = dns_layer->getNextAnswer(answer);\r\n }\r\n return ipv4_addresses;\r\n }\r\n\r\n std::vector GetDnsIPv6Addresses() const {\r\n const auto* dns_layer = GetDnsLayer();\r\n if (!dns_layer) {\r\n return {};\r\n }\r\n\r\n if (dns_layer->getDnsHeader()->queryOrResponse != 1) {\r\n return {};\r\n }\r\n\r\n std::vector ipv6_addresses;\r\n auto* answer = dns_layer->getFirstAnswer();\r\n\r\n while (answer != nullptr) {\r\n if (answer->getDnsType() == pcpp::DNS_TYPE_AAAA) {\r\n try {\r\n const std::size_t data_offset = answer->getDataOffset();\r\n const std::size_t data_length = answer->getDataLength();\r\n\r\n if (data_length == 16) {\r\n const std::uint8_t* dns_raw_data = dns_layer->getData();\r\n const std::size_t dns_data_len = dns_layer->getDataLen();\r\n\r\n if (data_offset + 16 <= dns_data_len) {\r\n const uint8_t* ip_bytes = dns_raw_data + data_offset;\r\n std::array bytes;\r\n std::memcpy(bytes.data(), ip_bytes, 16);\r\n\r\n const auto addr = boost::asio::ip::make_address_v6(bytes);\r\n ipv6_addresses.emplace_back(addr.to_string());\r\n }\r\n }\r\n } catch (const std::exception& e) {\r\n SPDLOG_WARN(\"Failed to parse IPv6 from DNS answer '{}': {}\",\r\n answer->getName(), e.what());\r\n }\r\n }\r\n answer = dns_layer->getNextAnswer(answer);\r\n }\r\n return ipv6_addresses;\r\n }\r\n\r\n fptn::ClientID ClientId() const noexcept { return client_id_; }\r\n\r\n pcpp::Packet& Pkt() noexcept { return parsed_packet_; }\r\n\r\n std::size_t Size() const noexcept { return packet_data_.size(); }\r\n\r\n const pcpp::RawPacket* GetRawPacket() const noexcept {\r\n return parsed_packet_.getRawPacket();\r\n }\r\n\r\n protected:\r\n pcpp::DnsLayer* GetDnsLayer() const {\r\n try {\r\n auto* udp_layer = parsed_packet_.getLayerOfType();\r\n if (udp_layer) {\r\n return parsed_packet_.getLayerOfType();\r\n }\r\n auto* tcp_layer = parsed_packet_.getLayerOfType();\r\n if (tcp_layer && tcp_layer->getLayerPayloadSize() >= 2) {\r\n return parsed_packet_.getLayerOfType();\r\n }\r\n } catch (...) {\r\n // ignore\r\n }\r\n return nullptr;\r\n }\r\n\r\n public:\r\n // TODO(stas): Remove virtual functions in the future for better performance.\r\n // TODO(stas): Anti-scan tests are currently inadequate and need improvement.\r\n virtual ~IPPacket() = default;\r\n virtual bool IsIPv4() const noexcept { return ipv4_layer_ != nullptr; }\r\n virtual bool IsIPv6() const noexcept { return ipv6_layer_ != nullptr; }\r\n virtual pcpp::IPv4Layer* IPv4Layer() noexcept { return ipv4_layer_; }\r\n virtual pcpp::IPv6Layer* IPv6Layer() noexcept { return ipv6_layer_; }\r\n\r\n protected:\r\n // for tests only\r\n IPPacket() : client_id_(FPTN_PACKET_UNDEFINED_CLIENT_ID) {}\r\n\r\n private:\r\n std::vector packet_data_;\r\n fptn::ClientID client_id_;\r\n pcpp::RawPacket raw_packet_;\r\n pcpp::Packet parsed_packet_;\r\n\r\n pcpp::IPv4Layer* ipv4_layer_ = nullptr;\r\n pcpp::IPv6Layer* ipv6_layer_ = nullptr;\r\n};\r\n\r\nusing IPPacketPtr = std::unique_ptr;\r\n\r\n#else\r\n\r\n/**\r\n * Specific lightweight container for IPv4 packets.\r\n * Wraps raw IP packet data with basic access methods.\r\n */\r\nclass LightIPv4Packet {\r\n public:\r\n static std::unique_ptr Parse(IPPacketData buffer,\r\n std::uint64_t client_id = FPTN_PACKET_UNDEFINED_CLIENT_ID) {\r\n if (buffer.empty() || buffer.size() < 20) { // Minimum IPv4 header size\r\n return nullptr;\r\n }\r\n return std::make_unique(std::move(buffer), client_id);\r\n }\r\n\r\n LightIPv4Packet(IPPacketData buffer, const fptn::ClientID client_id)\r\n : ip_packet_(std::move(buffer)) {\r\n (void)client_id;\r\n }\r\n\r\n std::size_t Size() const { return ip_packet_.size(); }\r\n\r\n // specific methods to have general interface with IPPacket\r\n const LightIPv4Packet* GetRawPacket() const { return this; }\r\n std::size_t getRawDataLen() const { return ip_packet_.size(); }\r\n const void* getRawData() const { return ip_packet_.data(); }\r\n\r\n private:\r\n const IPPacketData ip_packet_;\r\n};\r\n\r\nusing IPPacket = LightIPv4Packet;\r\nusing IPPacketPtr = std::unique_ptr;\r\n\r\n#endif\r\n\r\n} // namespace fptn::common::network\r\n" }, { "path": "src/common/network/ipv4_generator.h", "content": "/*=============================================================================\r\nCopyright (c) 2024-2025 Stas Skokov\r\n\r\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\r\n=============================================================================*/\r\n\r\n#pragma once\r\n\r\n#include \r\n#include \r\n#include \r\n\r\n#if _WIN32\r\n#pragma warning(disable : 4996)\r\n#endif\r\n\r\n#include \r\n#include \r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n#include // NOLINT(build/include_order)\r\n\r\n#include \"common/network/ip_address.h\"\r\n\r\n#if _WIN32\r\n#pragma warning(default : 4996)\r\n#endif\r\n\r\nnamespace fptn::common::network {\r\n\r\nclass IPv4AddressGenerator {\r\n public:\r\n IPv4AddressGenerator(const fptn::common::network::IPv4Address& netAddress,\r\n std::uint32_t subnet_mask)\r\n : ip_(boost::asio::ip::make_address_v4(netAddress.ToString())),\r\n net_addr_(boost::asio::ip::make_address_v4(netAddress.ToString())) {\r\n // cppcheck-suppress useInitializationList\r\n netmask_ = boost::asio::ip::address_v4(\r\n (subnet_mask == 0)\r\n ? 0\r\n : (~static_cast(0) << (32 - subnet_mask)));\r\n\r\n const uint32_t ip_num = ip_.to_uint();\r\n const uint32_t netmask_num = netmask_.to_uint();\r\n\r\n const uint32_t network_address = ip_num & netmask_num;\r\n broadcast_ =\r\n boost::asio::ip::address_v4(network_address | ~netmask_.to_uint());\r\n\r\n num_available_addresses_ = (1U << (32 - subnet_mask)) - 2;\r\n }\r\n\r\n std::uint32_t NumAvailableAddresses() const noexcept {\r\n return num_available_addresses_;\r\n }\r\n\r\n fptn::common::network::IPv4Address GetNextAddress() noexcept {\r\n const std::unique_lock lock(mutex_); // mutex\r\n\r\n const std::uint32_t new_ip = ip_.to_uint() + 1;\r\n if (new_ip < broadcast_.to_uint()) {\r\n ip_ = boost::asio::ip::address_v4(new_ip);\r\n } else {\r\n ip_ = boost::asio::ip::address_v4(net_addr_.to_uint() + 1);\r\n }\r\n return fptn::common::network::IPv4Address(ip_.to_string());\r\n }\r\n\r\n private:\r\n mutable std::mutex mutex_;\r\n boost::asio::ip::address_v4 ip_;\r\n boost::asio::ip::address_v4 net_addr_;\r\n\r\n boost::asio::ip::address_v4 netmask_;\r\n boost::asio::ip::address_v4 broadcast_;\r\n\r\n std::uint32_t num_available_addresses_;\r\n};\r\nusing IPv4AddressGeneratorSPtr = std::shared_ptr;\r\n} // namespace fptn::common::network\r\n" }, { "path": "src/common/network/ipv6_generator.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#if _WIN32\n#pragma warning(disable : 4996)\n#endif\n\n#include \n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_address.h\"\n\n#if _WIN32\n#pragma warning(default : 4996)\n#endif\n\n#include \"common/network/ipv6_utils.h\"\n\nnamespace fptn::common::network {\nclass IPv6AddressGenerator {\n public:\n IPv6AddressGenerator(const fptn::common::network::IPv6Address& net_address,\n std::uint32_t subnet_mask) {\n const auto net_address_boost =\n boost::asio::ip::make_address_v6(net_address.ToString());\n net_addr_ = ipv6::toUInt128(net_address_boost);\n max_addr_ =\n net_addr_ |\n ((boost::multiprecision::uint128_t(1) << (128 - subnet_mask)) - 1);\n current_addr_ = net_addr_;\n }\n\n fptn::common::network::IPv6Address GetNextAddress() noexcept {\n const std::unique_lock lock(mutex_); // mutex\n\n const auto new_ip = current_addr_ + 1;\n if (new_ip < max_addr_) {\n current_addr_ = new_ip;\n } else {\n current_addr_ = net_addr_ + 1;\n }\n return fptn::common::network::IPv6Address(ipv6::toString(current_addr_));\n }\n\n boost::multiprecision::uint128_t NumAvailableAddresses() const {\n return max_addr_ - net_addr_ - 1;\n }\n\n private:\n mutable std::mutex mutex_;\n\n boost::multiprecision::uint128_t net_addr_;\n boost::multiprecision::uint128_t max_addr_;\n boost::multiprecision::uint128_t current_addr_;\n};\n\nusing IPv6AddressGeneratorSPtr = std::shared_ptr;\n} // namespace fptn::common::network\n" }, { "path": "src/common/network/ipv6_utils.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n\n#include \n#include \n#include // NOLINT(build/include_order)\n\nnamespace fptn::common::network::ipv6 {\ninline boost::multiprecision::uint128_t toUInt128(\n const boost::asio::ip::address_v6& address) {\n boost::multiprecision::uint128_t result{};\n for (uint8_t b : address.to_bytes()) {\n (result <<= 8) |= b;\n }\n return result;\n}\n\ninline boost::multiprecision::uint128_t toUInt128(\n const pcpp::IPv6Address& address) {\n return toUInt128(boost::asio::ip::make_address_v6(address.toString()));\n}\n\ninline std::string toString(const boost::multiprecision::uint128_t& val) {\n const std::uint64_t high = static_cast(val >> 64); // High 64 bits\n const std::uint64_t low =\n static_cast(val & 0xFFFFFFFFFFFFFFFF);\n // Build 16-byte network-order address from the two 64-bit halves\n const boost::asio::ip::address_v6::bytes_type bytes = {{\n static_cast(high >> 56),\n static_cast(high >> 48),\n static_cast(high >> 40),\n static_cast(high >> 32),\n static_cast(high >> 24),\n static_cast(high >> 16),\n static_cast(high >> 8),\n static_cast(high),\n static_cast(low >> 56),\n static_cast(low >> 48),\n static_cast(low >> 40),\n static_cast(low >> 32),\n static_cast(low >> 24),\n static_cast(low >> 16),\n static_cast(low >> 8),\n static_cast(low),\n }};\n // Produces canonical compressed format (matches pcpp/inet_ntop)\n return boost::asio::ip::make_address_v6(bytes).to_string();\n}\n} // namespace fptn::common::network::ipv6\n" }, { "path": "src/common/network/net_interface.h", "content": "/*=============================================================================\r\nCopyright (c) 2024-2025 Stas Skokov\r\nCopyright (c) 2024-2026 Pavel Shpilev\r\n\r\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\r\n=============================================================================*/\r\n\r\n#pragma once\r\n\r\n#include \r\n#include \r\n#include \r\n#include \r\n#include \r\n#include \r\n#include \r\n#include \r\n\r\n#include // NOLINT(build/include_order)\r\n\r\n#include \"common/data/channel.h\"\r\n#include \"common/network/ip_address.h\"\r\n#include \"common/network/ip_packet.h\"\r\n\r\nnamespace fptn::common::network {\r\nclass DataRateCalculator {\r\n public:\r\n explicit DataRateCalculator(\r\n std::chrono::milliseconds interval = std::chrono::milliseconds(1000))\r\n : interval_(interval),\r\n bytes_(0),\r\n lastUpdateTime_(std::chrono::steady_clock::now()),\r\n rate_(0) {}\r\n void Update(std::size_t len) noexcept {\r\n const std::scoped_lock lock(mutex_); // mutex\r\n\r\n auto now = std::chrono::steady_clock::now();\r\n std::chrono::duration elapsed = now - lastUpdateTime_;\r\n bytes_ += len;\r\n if (elapsed >= interval_) {\r\n rate_ = static_cast(bytes_ / elapsed.count());\r\n lastUpdateTime_ = now;\r\n bytes_ = 0;\r\n }\r\n }\r\n std::size_t GetRateForSecond() const noexcept {\r\n const std::scoped_lock lock(mutex_); // mutex\r\n\r\n const auto interval_count = interval_.count();\r\n if (interval_count) {\r\n return static_cast(rate_ / (1000 / interval_.count()));\r\n }\r\n return 0;\r\n }\r\n\r\n private:\r\n mutable std::mutex mutex_;\r\n std::chrono::milliseconds interval_;\r\n std::atomic bytes_;\r\n std::chrono::steady_clock::time_point lastUpdateTime_;\r\n std::atomic rate_;\r\n};\r\n\r\nusing NewIPPacketCallback = std::function;\r\n\r\n/**\r\n * @brief Base network interface class using CRTP (Curiously Recurring Template\r\n * Pattern)\r\n *\r\n * This template provides common interface functionality while delegating\r\n * platform-specific operations to the derived implementation class.\r\n *\r\n * CRTP Benefits:\r\n * - Static polymorphism (no virtual function overhead)\r\n * - Clear separation of interface and implementation\r\n * - Compile-time enforcement of interface contracts\r\n *\r\n * Derived classes must implement:\r\n * - StartImpl() - Initialize the interface\r\n * - StopImpl() - Shutdown the interface\r\n * - SendImpl() - Packet transmission\r\n * - GetSendRateImpl() - Outbound rate monitoring\r\n * - GetReceiveRateImpl() - Inbound rate monitoring\r\n */\r\ntemplate \r\nclass BaseNetInterface {\r\n public:\r\n friend Implementation;\r\n\r\n // Network configuration\r\n struct Config {\r\n std::string name;\r\n fptn::common::network::IPv4Address ipv4_addr;\r\n int ipv4_netmask;\r\n fptn::common::network::IPv6Address ipv6_addr;\r\n int ipv6_netmask;\r\n };\r\n\r\n bool Start() { return impl()->StartImpl(); }\r\n\r\n bool Stop() { return impl()->StopImpl(); }\r\n\r\n bool Send(IPPacketPtr packet) { return impl()->SendImpl(std::move(packet)); }\r\n\r\n std::size_t GetSendRate() { return impl()->GetSendRateImpl(); }\r\n\r\n std::size_t GetReceiveRate() { return impl()->GetReceiveRateImpl(); }\r\n\r\n private:\r\n explicit BaseNetInterface(Config config)\r\n : config_(std::move(config)), recv_ip_packet_callback_(nullptr) {}\r\n\r\n Implementation* impl() { return static_cast(this); }\r\n\r\n public:\r\n [[nodiscard]] const std::string& Name() const noexcept {\r\n return config_.name;\r\n }\r\n\r\n [[nodiscard]] const fptn::common::network::IPv4Address& IPv4Addr()\r\n const noexcept {\r\n return config_.ipv4_addr;\r\n }\r\n\r\n [[nodiscard]] int IPv4Netmask() const noexcept {\r\n return config_.ipv4_netmask;\r\n }\r\n\r\n [[nodiscard]] const fptn::common::network::IPv6Address& IPv6Addr()\r\n const noexcept {\r\n return config_.ipv6_addr;\r\n }\r\n\r\n int IPv6Netmask() const noexcept { return config_.ipv6_netmask; }\r\n\r\n void SetRecvIPPacketCallback(const NewIPPacketCallback& callback) noexcept {\r\n recv_ip_packet_callback_ = callback;\r\n }\r\n\r\n [[nodiscard]] NewIPPacketCallback GetRecvIPPacketCallback() const {\r\n return recv_ip_packet_callback_;\r\n }\r\n\r\n private:\r\n Config config_;\r\n NewIPPacketCallback recv_ip_packet_callback_;\r\n};\r\n\r\n/**\r\n * @brief Generic TUN interface parameterized by a platform-specific Device.\r\n *\r\n * The Device type must satisfy the following concept (duck-typed):\r\n * bool Open(const std::string& name);\r\n * void Close();\r\n * std::string GetName() const;\r\n * bool ConfigureIPv4(const std::string& addr, int mask);\r\n * bool ConfigureIPv6(const std::string& addr, int mask);\r\n * void SetNonBlocking(bool enabled);\r\n * void SetMTU(int mtu);\r\n * void BringUp();\r\n * int Read(void* buffer, int size);\r\n * int Write(const void* data, int size);\r\n * void SetStopFlag(const std::atomic* running);\r\n *\r\n * Platform-specific devices: LinuxTunDevice, DarwinTunDevice, WinTunDevice\r\n */\r\ntemplate \r\nclass GenericTunInterface final\r\n : public BaseNetInterface> {\r\n public:\r\n using Base = BaseNetInterface>;\r\n friend Base;\r\n\r\n using Config = typename Base::Config;\r\n\r\n explicit GenericTunInterface(Config config)\r\n : Base(std::move(config)), mtu_(FPTN_MTU_SIZE), running_(false) {}\r\n\r\n ~GenericTunInterface() { StopImpl(); }\r\n\r\n protected:\r\n bool StartImpl() noexcept {\r\n const std::scoped_lock lock(mutex_);\r\n\r\n try {\r\n // cppcheck-suppress knownConditionTrueFalse\r\n if (!device_.Open(this->Name())) {\r\n SPDLOG_ERROR(\"Failed to open TUN device\");\r\n return false;\r\n }\r\n // Update name to actual device name (may differ, e.g., utun on macOS)\r\n this->config_.name = device_.GetName();\r\n\r\n /* set IPv6 */\r\n // cppcheck-suppress knownConditionTrueFalse\r\n if (!device_.ConfigureIPv6(\r\n this->IPv6Addr().ToString(), this->IPv6Netmask())) {\r\n SPDLOG_WARN(\"IPv6 configuration failed, continuing with IPv4 only\");\r\n }\r\n /* set IPv4 */\r\n // cppcheck-suppress knownConditionTrueFalse\r\n if (!device_.ConfigureIPv4(\r\n this->IPv4Addr().ToString(), this->IPv4Netmask())) {\r\n SPDLOG_ERROR(\"IPv4 configuration failed\");\r\n device_.Close();\r\n return false;\r\n }\r\n device_.SetNonBlocking(true);\r\n device_.SetMTU(mtu_);\r\n device_.BringUp();\r\n\r\n running_ = true;\r\n device_.SetStopFlag(&running_);\r\n thread_ = std::thread(&GenericTunInterface::Run, this);\r\n return thread_.joinable();\r\n } catch (const std::exception& ex) {\r\n SPDLOG_ERROR(\"Error start: {}\", ex.what());\r\n }\r\n return false;\r\n }\r\n\r\n bool StopImpl() noexcept {\r\n if (!running_) {\r\n return false;\r\n }\r\n\r\n const std::scoped_lock lock(mutex_);\r\n\r\n // cppcheck-suppress identicalConditionAfterEarlyExit\r\n if (!running_) { // Double-check after acquiring lock\r\n return false;\r\n }\r\n\r\n if (thread_.joinable()) {\r\n running_ = false;\r\n thread_.join();\r\n device_.Close();\r\n }\r\n return true;\r\n }\r\n\r\n bool SendImpl(IPPacketPtr packet) noexcept {\r\n if (!running_ || !packet || !packet->Size()) {\r\n return false;\r\n }\r\n\r\n try {\r\n const std::scoped_lock lock(mutex_);\r\n\r\n if (running_) {\r\n const auto* raw_packet = packet->GetRawPacket();\r\n if (!raw_packet) {\r\n return false;\r\n }\r\n const auto* data = raw_packet->getRawData();\r\n const auto len = raw_packet->getRawDataLen();\r\n\r\n const int bytes_written = device_.Write(data, static_cast(len));\r\n\r\n send_rate_calculator_.Update(bytes_written);\r\n\r\n return bytes_written == len;\r\n }\r\n } catch (const std::exception& ex) {\r\n SPDLOG_ERROR(\"SendImpl error: {}\", ex.what());\r\n }\r\n return false;\r\n }\r\n\r\n std::size_t GetSendRateImpl() const noexcept {\r\n return send_rate_calculator_.GetRateForSecond();\r\n }\r\n\r\n std::size_t GetReceiveRateImpl() const noexcept {\r\n return receive_rate_calculator_.GetRateForSecond();\r\n }\r\n\r\n private:\r\n void Run() {\r\n const auto callback = this->GetRecvIPPacketCallback();\r\n while (running_) {\r\n std::vector buffer(mtu_);\r\n const int size = device_.Read(buffer.data(), mtu_);\r\n if (size > 0 && running_) {\r\n buffer.resize(size);\r\n auto packet = IPPacket::Parse(buffer);\r\n if (running_ && packet != nullptr && callback) {\r\n receive_rate_calculator_.Update(packet->Size()); // calculate rate\r\n callback(std::move(packet));\r\n }\r\n } else {\r\n std::this_thread::sleep_for(std::chrono::milliseconds(1));\r\n }\r\n }\r\n }\r\n\r\n mutable std::mutex mutex_;\r\n\r\n const std::uint16_t mtu_;\r\n\r\n std::atomic running_;\r\n std::thread thread_;\r\n Device device_;\r\n DataRateCalculator send_rate_calculator_;\r\n DataRateCalculator receive_rate_calculator_;\r\n};\r\n\r\n} // namespace fptn::common::network\r\n\r\n// Platform-specific TUN device includes (outside namespace to avoid nesting)\r\n#if defined(__APPLE__)\r\n#include \"common/network/tun/darwin_tun_device.h\"\r\n#elif defined(__linux__)\r\n#include \"common/network/tun/linux_tun_device.h\"\r\n#elif defined(_WIN32)\r\n#include \"common/network/tun/win_tun_device.h\"\r\n#endif\r\n\r\nnamespace fptn::common::network {\r\n// Platform-specific TUN interface aliases\r\n#if defined(__APPLE__)\r\nusing TunInterface = GenericTunInterface;\r\n#elif defined(__linux__)\r\nusing TunInterface = GenericTunInterface;\r\n#elif defined(_WIN32)\r\nusing TunInterface = GenericTunInterface;\r\n#endif\r\n\r\nusing TunInterfacePtr = std::unique_ptr;\r\n} // namespace fptn::common::network\r\n" }, { "path": "src/common/network/resolv.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n\nnamespace fptn::common::network {\n\ninline bool IsIpAddress(const std::string& host) {\n boost::system::error_code ec;\n boost::asio::ip::make_address(host, ec);\n return !ec;\n}\n\nstruct ResolveResult {\n boost::system::error_code error;\n boost::asio::ip::tcp::resolver::results_type results;\n\n bool success() const { return !error; }\n explicit operator bool() const { return success(); }\n};\n\ninline ResolveResult ResolveWithTimeout(boost::asio::io_context& ioc,\n const std::string& host,\n const std::string& port,\n int timeout_seconds) {\n boost::asio::ip::tcp::resolver resolver(ioc);\n ResolveResult result;\n\n if (IsIpAddress(host)) {\n boost::system::error_code ec;\n auto address = boost::asio::ip::make_address(host, ec);\n if (ec) {\n result.error = ec;\n SPDLOG_WARN(\n \"DNS resolution - Invalid IP address {}: {}\", host, ec.message());\n return result;\n }\n\n std::uint16_t port_num = 0;\n try {\n port_num = static_cast(std::stoi(port));\n } catch (const std::exception& e) {\n result.error =\n boost::system::error_code(boost::system::errc::invalid_argument,\n boost::system::system_category());\n SPDLOG_WARN(\n \"DNS resolution - Invalid port number {}: {}\", port, e.what());\n return result;\n }\n\n boost::asio::ip::tcp::endpoint endpoint(address, port_num);\n result.results = boost::asio::ip::tcp::resolver::results_type::create(\n endpoint, host, port);\n return result;\n }\n\n boost::asio::steady_timer timer(ioc);\n timer.expires_after(std::chrono::seconds(timeout_seconds));\n\n bool operation_completed = false;\n // FIXME IPv4 only!\n resolver.async_resolve(boost::asio::ip::tcp::v4(), host, port,\n [&](const boost::system::error_code& ec,\n boost::asio::ip::tcp::resolver::results_type results) {\n if (!operation_completed) {\n result.error = ec;\n if (!ec) {\n result.results = std::move(results);\n } else {\n SPDLOG_WARN(\"DNS resolution - Failed for {}:{}: {}\", host, port,\n ec.message());\n }\n operation_completed = true;\n timer.cancel();\n }\n });\n\n timer.async_wait([&](const boost::system::error_code& ec) {\n if (!ec && !operation_completed) {\n SPDLOG_WARN(\"DNS resolution - Timeout for {}:{} after {}s\", host, port,\n timeout_seconds);\n resolver.cancel();\n result.error = boost::asio::error::timed_out;\n operation_completed = true;\n }\n });\n\n ioc.restart();\n while (!operation_completed) {\n ioc.run_one();\n }\n return result;\n}\n\n} // namespace fptn::common::network\n" }, { "path": "src/common/network/tun/darwin_tun_device.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Pavel Shpilev\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include // NOLINT(build/include_order)\n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include // NOLINT(build/include_order)\n\nnamespace fptn::common::network {\n\nclass DarwinTunDevice {\n public:\n DarwinTunDevice() : fd_(-1) {}\n\n ~DarwinTunDevice() { Close(); }\n\n DarwinTunDevice(const DarwinTunDevice&) = delete;\n DarwinTunDevice& operator=(const DarwinTunDevice&) = delete;\n\n bool Open(const std::string& /*requested_name*/) {\n fd_ = socket(PF_SYSTEM, SOCK_DGRAM, SYSPROTO_CONTROL);\n if (fd_ < 0) {\n SPDLOG_ERROR(\n \"DarwinTunDevice: socket(PF_SYSTEM) failed: {}\", strerror(errno));\n return false;\n }\n\n struct ctl_info info = {};\n strncpy(info.ctl_name, UTUN_CONTROL_NAME, sizeof(info.ctl_name) - 1);\n if (ioctl(fd_, CTLIOCGINFO, &info) < 0) {\n SPDLOG_ERROR(\n \"DarwinTunDevice: ioctl(CTLIOCGINFO) failed: {}\", strerror(errno));\n close(fd_);\n fd_ = -1;\n return false;\n }\n\n // Try utun numbers starting from 0 until we find an available one\n constexpr int kMaxUtunAttempts = 256;\n bool connected = false;\n for (int unit = 0; unit < kMaxUtunAttempts; ++unit) {\n struct sockaddr_ctl addr = {};\n addr.sc_len = sizeof(addr);\n addr.sc_family = AF_SYSTEM;\n addr.ss_sysaddr = AF_SYS_CONTROL;\n addr.sc_id = info.ctl_id;\n addr.sc_unit = unit + 1; // sc_unit is 1-based (utun0 = unit 1)\n\n if (connect(fd_, reinterpret_cast(&addr),\n sizeof(addr)) == 0) {\n connected = true;\n break;\n }\n }\n\n if (!connected) {\n SPDLOG_ERROR(\"DarwinTunDevice: failed to connect to any utun device\");\n close(fd_);\n fd_ = -1;\n return false;\n }\n\n // Get the assigned interface name\n char ifname[IFNAMSIZ] = {};\n socklen_t ifname_len = sizeof(ifname);\n if (getsockopt(\n fd_, SYSPROTO_CONTROL, UTUN_OPT_IFNAME, ifname, &ifname_len) < 0) {\n SPDLOG_ERROR(\"DarwinTunDevice: getsockopt(UTUN_OPT_IFNAME) failed: {}\",\n strerror(errno));\n close(fd_);\n fd_ = -1;\n return false;\n }\n name_ = ifname;\n SPDLOG_INFO(\"DarwinTunDevice: opened {}\", name_);\n return true;\n }\n\n void Close() {\n if (fd_ >= 0) {\n close(fd_);\n fd_ = -1;\n }\n }\n\n // For unit tests: inject a pre-created fd (e.g., from socketpair)\n bool OpenWithFd(int fd, const std::string& name) {\n Close();\n fd_ = fd;\n name_ = name;\n return true;\n }\n\n [[nodiscard]] const std::string& GetName() const { return name_; }\n\n bool ConfigureIPv4(const std::string& addr, int mask) {\n // Use ifconfig to set IPv4 address\n const std::string cmd = \"ifconfig \" + name_ + \" inet \" + addr + \"/\" +\n std::to_string(mask) + \" \" + addr;\n SPDLOG_DEBUG(\"DarwinTunDevice: {}\", cmd);\n return system(cmd.c_str()) == 0; // NOLINT(cert-env33-c)\n }\n\n bool ConfigureIPv6(const std::string& addr, int mask) {\n const std::string cmd =\n \"ifconfig \" + name_ + \" inet6 \" + addr + \"/\" + std::to_string(mask);\n SPDLOG_DEBUG(\"DarwinTunDevice: {}\", cmd);\n return system(cmd.c_str()) == 0; // NOLINT(cert-env33-c)\n }\n\n void SetNonBlocking(bool enabled) {\n int flags = fcntl(fd_, F_GETFL, 0);\n if (flags < 0) {\n return;\n }\n if (enabled) {\n flags |= O_NONBLOCK;\n } else {\n flags &= ~O_NONBLOCK;\n }\n fcntl(fd_, F_SETFL, flags);\n }\n\n void SetMTU(int mtu) {\n const std::string cmd = \"ifconfig \" + name_ + \" mtu \" + std::to_string(mtu);\n system(cmd.c_str()); // NOLINT(cert-env33-c)\n }\n\n void BringUp() {\n const std::string cmd = \"ifconfig \" + name_ + \" up\";\n system(cmd.c_str()); // NOLINT(cert-env33-c)\n }\n\n int Read(void* buffer, int size) {\n // macOS utun prepends a 4-byte protocol family header\n constexpr int kAfHeaderSize = 4;\n const int total_size = size + kAfHeaderSize;\n\n EnsureReadBuffer(total_size);\n\n const ssize_t n = ::read(fd_, read_buf_.get(), total_size);\n if (n <= kAfHeaderSize) {\n return 0;\n }\n\n const int payload_size = static_cast(n) - kAfHeaderSize;\n std::memcpy(buffer, read_buf_.get() + kAfHeaderSize, payload_size);\n return payload_size;\n }\n\n int Write(const void* data, int size) {\n // Determine address family from IP version nibble\n constexpr int kAfHeaderSize = 4;\n const auto* pkt = static_cast(data);\n const std::uint8_t version = (pkt[0] >> 4) & 0x0F;\n\n std::uint32_t af_header = 0;\n if (version == 4) {\n af_header = htonl(AF_INET);\n } else if (version == 6) {\n af_header = htonl(AF_INET6);\n } else {\n return 0;\n }\n\n const int total_size = kAfHeaderSize + size;\n EnsureWriteBuffer(total_size);\n\n std::memcpy(write_buf_.get(), &af_header, kAfHeaderSize);\n std::memcpy(write_buf_.get() + kAfHeaderSize, data, size);\n\n const ssize_t written = ::write(fd_, write_buf_.get(), total_size);\n if (written <= kAfHeaderSize) {\n return 0;\n }\n return static_cast(written) - kAfHeaderSize;\n }\n\n // cppcheck-suppress functionStatic\n void SetStopFlag(const std::atomic* /*running*/) {}\n\n private:\n void EnsureReadBuffer(int size) {\n if (read_buf_size_ < size) {\n read_buf_ = std::make_unique(size);\n read_buf_size_ = size;\n }\n }\n\n void EnsureWriteBuffer(int size) {\n if (write_buf_size_ < size) {\n write_buf_ = std::make_unique(size);\n write_buf_size_ = size;\n }\n }\n\n int fd_;\n std::string name_;\n\n std::unique_ptr read_buf_;\n int read_buf_size_ = 0;\n std::unique_ptr write_buf_;\n int write_buf_size_ = 0;\n};\n\n} // namespace fptn::common::network\n" }, { "path": "src/common/network/tun/linux_tun_device.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Pavel Shpilev\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n\nnamespace fptn::common::network {\n\nclass LinuxTunDevice {\n public:\n bool Open(const std::string& name) {\n tun_ = std::make_unique();\n tun_->name(name);\n name_ = tun_->name();\n return true;\n }\n\n void Close() { tun_.reset(); }\n\n [[nodiscard]] const std::string& GetName() const { return name_; }\n\n bool ConfigureIPv4(const std::string& addr, int mask) {\n tun_->ip(addr, mask);\n return true;\n }\n\n bool ConfigureIPv6(const std::string& addr, int mask) {\n tun_->ip(addr, mask);\n return true;\n }\n\n void SetNonBlocking(bool enabled) { tun_->nonblocking(enabled); }\n\n void SetMTU(int mtu) { tun_->mtu(mtu); }\n\n void BringUp() { tun_->up(); }\n\n int Read(void* buffer, int size) {\n return tun_->read(buffer, static_cast(size));\n }\n\n int Write(const void* data, int size) {\n return tun_->write(const_cast(data), static_cast(size));\n }\n\n // cppcheck-suppress functionStatic\n void SetStopFlag(const std::atomic* /*running*/) {}\n\n private:\n std::unique_ptr tun_;\n std::string name_;\n};\n\n} // namespace fptn::common::network\n" }, { "path": "src/common/network/tun/win_tun_device.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Pavel Shpilev\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n// clang-format off\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n// clang-format on\n\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_address.h\"\n\nnamespace fptn::common::network {\n\nclass WinTunDevice {\n public:\n WinTunDevice()\n : wintun_(nullptr),\n adapter_(nullptr),\n session_(nullptr),\n running_(nullptr) {\n wintun_ = InitializeWintun();\n UuidCreate(&guid_);\n }\n\n ~WinTunDevice() { Close(); }\n\n WinTunDevice(const WinTunDevice&) = delete;\n WinTunDevice& operator=(const WinTunDevice&) = delete;\n\n bool Open(const std::string& name) {\n if (!wintun_) {\n return false;\n }\n SPDLOG_INFO(\"WINTUN: {} version loaded\",\n ParseWinTunVersion(WintunGetRunningDriverVersion()));\n\n name_ = name;\n const std::wstring interface_name = ToWString(name);\n adapter_ = WintunCreateAdapter(\n interface_name.c_str(), interface_name.c_str(), &guid_);\n if (!adapter_) {\n SPDLOG_ERROR(\"Network adapter wasn't created!\");\n return false;\n }\n return true;\n }\n\n void Close() {\n if (session_) {\n WintunEndSession(session_);\n session_ = nullptr;\n }\n if (adapter_) {\n WintunCloseAdapter(adapter_);\n adapter_ = nullptr;\n }\n if (wintun_) {\n WintunDeleteDriver();\n wintun_ = nullptr;\n }\n }\n\n [[nodiscard]] const std::string& GetName() const { return name_; }\n\n bool ConfigureIPv4(const std::string& addr, int mask) {\n return SetIPAddressEntry(AF_INET, addr, mask);\n }\n\n bool ConfigureIPv6(const std::string& addr, int mask) {\n return SetIPAddressEntry(AF_INET6, addr, mask);\n }\n\n // cppcheck-suppress functionStatic\n void SetNonBlocking(bool /*enabled*/) {\n // Wintun uses event-based I/O, no-op\n }\n\n // cppcheck-suppress functionStatic\n void SetMTU(int /*mtu*/) {\n // Wintun handles MTU internally, no-op\n }\n\n void BringUp() {\n constexpr int kSessionCapacity = 0x20000;\n session_ = WintunStartSession(adapter_, kSessionCapacity);\n if (!session_) {\n SPDLOG_ERROR(\"Open session error\");\n }\n }\n\n int Read(void* buffer, int size) {\n if (!session_) {\n return 0;\n }\n\n constexpr std::size_t kRetryAmount = 20;\n while (running_ && *running_) {\n for (std::size_t i = 0; i < kRetryAmount; ++i) {\n DWORD packet_size = 0;\n BYTE* packet = WintunReceivePacket(session_, &packet_size);\n if (packet && running_ && *running_) {\n const int copy_size = (static_cast(packet_size) < size)\n ? static_cast(packet_size)\n : size;\n std::memcpy(buffer, packet, copy_size);\n WintunReleaseReceivePacket(session_, packet);\n return copy_size;\n }\n if (GetLastError() == ERROR_NO_MORE_ITEMS) {\n continue;\n }\n return 0;\n }\n WaitForSingleObject(WintunGetReadWaitEvent(session_), 10);\n }\n return 0;\n }\n\n int Write(const void* data, int size) {\n if (!session_ || !data || size <= 0) {\n return 0;\n }\n\n BYTE* send_buffer =\n WintunAllocateSendPacket(session_, static_cast(size));\n if (!send_buffer) {\n return 0;\n }\n std::memcpy(send_buffer, data, size);\n WintunSendPacket(session_, send_buffer);\n return size;\n }\n\n void SetStopFlag(const std::atomic* running) { running_ = running; }\n\n private:\n bool SetIPAddressEntry(int family, const std::string& addr, int mask) {\n MIB_UNICASTIPADDRESS_ROW address_row;\n InitializeUnicastIpAddressEntry(&address_row);\n WintunGetAdapterLUID(adapter_, &address_row.InterfaceLuid);\n\n if (family == AF_INET) {\n address_row.Address.Ipv4.sin_family = AF_INET;\n if (1 != inet_pton(AF_INET, addr.c_str(),\n &(address_row.Address.Ipv4.sin_addr))) {\n SPDLOG_ERROR(\"Wrong IPv4 address\");\n return false;\n }\n } else {\n address_row.Address.Ipv6.sin6_family = AF_INET6;\n if (1 != inet_pton(AF_INET6, addr.c_str(),\n &(address_row.Address.Ipv6.sin6_addr))) {\n SPDLOG_ERROR(\"Wrong IPv6 address\");\n return false;\n }\n }\n\n address_row.OnLinkPrefixLength = static_cast(mask);\n address_row.DadState = IpDadStatePreferred;\n\n const auto res = CreateUnicastIpAddressEntry(&address_row);\n if (res != ERROR_SUCCESS && res != ERROR_OBJECT_ALREADY_EXISTS) {\n SPDLOG_ERROR(\"Failed to set {} address\", addr);\n return false;\n }\n return true;\n }\n\n static std::wstring ToWString(const std::string& s) {\n return {s.begin(), s.end()};\n }\n\n static std::string ParseWinTunVersion(DWORD version_number) {\n return std::to_string((version_number >> 16) & 0xff) + \".\" +\n std::to_string((version_number >> 0) & 0xff);\n }\n\n HMODULE InitializeWintun() {\n HMODULE wintun_lib = LoadLibraryExW(L\"wintun.dll\", nullptr,\n LOAD_LIBRARY_SEARCH_APPLICATION_DIR | LOAD_LIBRARY_SEARCH_SYSTEM32);\n if (!wintun_lib) {\n SPDLOG_ERROR(\"WINTUN NOT FOUND!\");\n return nullptr;\n }\n#define X(Name) \\\n ((*(reinterpret_cast(&Name)) = \\\n GetProcAddress(wintun_lib, #Name)) == nullptr)\n if (X(WintunCreateAdapter) || X(WintunCloseAdapter) ||\n X(WintunOpenAdapter) || X(WintunGetAdapterLUID) ||\n X(WintunGetRunningDriverVersion) || X(WintunDeleteDriver) ||\n X(WintunSetLogger) || X(WintunStartSession) || X(WintunEndSession) ||\n X(WintunGetReadWaitEvent) || X(WintunReceivePacket) ||\n X(WintunReleaseReceivePacket) || X(WintunAllocateSendPacket) ||\n X(WintunSendPacket)) {\n DWORD last_error = GetLastError();\n FreeLibrary(wintun_lib);\n SetLastError(last_error);\n SPDLOG_ERROR(\"Error whilst loading the lib: {}\", last_error);\n return nullptr;\n }\n#undef X\n SPDLOG_INFO(\"Wintun initialization successful\");\n return wintun_lib;\n }\n\n // Wintun function pointers\n WINTUN_CREATE_ADAPTER_FUNC* WintunCreateAdapter = nullptr;\n WINTUN_CLOSE_ADAPTER_FUNC* WintunCloseAdapter = nullptr;\n WINTUN_OPEN_ADAPTER_FUNC* WintunOpenAdapter = nullptr;\n WINTUN_GET_ADAPTER_LUID_FUNC* WintunGetAdapterLUID = nullptr;\n WINTUN_GET_RUNNING_DRIVER_VERSION_FUNC* WintunGetRunningDriverVersion =\n nullptr;\n WINTUN_DELETE_DRIVER_FUNC* WintunDeleteDriver = nullptr;\n WINTUN_SET_LOGGER_FUNC* WintunSetLogger = nullptr;\n WINTUN_START_SESSION_FUNC* WintunStartSession = nullptr;\n WINTUN_END_SESSION_FUNC* WintunEndSession = nullptr;\n WINTUN_GET_READ_WAIT_EVENT_FUNC* WintunGetReadWaitEvent = nullptr;\n WINTUN_RECEIVE_PACKET_FUNC* WintunReceivePacket = nullptr;\n WINTUN_RELEASE_RECEIVE_PACKET_FUNC* WintunReleaseReceivePacket = nullptr;\n WINTUN_ALLOCATE_SEND_PACKET_FUNC* WintunAllocateSendPacket = nullptr;\n WINTUN_SEND_PACKET_FUNC* WintunSendPacket = nullptr;\n\n GUID guid_;\n HMODULE wintun_;\n WINTUN_ADAPTER_HANDLE adapter_;\n WINTUN_SESSION_HANDLE session_;\n\n std::string name_;\n const std::atomic* running_;\n};\n\n} // namespace fptn::common::network\n" }, { "path": "src/common/network/utils.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#ifndef __ANDROID__\n#include \"common/system/command.h\"\n#endif\n\nnamespace fptn::common::network {\n\n#ifndef __ANDROID__\ninline std::vector GetServerIpAddresses() {\n std::vector cmd_stdout;\n fptn::common::system::command::run(\n \"ip -o addr show | awk '{print $4}' | cut -d'/' -f1\", cmd_stdout);\n return cmd_stdout;\n}\n#endif\n\ninline void CleanSocket(boost::asio::ip::tcp::socket& socket) {\n try {\n while (socket.available() != 0) {\n boost::system::error_code ec;\n std::array buffer{};\n\n const std::size_t bytes =\n socket.read_some(boost::asio::buffer(buffer), ec);\n (void)bytes;\n if (ec == boost::asio::error::eof) {\n break;\n }\n if (ec) {\n SPDLOG_ERROR(\"Socket error: {}\", ec.message());\n break;\n }\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Exception: {}\", e.what());\n }\n}\n\ninline bool CleanSsl(const SSL* ssl) {\n if (ssl == nullptr) {\n return false;\n }\n if (BIO* rb = SSL_get_rbio(ssl)) {\n BIO_flush(rb);\n char buf[4096] = {};\n while (BIO_pending(rb) > 0) {\n BIO_read(rb, buf, sizeof(buf));\n }\n }\n return true;\n}\n\ninline bool IsServerHelloComplete(const std::vector& data) {\n if (data.size() < 5) {\n SPDLOG_INFO(\n \"IsServerHelloComplete: data too small ({} bytes)\", data.size());\n return false;\n }\n\n std::size_t pos = 0;\n bool found_server_hello = false;\n bool is_tls13 = false;\n bool handshake_done = false;\n\n while (pos + 5 <= data.size()) {\n const std::uint8_t content_type = data[pos];\n const std::uint16_t record_len = (data[pos + 3] << 8) | data[pos + 4];\n\n if (pos + 5 + record_len > data.size()) {\n return false;\n }\n\n if (content_type == 22) { // Handshake\n std::size_t hpos = pos + 5;\n std::size_t hend = hpos + record_len;\n\n while (hpos + 4 <= hend) {\n const std::uint8_t msg_type = data[hpos];\n const std::uint32_t msg_len =\n (data[hpos + 1] << 16) | (data[hpos + 2] << 8) | data[hpos + 3];\n\n if (hpos + 4 + msg_len > hend) {\n SPDLOG_INFO(\n \"IsServerHelloComplete: incomplete handshake message at pos {}\",\n hpos);\n return false;\n }\n\n if (msg_type == 2) { // ServerHello\n found_server_hello = true;\n if (hpos + 4 + 2 <= data.size()) {\n const std::uint16_t version =\n (data[hpos + 4 + 2] << 8) | data[hpos + 4 + 3];\n is_tls13 = (version != 0x0303);\n SPDLOG_INFO(\n \"IsServerHelloComplete: ServerHello found, TLS version \"\n \"0x{:04x}, is_tls13={}\",\n version, is_tls13);\n } else {\n SPDLOG_INFO(\n \"IsServerHelloComplete: ServerHello found but version field \"\n \"missing\");\n }\n }\n\n // TLS 1.2: ServerHelloDone\n if (found_server_hello && !is_tls13 && msg_type == 14) {\n handshake_done = true;\n SPDLOG_INFO(\n \"IsServerHelloComplete: ServerHelloDone (TLS 1.2) detected, \"\n \"handshake complete\");\n }\n\n // TLS 1.3: Finished\n if (found_server_hello && is_tls13 && msg_type == 20) {\n handshake_done = true;\n SPDLOG_INFO(\n \"IsServerHelloComplete: Finished (TLS 1.3) detected, handshake \"\n \"complete\");\n }\n\n hpos += 4 + msg_len;\n }\n }\n\n // TLS 1.3: Application Data (23) или ChangeCipherSpec (20)\n // Finished\n if (found_server_hello && is_tls13 && !handshake_done &&\n (content_type == 20 || content_type == 23)) {\n if (pos + 5 + record_len >= data.size()) {\n handshake_done = true;\n SPDLOG_INFO(\n \"IsServerHelloComplete: TLS 1.3 {} record ends the handshake\",\n content_type == 20 ? \"ChangeCipherSpec\" : \"ApplicationData\");\n }\n }\n\n pos += 5 + record_len;\n }\n\n if (found_server_hello && handshake_done) {\n SPDLOG_INFO(\"IsServerHelloComplete: handshake complete, total size={}\",\n data.size());\n } else if (found_server_hello && !handshake_done) {\n SPDLOG_INFO(\n \"IsServerHelloComplete: ServerHello found but handshake not yet done, \"\n \"size={}\",\n data.size());\n } else {\n SPDLOG_INFO(\n \"IsServerHelloComplete: ServerHello not found, size={}\", data.size());\n }\n\n return found_server_hello && handshake_done;\n}\n\ninline bool IsClientHelloComplete(const std::vector& data) {\n if (data.size() < 5) {\n return false;\n }\n\n std::size_t pos = 0;\n while (pos + 5 <= data.size()) {\n const std::uint8_t content_type = data[pos];\n const std::uint16_t record_length = (data[pos + 3] << 8) | data[pos + 4];\n\n if (pos + 5 + record_length > data.size()) {\n return false;\n }\n\n if (content_type == 22) { // Handshake\n std::size_t handshake_pos = pos + 5;\n std::size_t handshake_end = handshake_pos + record_length;\n\n while (handshake_pos + 4 <= handshake_end) {\n const std::uint8_t msg_type = data[handshake_pos];\n const std::uint32_t msg_length = (data[handshake_pos + 1] << 16) |\n (data[handshake_pos + 2] << 8) |\n data[handshake_pos + 3];\n if (handshake_pos + 4 + msg_length > handshake_end) {\n return false;\n }\n if (msg_type == 1) { // ClientHello\n return true;\n }\n handshake_pos += 4 + msg_length;\n }\n }\n pos += 5 + record_length;\n }\n return false;\n}\n\nusing TlsData = std::optional>;\n\ninline TlsData WaitForServerTlsHello(boost::asio::ip::tcp::socket& socket,\n const std::chrono::milliseconds drain_timeout = std::chrono::milliseconds(\n 5000)) {\n std::vector data;\n data.reserve(65536);\n\n const auto start_time = std::chrono::steady_clock::now();\n\n try {\n boost::system::error_code ec;\n std::array buffer{};\n\n while (std::chrono::steady_clock::now() - start_time < drain_timeout) {\n if (socket.available() == 0) {\n std::this_thread::sleep_for(std::chrono::milliseconds(100));\n continue;\n }\n\n const std::size_t bytes =\n socket.read_some(boost::asio::buffer(buffer), ec);\n\n if (bytes) {\n data.insert(data.end(), buffer.begin(), buffer.begin() + bytes);\n if (IsServerHelloComplete(data)) {\n return data;\n }\n }\n\n if (ec == boost::asio::error::eof) {\n break;\n }\n if (ec) {\n SPDLOG_ERROR(\"Socket error: {}\", ec.message());\n break;\n }\n }\n SPDLOG_WARN(\n \"Timeout waiting for server hello, total data: {} bytes\", data.size());\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Exception: {}\", e.what());\n }\n return std::nullopt;\n}\n\ninline boost::asio::awaitable WaitForServerTlsHelloAsync(\n boost::asio::ip::tcp::socket& socket,\n const std::chrono::milliseconds drain_timeout = std::chrono::milliseconds(\n 5000)) {\n std::vector data;\n data.reserve(65536);\n\n try {\n boost::system::error_code ec;\n std::array buffer{};\n const auto start_time = std::chrono::steady_clock::now();\n int packet_count = 0;\n\n while (std::chrono::steady_clock::now() - start_time < drain_timeout) {\n if (socket.available() == 0) {\n boost::asio::steady_timer timer(\n co_await boost::asio::this_coro::executor,\n std::chrono::milliseconds(100));\n co_await timer.async_wait(boost::asio::use_awaitable);\n continue;\n }\n\n const std::size_t bytes =\n co_await socket.async_read_some(boost::asio::buffer(buffer),\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n\n packet_count++;\n\n if (bytes) {\n data.insert(data.end(), buffer.begin(), buffer.begin() + bytes);\n if (IsServerHelloComplete(data)) {\n SPDLOG_INFO(\n \"Server hello complete after {} packets, total size: {} bytes\",\n packet_count, data.size());\n co_return data;\n }\n }\n\n if (ec == boost::asio::error::eof) {\n SPDLOG_INFO(\n \"Connection closed by server, total data: {} bytes\", data.size());\n break;\n }\n if (ec) {\n SPDLOG_ERROR(\"Socket error: {}\", ec.message());\n break;\n }\n }\n SPDLOG_WARN(\n \"Timeout waiting for server hello, total data: {} bytes\", data.size());\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Exception: {}\", e.what());\n }\n co_return std::nullopt;\n}\n\ninline boost::asio::awaitable WaitForClientChangeCipherSpec(\n boost::asio::ip::tcp::socket& socket,\n const std::chrono::milliseconds drain_timeout = std::chrono::milliseconds(\n 5000)) {\n const auto target_ccs = protocol::https::utils::MakeClientChangeCipherSpec();\n const std::size_t target_size = target_ccs.size();\n\n std::vector buffer(target_size);\n try {\n boost::system::error_code ec;\n const auto start_time = std::chrono::steady_clock::now();\n std::size_t total_read = 0;\n\n while (std::chrono::steady_clock::now() - start_time < drain_timeout) {\n if (socket.available() == 0) {\n boost::asio::steady_timer timer(\n co_await boost::asio::this_coro::executor,\n std::chrono::milliseconds(100));\n co_await timer.async_wait(boost::asio::use_awaitable);\n continue;\n }\n\n const std::size_t bytes_read = co_await socket.async_read_some(\n boost::asio::buffer(\n buffer.data() + total_read, target_size - total_read),\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n\n total_read += bytes_read;\n\n if (total_read == target_size) {\n co_return buffer == target_ccs;\n }\n\n if (ec == boost::asio::error::eof) {\n break;\n }\n if (ec) {\n SPDLOG_ERROR(\"Socket error during drain: {}\", ec.message());\n break;\n }\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Exception during socket drain: {}\", e.what());\n }\n co_return false;\n}\n\ninline boost::asio::awaitable WaitForClientTlsHelloAsync(\n boost::asio::ip::tcp::socket& socket,\n const std::chrono::milliseconds drain_timeout = std::chrono::milliseconds(\n 5000)) {\n std::vector data;\n data.reserve(65536);\n\n try {\n boost::system::error_code ec;\n std::array buffer{};\n const auto start_time = std::chrono::steady_clock::now();\n while (std::chrono::steady_clock::now() - start_time < drain_timeout) {\n if (socket.available() == 0) {\n boost::asio::steady_timer timer(\n co_await boost::asio::this_coro::executor,\n std::chrono::milliseconds(100));\n co_await timer.async_wait(boost::asio::use_awaitable);\n continue;\n }\n\n const std::size_t bytes =\n co_await socket.async_read_some(boost::asio::buffer(buffer),\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n if (bytes) {\n data.insert(data.end(), buffer.begin(), buffer.begin() + bytes);\n if (IsClientHelloComplete(data)) {\n co_return data;\n }\n }\n\n if (ec == boost::asio::error::eof) {\n break;\n }\n if (ec) {\n SPDLOG_ERROR(\"Socket error during drain: {}\", ec.message());\n break;\n }\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Exception during socket drain: {}\", e.what());\n }\n co_return std::nullopt;\n}\n\n} // namespace fptn::common::network\n" }, { "path": "src/common/system/command.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#if _WIN32\n#include // NOLINT(build/include_order)\n#endif\n\n#include \n#include \n\n#include \n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n\n#if _WIN32\n#include \n#endif\n\nnamespace fptn::common::system::command {\n\ninline bool run(const std::string& command) {\n try {\n SPDLOG_INFO(\"Running: {}\", command);\n#ifdef _WIN32\n boost::process::v1::child child(command,\n boost::process::v1::std_out > stdout,\n boost::process::v1::std_err > stderr,\n ::boost::process::v1::windows::hide);\n#elif defined(__linux__) || defined(__APPLE__)\n boost::process::v1::child child(command,\n boost::process::v1::std_out > stdout,\n boost::process::v1::std_err > stderr);\n#endif\n child.wait();\n return child.exit_code() == 0;\n } catch (const std::exception& e) {\n const std::string msg = e.what();\n SPDLOG_ERROR(\"Command error: {} CMD: '{}' \", msg, command);\n } catch (...) {\n SPDLOG_ERROR(\"Command error: undefined error CMD: '{}' \", command);\n }\n return false;\n}\n\ninline bool run(\n const std::string& command, std::vector& std_output) {\n try {\n boost::process::v1::ipstream pipe;\n#ifdef _WIN32\n boost::process::v1::child child(command, boost::process::v1::std_out > pipe,\n ::boost::process::v1::windows::hide);\n#elif defined(__linux__) || defined(__APPLE__)\n boost::process::v1::child child(boost::process::v1::search_path(\"bash\"),\n \"-c\", command, boost::process::v1::std_out > pipe);\n#endif\n std::string line;\n while (std::getline(pipe, line)) {\n std_output.emplace_back(line);\n }\n child.wait();\n return child.exit_code() == 0;\n } catch (const std::exception& ex) {\n SPDLOG_ERROR(\n \"Error: failed to run command '{}'. Error: {}\", command, ex.what());\n }\n return false;\n}\n\n} // namespace fptn::common::system::command\n" }, { "path": "src/common/user/common_user_manager.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\nnamespace fptn::common::user {\nclass CommonUserManager final {\n public:\n explicit CommonUserManager(std::string file_path)\n : file_path_(std::move(file_path)) {\n CreateFileIfNotExists(file_path_);\n LoadUsers();\n }\n\n bool AddUser(\n const std::string& username, const std::string& password, int bandwidth) {\n const std::scoped_lock lock(mutex_); // mutex\n\n if (!ValidateUsername(username)) {\n std::cerr << \"Invalid username.\" << std::endl;\n return false;\n }\n\n if (bandwidth < 0) {\n std::cerr << \"Invalid bandwidth value. It should be a positive number.\"\n << std::endl;\n return false;\n }\n\n if (users_.find(username) != users_.end()) {\n std::cout << \"User \" << username << \" already exists.\" << std::endl;\n return false;\n }\n std::string hash = HashPassword(password);\n users_[username] = {hash, bandwidth};\n SaveUsers();\n std::cout << \"User \" << username << \" added with bandwidth \" << bandwidth\n << \" MB.\" << std::endl;\n return true;\n }\n\n bool DeleteUser(const std::string& username) {\n const std::scoped_lock lock(mutex_); // mutex\n\n if (users_.find(username) == users_.end()) {\n return false;\n }\n users_.erase(username);\n SaveUsers();\n return true;\n }\n\n void ListUsers() const {\n const std::scoped_lock lock(mutex_); // mutex\n\n for (const auto& user_entry : users_) {\n const auto& username = user_entry.first;\n const auto& [hash_password, max_speed] = user_entry.second;\n std::cout << username << \" \" << std::string(hash_password.length(), 'X')\n << \" \" << max_speed << \" MB\" << std::endl;\n }\n }\n\n bool Authenticate(const std::string& username, const std::string& password) {\n const std::scoped_lock lock(mutex_); // mutex\n\n LoadUsers();\n\n auto it = users_.find(username);\n if (it != users_.end()) {\n std::string hash = HashPassword(password);\n return it->second.first == hash;\n }\n return false;\n }\n\n int GetUserBandwidthBit(const std::string& username) const {\n const std::scoped_lock lock(mutex_); // mutex\n\n auto it = users_.find(username);\n if (it != users_.end()) {\n return it->second.second * 1024 * 1024;\n }\n return 0;\n }\n int GetUserBandwidth(const std::string& username) const {\n const std::scoped_lock lock(mutex_); // mutex\n\n auto it = users_.find(username);\n if (it != users_.end()) {\n return it->second.second;\n }\n return 0;\n }\n\n protected:\n void LoadUsers() {\n // FIXIT\n // update\n users_.clear();\n\n std::ifstream file(file_path_);\n if (file.is_open()) {\n std::string line;\n while (std::getline(file, line)) {\n std::string username;\n std::string passwordHash;\n int bandwidth;\n\n std::istringstream iss(line);\n if (iss >> username >> passwordHash >> bandwidth) {\n users_[username] = {passwordHash, bandwidth};\n } else {\n std::cerr << \"Skipping invalid line: \" << line << std::endl;\n }\n }\n } else {\n std::cerr << \"Unable to open file: \" << file_path_ << std::endl;\n }\n }\n\n void SaveUsers() const {\n std::ofstream file(file_path_);\n if (file.is_open()) {\n for (const auto& user_entry : users_) {\n const auto& username = user_entry.first;\n const auto& [hash_password, max_speed] = user_entry.second; // NOLINT\n file << username << \" \" << hash_password << \" \" << max_speed << \"\\n\";\n }\n } else {\n std::cerr << \"Unable to open file: \" << file_path_ << std::endl;\n }\n }\n\n // NOLINTNEXTLINE(readability-convert-member-functions-to-static)\n std::string HashPassword(const std::string& password) const {\n unsigned int length = 0;\n unsigned char hash[EVP_MAX_MD_SIZE] = {0};\n\n EVP_MD_CTX* mdctx = EVP_MD_CTX_new();\n if (!mdctx) {\n std::cerr << \"Failed to create EVP_MD_CTX\" << std::endl;\n return \"\";\n }\n\n if (1 != EVP_DigestInit_ex(mdctx, EVP_sha256(), nullptr)) {\n std::cerr << \"Failed to initialize digest\" << std::endl;\n EVP_MD_CTX_free(mdctx);\n return \"\";\n }\n\n if (1 != EVP_DigestUpdate(mdctx, password.c_str(), password.size())) {\n std::cerr << \"Failed to update digest\" << std::endl;\n EVP_MD_CTX_free(mdctx);\n return \"\";\n }\n\n if (1 != EVP_DigestFinal_ex(mdctx, hash, &length)) {\n std::cerr << \"Failed to finalize digest\" << std::endl;\n EVP_MD_CTX_free(mdctx);\n return \"\";\n }\n\n EVP_MD_CTX_free(mdctx);\n\n std::ostringstream oss;\n for (unsigned int i = 0; i < length; ++i) {\n oss << std::hex << std::setw(2) << std::setfill('0')\n << static_cast(hash[i]);\n }\n return oss.str();\n }\n\n // NOLINTNEXTLINE(readability-convert-member-functions-to-static)\n bool ValidateUsername(const std::string& username) const {\n return !username.empty() &&\n std::all_of(username.begin(), username.end(), ::isalnum);\n }\n\n // NOLINTNEXTLINE(readability-convert-member-functions-to-static)\n void CreateFileIfNotExists(const std::string& file_path) {\n const std::filesystem::path path(file_path);\n const std::filesystem::path directory_path = path.parent_path();\n if (!directory_path.empty() && !std::filesystem::exists(directory_path)) {\n std::error_code ec;\n if (!std::filesystem::create_directories(directory_path, ec)) {\n std::cerr << \"Failed to create directories: \" << ec.message()\n << std::endl;\n return;\n }\n }\n if (!std::filesystem::exists(file_path)) {\n std::ofstream file(file_path);\n if (!file.is_open()) {\n std::cerr << \"Failed to create file: \" << file_path << std::endl;\n }\n }\n }\n\n private:\n std::unordered_map> users_;\n mutable std::mutex mutex_;\n std::string file_path_;\n};\n\nusing CommonUserManagerPtr = std::unique_ptr;\n} // namespace fptn::common::user\n" }, { "path": "src/common/utils/base64.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n\nnamespace fptn::common::utils::base64 {\ninline std::string decode(const std::string& s) {\n // If the input string's length is not a multiple of 4,\n // it appends '=' to make the length valid for base64 decoding.\n std::string additional;\n if (s.size() % 4 != 0) {\n const std::size_t padding = 4 - (s.size() % 4);\n for (std::size_t i = 0; i < padding; i++) {\n additional += \"=\";\n }\n }\n return ::base64::from_base64(s + additional);\n}\n} // namespace fptn::common::utils::base64\n" }, { "path": "src/common/utils/utils.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n\nnamespace fptn::common::utils {\n\ninline void GenerateRandomBytes(std::uint8_t* buffer, std::size_t length) {\n thread_local std::mt19937 gen{std::random_device {}()};\n std::uniform_int_distribution dist;\n\n std::size_t i = 0;\n for (; i + 8 <= length; i += 8) {\n const std::uint64_t rand_val = dist(gen);\n std::memcpy(buffer + i, &rand_val, 8);\n }\n if (i < length) {\n const std::uint64_t rand_val = dist(gen);\n std::memcpy(buffer + i, &rand_val, length - i);\n }\n}\n\ninline std::string GenerateRandomString(const int length) {\n static constexpr char kCharacters[] =\n \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\";\n static constexpr std::size_t kCharCount = sizeof(kCharacters) - 1;\n\n thread_local std::mt19937 gen{std::random_device {}()};\n thread_local std::uniform_int_distribution dist(\n 0, kCharCount - 1);\n\n std::string result(length, '\\0');\n for (int i = 0; i < length; ++i) {\n result[i] = kCharacters[dist(gen)];\n }\n return result;\n}\n\ninline std::string RemoveSubstring(\n std::string input, const std::vector& strs) {\n for (const auto& substr : strs) {\n boost::algorithm::erase_all(input, substr);\n }\n return input;\n}\n\ninline std::string Trim(const std::string& str) {\n auto is_space = [](const unsigned char c) { return std::isspace(c); };\n\n const auto start = std::ranges::find_if_not(str, is_space);\n const auto end =\n std::ranges::find_if_not(str | std::views::reverse, is_space).base();\n\n return (start < end) ? std::string(start, end) : std::string();\n}\n\ninline std::vector SplitCommaSeparated(const std::string& input) {\n std::vector result;\n std::stringstream ss(input);\n std::string item;\n\n while (std::getline(ss, item, ',')) {\n const std::string trimmed = Trim(item);\n if (!trimmed.empty()) {\n result.push_back(trimmed);\n }\n }\n return result;\n}\n\ninline std::string ToLowerCase(const std::string& str) {\n try {\n boost::locale::generator gen;\n std::locale loc = gen(\"\");\n return boost::locale::to_lower(str, loc);\n } catch (...) {\n return str;\n }\n return str;\n}\n\n} // namespace fptn::common::utils\n" }, { "path": "src/fptn-client/CMakeLists.txt", "content": "project(fptn-client)\n\ninclude_directories(${CMAKE_CURRENT_SOURCE_DIR})\n\nif(APPLE OR UNIX)\n set(TUNTAP_LIB tuntap++)\nelse()\n set(TUNTAP_LIB Wintun rpcrt4 iphlpapi Kernel32.lib)\nendif()\n\nfind_package(OpenSSL REQUIRED)\nfind_package(argparse REQUIRED)\nfind_package(spdlog REQUIRED)\nfind_package(fmt REQUIRED)\nfind_package(PcapPlusPlus REQUIRED)\nfind_package(Boost REQUIRED COMPONENTS random filesystem process locale)\nfind_package(ZLIB REQUIRED)\nfind_package(httplib REQUIRED)\nfind_package(libidn2 REQUIRED)\nfind_package(re2 REQUIRED)\nfind_package(nlohmann_json REQUIRED)\ninclude_directories(${nlohmann_json_INCLUDE_DIRS})\n\n## brotli\nfind_package(brotli REQUIRED)\nfind_path(BROTLI_INCLUDE_DIR \"brotli/decode.h\" REQUIRED)\ninclude_directories(${BROTLI_INCLUDE_DIR})\nfind_library(BROTLI_DEC_LIB NAMES brotlidec REQUIRED)\nfind_library(BROTLI_COMMON_LIB NAMES brotlicommon REQUIRED)\nfind_library(BROTLI_ENC_LIB NAMES brotlienc REQUIRED)\n\n# fptn-client-cli\nadd_executable(\n \"${PROJECT_NAME}-cli\"\n fptn-client-cli.cpp\n vpn/vpn_client.h\n vpn/vpn_client.cpp\n vpn/http/client.h\n vpn/http/client.cpp\n routing/route_manager.h\n routing/route_manager.cpp\n config/config_file.cpp\n config/config_file.h\n plugins/split/tunneling.h\n plugins/split/tunneling.cpp\n plugins/blacklist/domain_blacklist.h\n plugins/blacklist/domain_blacklist.cpp\n utils/speed_estimator/speed_estimator.cpp\n utils/speed_estimator/speed_estimator.h\n utils/speed_estimator/server_info.h)\n\ntarget_link_libraries(\n \"${PROJECT_NAME}-cli\"\n PRIVATE ZLIB::ZLIB\n Boost::boost\n Boost::random\n Boost::filesystem\n Boost::process\n Boost::locale\n OpenSSL::SSL\n OpenSSL::Crypto\n argparse::argparse\n nlohmann_json::nlohmann_json\n spdlog::spdlog\n fmt::fmt\n PcapPlusPlus::PcapPlusPlus\n libidn2::libidn2\n re2::re2\n fptn-protocol-lib_static\n \"${TUNTAP_LIB}\"\n \"${BROTLI_DEC_LIB}\"\n \"${BROTLI_COMMON_LIB}\")\n\n# fptn-client-gui\nif(\"${FPTN_BUILD_WITH_GUI_CLIENT}\")\n # --- disable clang-tidy for QT generated code ---\n set_source_files_properties($ PROPERTIES SKIP_CLANG_TIDY ON)\n set(DISABLE_TIDY_DIR \"${CMAKE_BINARY_DIR}/src/fptn-client\")\n file(MAKE_DIRECTORY \"${DISABLE_TIDY_DIR}\")\n file(\n WRITE \"${DISABLE_TIDY_DIR}/.clang-tidy\"\n \"Checks: '-*,readability-inconsistent-declaration-parameter-name'\nWarningsAsErrors: ''\n \")\n\n find_package(\n Qt6 REQUIRED\n COMPONENTS Core\n Gui\n Widgets\n Network\n LinguistTools\n Concurrent\n CONFIG\n REQUIRED)\n set(CMAKE_AUTOMOC ON)\n set(CMAKE_AUTORCC ON)\n set(CMAKE_AUTOUIC ON)\n set(CMAKE_INCLUDE_CURRENT_DIR ON)\n\n qt_standard_project_setup()\n\n set(QRC_FILES gui/resources/resources.qrc)\n qt6_add_resources(PROJECT_RESOURCES ${QRC_FILES})\n\n set(QT_ADDITIONAL_PARAMS \"\")\n if(WIN32)\n set(QT_ADDITIONAL_PARAMS WIN32)\n endif()\n\n set(PLATFORM_SPECIFIC_LIBS \"\")\n if(APPLE)\n set(PLATFORM_SPECIFIC_LIBS \"-framework Security\")\n endif()\n\n # translations\n file(GLOB TRANSLATIONS gui/resources/translations/*.ts)\n set_source_files_properties(${TRANSLATIONS} PROPERTIES OUTPUT_LOCATION \"${CMAKE_CURRENT_SOURCE_DIR}/gui/resources/translations/\")\n qt6_add_translation(TRANSLATIONS_OUT ${TRANSLATIONS})\n\n add_executable(\n \"${PROJECT_NAME}-gui\"\n ${QT_ADDITIONAL_PARAMS}\n fptn-client-gui.cpp\n vpn/vpn_client.h\n vpn/vpn_client.cpp\n vpn/http/client.h\n vpn/http/client.cpp\n routing/route_manager.h\n routing/route_manager.cpp\n config/config_file.cpp\n config/config_file.h\n gui/tray/tray.h\n gui/tray/tray.cpp\n gui/speedwidget/speedwidget.h\n gui/speedwidget/speedwidget.cpp\n gui/settingswidget/settings.h\n gui/settingswidget/settings.cpp\n gui/settingsmodel/settingsmodel.h\n gui/settingsmodel/settingsmodel.cpp\n gui/tokendialog/tokendialog.h\n gui/tokendialog/tokendialog.cpp\n gui/translations/translations.h\n gui/translations/translations.cpp\n gui/sni_manager/sni_manager.h\n gui/sni_manager/sni_manager.cpp\n gui/sni_autoscan_dialog/sni_autoscan_dialog.h\n gui/sni_autoscan_dialog/sni_autoscan_dialog.cpp\n gui/server_menu_item_widget/server_menu_item_widget.h\n gui/server_menu_item_widget/server_menu_item_widget.cpp\n gui/style/style.h\n gui/style/style.cpp\n gui/autostart/autostart.h\n gui/autoupdate/autoupdate.h\n plugins/split/tunneling.h\n plugins/split/tunneling.cpp\n plugins/blacklist/domain_blacklist.h\n plugins/blacklist/domain_blacklist.cpp\n utils/windows/vpn_conflict.h\n utils/macos/admin.h\n utils/speed_estimator/speed_estimator.cpp\n utils/speed_estimator/speed_estimator.h\n utils/speed_estimator/server_info.h\n ${PROJECT_RESOURCES}\n ${TRANSLATIONS_OUT})\n\n target_link_libraries(\n \"${PROJECT_NAME}-gui\"\n PRIVATE ZLIB::ZLIB\n Boost::boost\n Boost::random\n Boost::filesystem\n Boost::process\n Boost::locale\n OpenSSL::SSL\n OpenSSL::Crypto\n argparse::argparse\n spdlog::spdlog\n fmt::fmt\n PcapPlusPlus::PcapPlusPlus\n Qt6::Core\n Qt6::Gui\n Qt6::Widgets\n Qt6::Network\n Qt6::Concurrent\n libidn2::libidn2\n re2::re2\n fptn-protocol-lib_static\n httplib::httplib\n \"${TUNTAP_LIB}\"\n \"${BROTLI_DEC_LIB}\"\n \"${BROTLI_COMMON_LIB}\"\n \"${PLATFORM_SPECIFIC_LIBS}\")\n set_target_properties(\"${PROJECT_NAME}-gui\" PROPERTIES AUTOMOC ON)\nendif()\n" }, { "path": "src/fptn-client/config/config_file.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"config/config_file.h\"\n\n#include \n#include \n#include \n\n#include \n\n#include \"common/utils/base64.h\"\n#include \"common/utils/utils.h\"\n\n#include \"utils/brotli/brotli.h\"\n\nusing fptn::utils::speed_estimator::ServerInfo;\n\nnamespace fptn::config {\n\nConfigFile::ConfigFile(std::string sni,\n fptn::protocol::https::CensorshipStrategy censorship_strategy)\n : sni_(std::move(sni)),\n censorship_strategy_(censorship_strategy),\n version_(0) {} // NOLINT(whitespace/indent_namespace)\n\nConfigFile::ConfigFile(std::string token,\n std::string sni,\n fptn::protocol::https::CensorshipStrategy censorship_strategy)\n : token_(std::move(token)),\n sni_(std::move(sni)),\n censorship_strategy_(censorship_strategy),\n version_(0) {} // NOLINT(whitespace/indent_namespace)\n\nbool ConfigFile::AddServer(const ServerInfo& s) {\n servers_.push_back(s);\n return true;\n}\n\nstd::optional ConfigFile::GetServer(\n const std::string& server_name) const {\n const std::string prepared_server_name =\n fptn::common::utils::Trim(fptn::common::utils::ToLowerCase(server_name));\n\n if (server_name.empty()) {\n return std::nullopt;\n }\n\n auto it = std::ranges::find_if(\n servers_, [&prepared_server_name](\n const fptn::utils::speed_estimator::ServerInfo& server) {\n return fptn::common::utils::Trim(fptn::common::utils::ToLowerCase(\n server.name)) == prepared_server_name;\n });\n if (it != servers_.end()) {\n return *it;\n }\n return std::nullopt;\n}\n\nbool ConfigFile::Parse() {\n try {\n if (token_.empty()) {\n throw std::runtime_error(\"Token is empty\");\n }\n std::string token_data;\n if (token_.starts_with(\"fptnb:\") || token_.starts_with(\"fptnb//\")) {\n // Brotli\n const std::string compressed_data = fptn::common::utils::base64::decode(\n fptn::common::utils::RemoveSubstring(\n token_, {\"fptnb:\", \"fptnb//\", \" \", \"\\n\", \"\\r\", \"\\t\", \"=\"}));\n token_data = fptn::utils::brotli::Decompress(compressed_data);\n } else {\n const std::string sanitized_token = fptn::common::utils::RemoveSubstring(\n token_, {\"fptn://\", \"fptn:\", \" \", \"\\n\", \"\\r\", \"\\t\", \"=\"});\n token_data = fptn::common::utils::base64::decode(sanitized_token);\n }\n\n const auto config = nlohmann::json::parse(token_data);\n version_ = config.at(\"version\").get();\n service_name_ = config.at(\"service_name\").get();\n username_ = config.at(\"username\").get();\n password_ = config.at(\"password\").get();\n for (const auto& server : config.at(\"servers\")) {\n ServerInfo s(server.at(\"name\").get(),\n server.at(\"host\").get(), server.at(\"port\").get(),\n server.at(\"md5_fingerprint\").get());\n servers_.push_back(s);\n }\n if (servers_.empty()) {\n throw std::runtime_error(\"Server list is empty!\");\n }\n return true;\n } catch (const nlohmann::json::exception& e) {\n throw std::runtime_error(std::string(\"JSON parsing error: \") + e.what() +\n \". Try to update your token\");\n } catch (const std::exception& e) {\n throw std::runtime_error(std::string(\"Token parsing error: \") + e.what());\n }\n}\n\nServerInfo ConfigFile::FindFastestServer(int timeout_sec) const {\n return fptn::utils::speed_estimator::FindFastestServer(\n sni_, servers_, censorship_strategy_, timeout_sec);\n}\n\nstd::uint64_t ConfigFile::GetDownloadTimeMs(const ServerInfo& server,\n const std::string& sni,\n int timeout,\n const std::string& md5_fingerprint) {\n return fptn::utils::speed_estimator::GetDownloadTimeMs(\n server, sni, timeout, md5_fingerprint, censorship_strategy_);\n}\n\nint ConfigFile::GetVersion() const noexcept { return version_; }\n\nconst std::string& ConfigFile::GetServiceName() const noexcept {\n return service_name_;\n}\n\nconst std::string& ConfigFile::GetUsername() const noexcept {\n return username_;\n}\n\nconst std::string& ConfigFile::GetPassword() const noexcept {\n return password_;\n}\n\nconst std::vector& ConfigFile::GetServers() const noexcept {\n return servers_;\n}\n} // namespace fptn::config\n" }, { "path": "src/fptn-client/config/config_file.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include \"fptn-client/utils/speed_estimator/server_info.h\"\n#include \"fptn-client/utils/speed_estimator/speed_estimator.h\"\n#include \"fptn-protocol-lib/https/censorship_strategy.h\"\n\nnamespace fptn::config {\nclass ConfigFile final {\n public:\n explicit ConfigFile(std::string sni,\n fptn::protocol::https::CensorshipStrategy censorship_strategy);\n explicit ConfigFile(std::string token,\n std::string sni,\n fptn::protocol::https::CensorshipStrategy censorship_strategy);\n\n bool Parse();\n fptn::utils::speed_estimator::ServerInfo FindFastestServer(\n int timeout_sec) const;\n std::uint64_t GetDownloadTimeMs(\n const fptn::utils::speed_estimator::ServerInfo& server,\n const std::string& sni,\n int timeout,\n const std::string& md5_fingerprint);\n\n bool AddServer(const fptn::utils::speed_estimator::ServerInfo& s);\n\n std::optional GetServer(\n const std::string& server_name) const;\n\n int GetVersion() const noexcept;\n const std::string& GetServiceName() const noexcept;\n const std::string& GetUsername() const noexcept;\n const std::string& GetPassword() const noexcept;\n const std::vector& GetServers()\n const noexcept;\n\n private:\n const std::string token_;\n const std::string sni_;\n const fptn::protocol::https::CensorshipStrategy censorship_strategy_;\n\n int version_;\n std::string service_name_;\n std::string username_;\n std::string password_;\n std::vector servers_;\n};\n} // namespace fptn::config\n" }, { "path": "src/fptn-client/fptn-client-cli.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n\n#if defined(__linux__) || defined(__APPLE__)\n#include // NOLINT(build/include_order)\n#endif\n\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/logger/logger.h\"\n#include \"common/network/ip_address.h\"\n#include \"common/network/net_interface.h\"\n\n#include \"config/config_file.h\"\n#include \"fptn-protocol-lib/https/obfuscator/methods/detector.h\"\n#include \"fptn-protocol-lib/time/time_provider.h\"\n#include \"plugins/blacklist/domain_blacklist.h\"\n#include \"routing/route_manager.h\"\n#include \"utils/signal/main_loop.h\"\n#include \"vpn/vpn_client.h\"\n\nint main(int argc, char* argv[]) {\n#if defined(__linux__) || defined(__APPLE__)\n if (geteuid() != 0) {\n std::cerr << \"You must be root to run this program.\" << std::endl;\n return EXIT_FAILURE;\n }\n#endif\n try {\n const std::set bypass_methods = {\"obfuscation\",\n /* chrome */\n \"sni-reality-chrome147\", \"sni-reality-chrome146\",\n \"sni-reality-chrome145\",\n /* Firefox */\n \"sni-reality-firefox149\",\n /* Yandex */\n \"sni-reality-yandex26\", \"sni-reality-yandex25\", \"sni-reality-yandex24\",\n /* Safari */\n \"sni-reality-safari26\"};\n const std::set tunnel_modes = {\"exclude\", \"include\"};\n\n using fptn::protocol::https::obfuscator::GetObfuscatorByName;\n using fptn::protocol::https::obfuscator::GetObfuscatorNames;\n\n argparse::ArgumentParser args(\"fptn-client\", FPTN_VERSION);\n // Required arguments\n args.add_argument(\"--access-token\").required().help(\"Access token\");\n // Optional arguments\n args.add_argument(\"--out-network-interface\")\n .default_value(\"\")\n .help(\"Network out interface\");\n args.add_argument(\"--gateway-ip\")\n .default_value(\"\")\n .help(\"Your default gateway IPv4 address\");\n args.add_argument(\"--gateway-ipv6\")\n .default_value(\"\")\n .help(\"Your default gateway IPv6 address\");\n args.add_argument(\"--preferred-server\")\n .default_value(\"\")\n .help(\"Preferred server name (case-insensitive)\");\n args.add_argument(\"--tun-interface-name\")\n .default_value(\"tun0\")\n .help(\"Network interface name\");\n args.add_argument(\"--tun-interface-ip\")\n .default_value(FPTN_CLIENT_DEFAULT_ADDRESS_IP4)\n .help(\"Network interface IPv4 address\");\n args.add_argument(\"--tun-interface-ipv6\")\n .default_value(FPTN_CLIENT_DEFAULT_ADDRESS_IP6)\n .help(\"Network interface IPv6 address\");\n args.add_argument(\"--sni\")\n .default_value(FPTN_DEFAULT_SNI)\n .help(\n \"Domain name for SNI in TLS handshake (used to obfuscate VPN \"\n \"traffic)\");\n args.add_argument(\"--blacklist-domains\")\n .default_value(FPTN_CLIENT_DEFAULT_BLACKLIST_DOMAINS)\n .help(\n \"Completely block access to the main domain AND all its \"\n \"subdomains\\n\"\n \"Format: domain:example.com,domain:sub.site.org\\n\"\n \"Example: domain:ria.ru blocks ria.ru and all *.ria.ru sites\");\n // Method to bypass censorship\n args.add_argument(\"--bypass-method\")\n .default_value(\"sni-reality-yandex25\")\n .help(\n \"Method to bypass censorship:\\n\"\n \" obfuscation - TLS obfuscation\\n\"\n \" sni-reality-chrome147 - SNI reality with Chrome 146 handshake\\n\"\n \" sni-reality-chrome146 - SNI reality with Chrome 146 handshake\\n\"\n \" sni-reality-chrome145 - SNI reality with Chrome 145 handshake\\n\"\n \" sni-reality-firefox149 - SNI reality with Firefox 149 \"\n \"handshake\\n\"\n \" sni-reality-yandex26 - SNI reality with Yandex 26 handshake\\n\"\n \" sni-reality-yandex25 - SNI reality with Yandex 25 handshake\\n\"\n \" sni-reality-yandex24 - SNI reality with Yandex 24 handshake\\n\"\n \" sni-reality-safari26 - SNI reality with Safari 26 handshake\\n\")\n .action([&bypass_methods](const std::string& v) {\n if (!bypass_methods.contains(v)) {\n throw std::runtime_error(\n fmt::format(\"Invalid bypass method '{}'. Choose from: {}\", v,\n fmt::join(bypass_methods, \", \")));\n }\n return v;\n });\n // networks\n args.add_argument(\"--exclude-tunnel-networks\")\n .default_value(FPTN_CLIENT_DEFAULT_EXCLUDE_NETWORKS)\n .help(\n \"Networks that always bypass VPN tunnel\\n\"\n \"Traffic to these networks goes directly, never through VPN\\n\"\n \"Format: CIDR notation or IP addresses, comma-separated\\n\"\n \"Example: 10.0.0.0/8,192.168.0.0/16\");\n args.add_argument(\"--include-tunnel-networks\")\n .default_value(\"\")\n .help(\n \"Networks that always use VPN tunnel\\n\"\n \"Traffic to these networks always goes through VPN\\n\"\n \"Format: CIDR notation or IP addresses, comma-separated\\n\"\n \"Example: 172.16.0.0/12,192.168.99.0/24\");\n // Split-tunneling arguments\n args.add_argument(\"--enable-split-tunnel\")\n .help(\n \"Enable split tunneling - allows different traffic routing for \"\n \"different sites.\\n\"\n \"When enabled, you can configure which sites use VPN and which go\"\n \"directly.\\n\"\n \"Use with --split-tunnel-mode and --split-tunnel-domains for \"\n \"configuration.\")\n .default_value(false)\n .nargs(1)\n .action([](const std::string& value) {\n if (value.empty()) {\n return true;\n }\n if (fptn::common::utils::ToLowerCase(value) == \"true\") {\n return true;\n }\n if (fptn::common::utils::ToLowerCase(value) == \"false\") {\n return false;\n }\n throw std::runtime_error(\"Value must be true/false\");\n });\n args.add_argument(\"--split-tunnel-mode\")\n .default_value(\"exclude\")\n .help(\n \"Defines traffic routing strategy for split tunneling.\\n\"\n \"Modes:\\n\"\n \" exclude - Bypass VPN for specified domains, route all other \"\n \"traffic through VPN.\\n\"\n \" include - Route only specified domains through VPN, bypass VPN \"\n \"for all other traffic.\\n\")\n .action([&tunnel_modes](const std::string& v) {\n if (!tunnel_modes.contains(v)) {\n throw std::runtime_error(\n fmt::format(\"Invalid tunnel mode '{}'. Choose from: {}\", v,\n fmt::join(tunnel_modes, \", \")));\n }\n return v;\n });\n args.add_argument(\"--split-tunnel-domains\")\n .default_value(FPTN_CLIENT_DEFAULT_SPLIT_TUNNEL_DOMAINS)\n .help(\n \"List websites that should either use or bypass VPN\\n\"\n \"\\n\"\n \"How it works:\\n\"\n \" If --tunnel-mode=exclude: VPN skips these sites\\n\"\n \" If --tunnel-mode=include: VPN only for these sites\\n\"\n \"Format: domain:com,domain:another.com,domain:sub.domainname.com\");\n // parse cmd arguments\n try {\n args.parse_args(argc, argv);\n } catch (const std::runtime_error& err) {\n std::cerr << err.what() << std::endl;\n std::cerr << args;\n return EXIT_FAILURE;\n }\n\n if (fptn::logger::init(\"fptn-client-cli\")) {\n SPDLOG_INFO(\"Application started successfully.\");\n } else {\n std::cerr << \"Logger initialization failed. Exiting application.\"\n << std::endl;\n return EXIT_FAILURE;\n }\n\n /* parse cmd args */\n const auto out_network_interface_name =\n args.get(\"--out-network-interface\");\n\n const auto param_gateway_ip = args.get(\"--gateway-ip\");\n const auto gateway_ip =\n fptn::common::network::IPv4Address::Create(param_gateway_ip);\n\n const auto param_gateway_ipv6 = args.get(\"--gateway-ipv6\");\n const auto gateway_ipv6 =\n fptn::common::network::IPv6Address::Create(param_gateway_ipv6);\n\n const auto preferred_server = args.get(\"--preferred-server\");\n\n const auto tun_interface_name =\n args.get(\"--tun-interface-name\");\n const auto tun_interface_address_ipv4 =\n fptn::common::network::IPv4Address::Create(\n args.get(\"--tun-interface-ip\"));\n const auto tun_interface_address_ipv6 =\n fptn::common::network::IPv6Address::Create(\n args.get(\"--tun-interface-ipv6\"));\n const auto sni = args.get(\"--sni\");\n\n /* check gateway address */\n const auto using_gateway_ip =\n gateway_ip.IsEmpty()\n ? fptn::routing::GetDefaultGatewayIPAddress()\n : fptn::common::network::IPv4Address::Create(gateway_ip);\n const auto using_gateway_ipv6 =\n gateway_ipv6.IsEmpty()\n ? fptn::routing::GetDefaultGatewayIPv6Address()\n : fptn::common::network::IPv6Address::Create(gateway_ipv6);\n if (using_gateway_ip.IsEmpty()) {\n SPDLOG_ERROR(\n \"Unable to find the default gateway IP address. \"\n \"Please check your connection and make sure no other VPN is active. \"\n \"If the error persists, specify the gateway address in the FPTN \"\n \"settings using your router's IP \"\n \"address with the \\\"--gateway-ip\\\" option. If the issue \"\n \"remains unresolved, please contact the developer via Telegram \"\n \"@fptn_chat.\");\n return EXIT_FAILURE;\n }\n\n const auto bypass_method = args.get(\"--bypass-method\");\n fptn::protocol::https::CensorshipStrategy censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeYandex25;\n if (bypass_method == \"obfuscation\") {\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kTlsObfuscator;\n }\n /* Chrome */\n else if (bypass_method == \"sni-reality-chrome147\") {\n SPDLOG_INFO(\"Using Chrome 147 handshake for censorship bypass\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeChrome147;\n } else if (bypass_method == \"sni-reality-chrome146\") {\n SPDLOG_INFO(\"Using Chrome 146 handshake for censorship bypass\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeChrome146;\n } else if (bypass_method == \"sni-reality-chrome145\") {\n SPDLOG_INFO(\"Using Chrome 144 handshake for censorship bypass\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeChrome145;\n }\n /* Firefox */\n else if (bypass_method == \"sni-reality-firefox149\") {\n SPDLOG_INFO(\"Using Firefox 149 handshake for censorship bypass\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeFirefox149;\n }\n /* Yandex */\n else if (bypass_method == \"sni-reality-yandex26\") {\n SPDLOG_INFO(\"Using Yandex 26 handshake for censorship bypass\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeYandex26;\n } else if (bypass_method == \"sni-reality-yandex25\") {\n SPDLOG_INFO(\"Using Yandex 25 handshake for censorship bypass\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeYandex25;\n } else if (bypass_method == \"sni-reality-yandex24\") {\n SPDLOG_INFO(\"Using Yandex 25 handshake for censorship bypass\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeYandex25;\n }\n /* Safari */\n else if (bypass_method == \"sni-reality-safari26\") {\n SPDLOG_INFO(\"Using Safari 26 handshake for censorship bypass\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeSafari26;\n }\n\n /* parse network lists */\n const auto exclude_networks_str =\n args.get(\"--exclude-tunnel-networks\");\n const auto include_networks_str =\n args.get(\"--include-tunnel-networks\");\n\n const std::vector exclude_networks =\n fptn::common::utils::SplitCommaSeparated(exclude_networks_str);\n const std::vector include_networks =\n fptn::common::utils::SplitCommaSeparated(include_networks_str);\n\n /* parse split-tunneling parameters */\n const bool enable_split_tunnel = args.get(\"--enable-split-tunnel\");\n const auto tunnel_mode = args.get(\"--split-tunnel-mode\");\n const auto split_domains_str =\n args.get(\"--split-tunnel-domains\");\n const auto blacklist_domains_str =\n args.get(\"--blacklist-domains\");\n\n const std::vector split_domains =\n fptn::common::utils::SplitCommaSeparated(split_domains_str);\n const std::vector blacklist_domains =\n fptn::common::utils::SplitCommaSeparated(blacklist_domains_str);\n\n /* check config */\n const auto access_token = args.get(\"--access-token\");\n fptn::config::ConfigFile config(access_token, sni, censorship_strategy);\n fptn::utils::speed_estimator::ServerInfo selected_server;\n try {\n config.Parse();\n if (!preferred_server.empty()) {\n auto server_opt = config.GetServer(preferred_server);\n if (server_opt.has_value()) {\n selected_server = std::move(*server_opt);\n } else {\n SPDLOG_WARN(\"Server '{}' does not exist! Check your token!\",\n preferred_server);\n selected_server = config.FindFastestServer(15);\n }\n } else {\n selected_server = config.FindFastestServer(15);\n }\n } catch (const std::runtime_error& err) {\n SPDLOG_ERROR(\"Config error: {}\", err.what());\n return EXIT_FAILURE;\n }\n const auto server_ip = fptn::routing::ResolveDomain(selected_server.host);\n if (server_ip.IsEmpty()) {\n SPDLOG_ERROR(\"DNS resolve error: {}\", selected_server.host);\n return EXIT_FAILURE;\n }\n\n SPDLOG_INFO(\n \"\\n--- Starting client ---\\n\"\n \"VERSION: {}\\n\"\n \"SELECTED SERVER: {}\\n\"\n \"SNI: {}\\n\"\n \"GATEWAY IP: {}\\n\"\n \"NETWORK INTERFACE: {}\\n\"\n \"VPN SERVER NAME: {}\\n\"\n \"VPN SERVER IP: {}\\n\"\n \"VPN SERVER PORT: {}\\n\"\n \"TUN INTERFACE IPv4: {}\\n\"\n \"TUN INTERFACE IPv6: {}\\n\"\n \"BYPASS-METHOD: {}\\n\"\n \"EXCLUDE NETWORKS: {}\\n\"\n \"INCLUDE NETWORKS: {}\\n\"\n \"SPLIT TUNNEL: {}\\n\"\n \"TUNNEL MODE: {}\\n\"\n \"TUNNEL DOMAINS: {}\\n\"\n \"BLACKLIST DOMAINS: {}\\n\",\n FPTN_VERSION, selected_server.name, sni, using_gateway_ip.ToString(),\n out_network_interface_name, selected_server.name, selected_server.host,\n selected_server.port, tun_interface_address_ipv4.ToString(),\n tun_interface_address_ipv6.ToString(), bypass_method,\n exclude_networks_str, include_networks_str,\n enable_split_tunnel ? \"enabled\" : \"disabled\", tunnel_mode,\n split_domains_str, blacklist_domains_str);\n\n /* auth & dns */\n auto http_client = std::make_unique(server_ip,\n selected_server.port, tun_interface_address_ipv4,\n tun_interface_address_ipv6, sni, selected_server.md5_fingerprint,\n censorship_strategy);\n const bool status =\n http_client->Login(config.GetUsername(), config.GetPassword());\n if (!status) {\n SPDLOG_ERROR(\"The username or password you entered is incorrect\");\n return EXIT_FAILURE;\n }\n const auto [dnsServerIPv4, dnsServerIPv6] = http_client->GetDns();\n if (dnsServerIPv4.IsEmpty() || dnsServerIPv6.IsEmpty()) {\n SPDLOG_ERROR(\"DNS server error! Check your connection!\");\n return EXIT_FAILURE;\n }\n\n /* tun interface */\n auto virtual_network_interface =\n std::make_unique(\n fptn::common::network::TunInterface::Config{\n .name = tun_interface_name,\n .ipv4_addr = tun_interface_address_ipv4,\n .ipv4_netmask = 30, // IPv4 netmask\n .ipv6_addr = tun_interface_address_ipv6,\n .ipv6_netmask = 126 // IPv6 netmask\n });\n\n /* route manager */\n auto route_manager = std::make_shared(\n out_network_interface_name, tun_interface_name, server_ip,\n dnsServerIPv4, dnsServerIPv6, using_gateway_ip, using_gateway_ipv6,\n tun_interface_address_ipv4, tun_interface_address_ipv6\n#if _WIN32\n ,\n false\n#endif\n ); // NOLINT\n\n /* plugins */\n std::vector client_plugins;\n if (!blacklist_domains.empty()) {\n auto blacklist_plugin = std::make_unique(\n blacklist_domains, route_manager);\n client_plugins.push_back(std::move(blacklist_plugin));\n }\n\n if (enable_split_tunnel) {\n const auto policy = tunnel_mode == \"exclude\"\n ? fptn::routing::RoutingPolicy::kExcludeFromVpn\n : fptn::routing::RoutingPolicy::kIncludeInVpn;\n auto split_tunnel_plugin = std::make_unique(\n split_domains, route_manager, policy);\n client_plugins.push_back(std::move(split_tunnel_plugin));\n }\n\n /* vpn client */\n fptn::vpn::VpnClient vpn_client(std::move(http_client),\n std::move(virtual_network_interface), dnsServerIPv4, dnsServerIPv6,\n std::move(client_plugins));\n vpn_client.Start();\n\n // Update tun name to actual device name (may differ on macOS)\n route_manager->UpdateTunInterfaceName(vpn_client.GetInterfaceName());\n\n // Wait for the WebSocket tunnel to establish\n constexpr std::chrono::seconds kTimeout(10);\n const auto start = std::chrono::steady_clock::now();\n while (!vpn_client.IsStarted()) {\n if (std::chrono::steady_clock::now() - start > kTimeout) {\n SPDLOG_ERROR(\"Couldn't open websocket tunnel!\");\n return EXIT_FAILURE;\n }\n std::this_thread::sleep_for(std::chrono::microseconds(200));\n }\n\n /* apply mandatory network routes */\n route_manager->Apply();\n if (!exclude_networks.empty()) {\n route_manager->AddExcludeNetworks(exclude_networks);\n }\n if (!include_networks.empty()) {\n route_manager->AddIncludeNetworks(include_networks);\n }\n\n /* start event loop */\n fptn::utils::WaitForSignal(vpn_client);\n\n /* clean */\n route_manager->Clean();\n vpn_client.Stop();\n spdlog::shutdown();\n return EXIT_SUCCESS;\n } catch (const std::exception& ex) {\n SPDLOG_ERROR(\"An error occurred: {}. Exiting...\", ex.what());\n } catch (...) {\n SPDLOG_ERROR(\"An unknown error occurred. Exiting...\");\n }\n return EXIT_FAILURE;\n}\n" }, { "path": "src/fptn-client/fptn-client-gui.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#if defined(__linux__) || defined(__APPLE__)\n#include \n#endif\n\n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/logger/logger.h\"\n\n#include \"gui/tray/tray.h\"\n\n#ifdef __APPLE__\n#include \"utils/macos/admin.h\"\n#endif\n\nnamespace {\n#if defined(__linux__) || defined(__APPLE__)\nvoid SignalHandler(int) { QApplication::quit(); }\n#elif defined(_WIN32)\nBOOL WINAPI SignalHandler(DWORD ctrlType) {\n if (ctrlType == CTRL_C_EVENT || ctrlType == CTRL_BREAK_EVENT) {\n qApp->quit();\n return TRUE;\n }\n return FALSE;\n}\n#else\n#error \"Unsupported platform\"\n#endif\n\n} // namespace\n\nint main(int argc, char* argv[]) {\n try {\n#ifdef __linux__\n if (geteuid() != 0) {\n std::cerr << \"You must be root to run this program.\\n\";\n return EXIT_FAILURE;\n }\n#elif defined(__APPLE__)\n if (!fptn::utils::macos::RestartApplicationWithAdminRights()) {\n return EXIT_FAILURE; // Failed to get admin rights\n }\n#endif\n\n // Initialize logger\n if (fptn::logger::init(\"fptn-client-gui\")) {\n SPDLOG_INFO(\"Application started successfully.\");\n } else {\n std::cerr << \"Logger initialization failed. Exiting application.\"\n << std::endl;\n return EXIT_FAILURE;\n }\n\n // Setup signal handler\n#if defined(__APPLE__) || defined(__linux__)\n std::signal(SIGINT, SignalHandler);\n std::signal(SIGHUP, SignalHandler);\n std::signal(SIGTERM, SignalHandler);\n std::signal(SIGQUIT, SignalHandler);\n#if __linux__\n std::signal(SIGPWR, SignalHandler);\n#endif\n#elif defined(_WIN32)\n SetConsoleCtrlHandler(SignalHandler, TRUE);\n#endif\n\n // Initialize GUI app\n QApplication::setDesktopSettingsAware(true);\n QApplication::setQuitOnLastWindowClosed(false);\n#if __APPLE__\n QCoreApplication::setSetuidAllowed(true);\n QApplication::setAttribute(Qt::AA_MacDontSwapCtrlAndMeta, false);\n#elif defined(_WIN32)\n QApplication::setStyle(QStyleFactory::create(\"windowsvista\"));\n#endif\n\n QApplication app(argc, argv);\n const auto settings = std::make_shared(\n QMap{{\"en\", \"English\"}, {\"ru\", \"Русский\"}});\n\n // Start GUI app\n fptn::gui::TrayApp tray(settings);\n\n // NOLINTNEXTLINE(readability-static-accessed-through-instance)\n const int code = app.exec();\n\n // Clean resources\n tray.stop();\n spdlog::shutdown();\n return code;\n } catch (const std::exception& ex) {\n SPDLOG_ERROR(\"An error occurred: {}. Exiting...\", ex.what());\n } catch (...) {\n SPDLOG_ERROR(\"An unknown error occurred. Exiting...\");\n }\n return EXIT_FAILURE;\n}\n" }, { "path": "src/fptn-client/gui/autostart/autostart.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"common/system/command.h\"\n\n#if _WIN32\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#endif\n\nnamespace fptn::gui::autostart {\n\n#if __APPLE__\ninline std::string GetMacOsPlistPath() {\n const char* home_env = std::getenv(\"HOME\");\n if (nullptr == home_env) {\n return {};\n }\n const std::string home = home_env;\n const auto path =\n std::filesystem::path(home) / \"Library\" / \"LaunchAgents\" / \"org.fptn.vpn\";\n return path.string();\n}\n#elif __linux__\ninline std::string getLinuxDesktopEntryPath() {\n return \"/etc/xdg/autostart/fptn-autostart.desktop\";\n}\n#elif _WIN32\ninline std::string getWindowsFullPath() {\n wchar_t fptn_path[MAX_PATH] = {};\n if (GetModuleFileNameW(nullptr, fptn_path, MAX_PATH) == 0) {\n const DWORD code = GetLastError();\n SPDLOG_ERROR(\"Failed to retrieve the path. Error code: {}\", code);\n return {};\n }\n\n const std::filesystem::path fptnExe(fptn_path);\n const auto batPath = fptnExe.parent_path() / \"FptnClient.bat\";\n return batPath.string();\n}\n\ninline std::string getWindowsStartupFolder() {\n wchar_t path[MAX_PATH] = {};\n if (!SUCCEEDED(SHGetFolderPathW(nullptr, CSIDL_STARTUP, nullptr, 0, path))) {\n const DWORD code = GetLastError();\n SPDLOG_ERROR(\n \"Failed to retrieve the startup folder path. Error code: {}\", code);\n return {};\n }\n\n // Convert wide string to UTF-8 using Windows API\n int utf8_size =\n WideCharToMultiByte(CP_UTF8, 0, path, -1, nullptr, 0, nullptr, nullptr);\n if (utf8_size == 0) {\n const DWORD code = GetLastError();\n SPDLOG_ERROR(\"Failed to convert path to UTF-8. Error code: {}\", code);\n return {};\n }\n\n std::string utf8_path(utf8_size, '\\0');\n WideCharToMultiByte(\n CP_UTF8, 0, path, -1, &utf8_path[0], utf8_size, nullptr, nullptr);\n utf8_path.resize(utf8_size - 1); // Remove null terminator\n return utf8_path;\n}\n#endif\n\ninline bool enable() {\n#if __APPLE__\n// const std::string autostart_template =\n// R\"PLIST(\n// \n// \n// \n// Label\n// org.fptn.vpn\n//\n// AssociatedBundleIdentifiers\n// \n// org.fptn.vpn\n// \n//\n// DisplayName\n// FptnClient\n//\n// ProgramArguments\n// \n// {}\n// \n//\n// UserName\n// root\n//\n// RunAtLoad\n// \n//\n// KeepAlive>\n// \n//\n// SessionCreate\n// \n//\n// EnableTransactions\n// \n// \n// \n// )PLIST\";\n// const auto script_path = std::filesystem::current_path() / \"Contents\" /\n// \"MacOS\" / \"fptn-client-gui-wrapper.sh\";\n// const auto plist = fmt::format(autostart_template, script_path.u8string());\n// const std::string plist_path = GetMacOsPlistPath();\n// if (plist_path.empty()) {\n// SPDLOG_ERROR(\"Failed to get the macOS plist path.\");\n// return false;\n// }\n// SPDLOG_INFO(\"Plist path: {}\", plist_path);\n// std::ofstream file(plist_path);\n// if (file.is_open()) {\n// file << plist;\n// file.close();\n// SPDLOG_INFO(\"Plist file written successfully at {}\", plist_path);\n// } else {\n// SPDLOG_ERROR(\"Unable to write to plist file at {}\", plist_path);\n// return false;\n// }\n// const std::string command =\n// fmt::format(R\"(launchctl load \"{}\" )\", plist_path);\n// if (!fptn::common::system::command::run(command)) {\n// SPDLOG_ERROR(\"Failed to load plist using launchctl.\n// Command: {}\", command);\n// return false;\n// }\n#elif __linux__\n const std::string entry = R\"PLIST([Desktop Entry]\n Name=FptnClient\n Terminal=false\n Exec=/usr/bin/fptn-client\n Type=Application\n Icon=/path/icon.png\n Categories=Utility;\n )PLIST\";\n\n const auto path = std::filesystem::path(getLinuxDesktopEntryPath());\n if (path.empty()) {\n SPDLOG_ERROR(\"Failed to get the macOS plist path.\");\n return false;\n }\n std::ofstream file(path);\n if (file.is_open()) {\n file << entry;\n file.close();\n } else {\n return false;\n }\n#elif _WIN32\n // const std::string fptn_path = getWindowsFullPath();\n // const std::string windowsStartupFolder = getWindowsStartupFolder();\n // if (fptn_path.empty() || windowsStartupFolder.empty()) {\n // return false;\n // }\n // // SET REG\n // const std::string command = fmt::format(\n // R\"(reg add \"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\" /v\n // \"FptnClient\" /t REG_SZ /d \"{}\" /f )\", fptn_path\n // );\n // if (!fptn::common::system::command::run(command)) {\n // SPDLOG_ERROR(\"Error running command: {}\", command);\n // return false;\n// }\n// SET SHORTCUT\n// const std::filesystem::path shortcutPath =\n// std::filesystem::path(windowsStartupFolder) / \"FptnClient.lnk\"; const\n// std::string powershellCommand = fmt::format(\n// R\"(powershell -Command \"$ws = New-Object -ComObject WScript.Shell; $s =\n// $ws.CreateShortcut('{}'); $s.TargetPath = '{}'; $s.Save();\")\",\n// shortcutPath.u8string(), fptn_path\n// );\n// if (!fptn::common::system::command::run(powershellCommand)) {\n// SPDLOG_ERROR(\"Failed to create shortcut: {}\", powershellCommand);\n// return false;\n// }\n// SPDLOG_INFO(\"Shortcut created successfully at: {}\",\n// shortcutPath.u8string());\n#endif\n SPDLOG_INFO(\"Autostart successfully enabled\");\n return true;\n}\n\ninline bool disable() {\n#if __APPLE__\n const std::string plist_path = GetMacOsPlistPath();\n if (plist_path.empty()) {\n SPDLOG_ERROR(\"Failed to get the macOS plist path.\");\n return false;\n }\n if (std::filesystem::exists(plist_path)) {\n const std::string command =\n fmt::format(R\"(launchctl unload \"{}\" )\", plist_path);\n if (!fptn::common::system::command::run(command)) {\n return false;\n }\n if (!std::filesystem::remove(plist_path)) {\n return false;\n }\n }\n#elif __linux__\n if (std::filesystem::exists(getLinuxDesktopEntryPath())) {\n if (!std::filesystem::remove(getLinuxDesktopEntryPath())) {\n return false;\n }\n }\n#elif _WIN32\n // delete reg\n // const std::string command = R\"(reg delete\n // \"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"FptnClient\" /f )\";\n // if (!fptn::common::system::command::run(command)) {\n // SPDLOG_ERROR(\"Error running command: {}\", command);\n // }\n // delete shortcut\n // const std::string windowsStartupFolder = getWindowsStartupFolder();\n // const std::filesystem::path shortcutPath =\n // std::filesystem::path(windowsStartupFolder) / \"FptnClient.lnk\"; if\n // (std::filesystem::exists(shortcutPath) &&\n // std::filesystem::remove(shortcutPath)) {\n // SPDLOG_INFO(\"Shortcut deleted successfully: {}\",\n // shortcutPath.u8string());\n // } else {\n // SPDLOG_INFO(\"No shortcut found to delete at: {}\",\n // shortcutPath.u8string());\n // }\n#endif\n SPDLOG_INFO(\"Disable autostart\");\n return true;\n}\n} // namespace fptn::gui::autostart\n" }, { "path": "src/fptn-client/gui/autoupdate/autoupdate.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n\n#define CPPHTTPLIB_OPENSSL_SUPPORT\n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include \n#include // NOLINT(build/include_order)\n\n#include \"fptn-protocol-lib/https/api_client/api_client.h\"\n\nnamespace fptn::gui::autoupdate {\nnamespace version {\ninline std::vector ParseVersion(const std::string& version) {\n std::vector parsed;\n std::stringstream ss(version);\n std::string segment;\n while (std::getline(ss, segment, '.')) {\n parsed.push_back(std::stoi(segment));\n }\n return parsed;\n}\n\ninline int compare(const std::string& version1, const std::string& version2) {\n std::vector v1 = ParseVersion(version1);\n std::vector v2 = ParseVersion(version2);\n\n const std::size_t max_length = (std::max)(v1.size(), v2.size());\n v1.resize(max_length, 0);\n v2.resize(max_length, 0);\n for (size_t i = 0; i < max_length; ++i) {\n if (v1[i] < v2[i]) return -1; // version1 is less than version2\n if (v1[i] > v2[i]) return 1; // version1 is greater than version2\n }\n return 0;\n}\n} // namespace version\n\n#ifdef CPPHTTPLIB_OPENSSL_SUPPORT\ninline std::pair Check() {\n const auto url = fmt::format(\"/repos/{}/{}/releases/latest\",\n FPTN_GITHUB_USERNAME, FPTN_GITHUB_REPOSITORY);\n try {\n httplib::SSLClient cli(\"api.github.com\", 443);\n {\n cli.enable_server_certificate_verification(false); // NEED TO FIX\n cli.set_connection_timeout(5, 0); // 5 seconds\n cli.set_read_timeout(5, 0); // 5 seconds\n cli.set_write_timeout(5, 0); // 5 seconds\n }\n if (auto resp = cli.Get(url)) {\n try {\n const auto msg = nlohmann::json::parse(resp->body);\n if (msg.contains(\"draft\") && msg.contains(\"name\")) {\n const bool draft = msg[\"draft\"];\n const std::string version_name = msg[\"name\"];\n if (!draft && version::compare(FPTN_VERSION, version_name) == -1) {\n return {true, version_name};\n }\n return {false, version_name};\n }\n } catch (const nlohmann::json::parse_error& e) {\n SPDLOG_ERROR(\"autoupdate:check Error parsing JSON response: {} {}\",\n e.what(), resp->body);\n }\n }\n } catch (...) {\n SPDLOG_ERROR(\"unhandled exception\");\n }\n return {false, {}};\n}\n#else\ninline std::pair Check() {\n fptn::protocol::https::HttpsClient cli(\"api.github.com\", 443);\n\n const auto url = fmt::format(\"/repos/{}/{}/releases/latest\",\n FPTN_GITHUB_USERNAME, FPTN_GITHUB_REPOSITORY);\n const auto resp = cli.Get(url);\n\n if (resp.code == 200) {\n try {\n const auto msg = resp.Json();\n if (msg.contains(\"draft\") && msg.contains(\"name\")) {\n const bool draft = msg[\"draft\"];\n const std::string version_name = msg[\"name\"];\n if (!draft && version::compare(FPTN_VERSION, version_name) == -1) {\n return {true, version_name};\n }\n return {false, version_name};\n }\n } catch (const nlohmann::json::parse_error& e) {\n SPDLOG_ERROR(\"autoupdate:check Error parsing JSON response: {} Body: {}\",\n e.what(), resp.body);\n }\n } else {\n SPDLOG_WARN(\"autoupdate:check error: {}\", resp.errmsg);\n }\n return {false, {}};\n}\n#endif\n\n} // namespace fptn::gui::autoupdate\n" }, { "path": "src/fptn-client/gui/resources/resources.qrc", "content": "\n\n \n icons/app.ico\n icons/active.ico\n icons/inactive.ico\n\n icons/ping_green_circle.png\n icons/ping_orange_circle.png\n icons/ping_red_circle.png\n icons/ping_yellow_circle.png\n\n icons/menu_server_list.png\n icons/menu_settings.png\n icons/menu_new_version_download.png\n icons/menu_exit.png\n icons/menu_disconnect.png\n icons/menu_connection.png\n\n translations/fptn_ru.qm\n translations/fptn_en.qm\n \n\n" }, { "path": "src/fptn-client/gui/resources/translations/.gitignore", "content": "*.qm\n" }, { "path": "src/fptn-client/gui/resources/translations/fptn_en.ts", "content": "\n\n\n \n QObject\n \n Connect\n Connect\n \n \n Settings\n Settings\n \n \n Quit\n Quit\n \n \n Connecting...\n Connecting...\n \n \n Disconnecting...\n Disconnecting...\n \n \n Disconnect\n Disconnect\n \n\n \n Upload speed\n Upload speed\n \n \n Download speed\n Download speed\n \n \n \n Unable to find the default gateway IP address. Please check your connection and make sure no other VPN is active. If the error persists, specify the gateway address in the FPTN settings using your router's IP address, and ensure that an active internet interface (adapter) is selected. If the issue remains unresolved, please contact the developer via Telegram @fptn_chat.\n Unable to find the default gateway IP address. Please check your connection and make sure no other VPN is active. If the error persists, specify the gateway address in the FPTN settings using your router's IP address, and ensure that an active internet interface (adapter) is selected. If the issue remains unresolved, please contact the developer via Telegram @fptn_chat.\n \n \n Configuration error\n Configuration error\n \n \n DNS resolution error\n DNS resolution error\n \n \n Connection error\n Connection error\n \n \n Unable to connect to the server. Please use the Telegram bot to generate a new TOKEN with your personal settings, then try again.\n Unable to connect to the server. Please use the Telegram bot to generate a new TOKEN with your personal settings, then try again.\n \n \n DNS server error! Check your connection!\n DNS server error! Check your connection!\n \n\n \n Network Interface (adapter)\n Network Interface (adapter)\n \n \n Gateway IP Address (typically your router's address)\n Gateway IP Address (typically your router's address)\n \n \n Name\n Name\n \n \n User\n User\n \n \n Servers\n Servers\n \n \n Action\n Action\n \n \n Add token\n Add token\n \n \n Save\n Save\n \n \n About\n About\n \n \n Delete\n Delete\n \n \n Version\n Version\n \n \n Save Successful\n Save Successful\n \n \n Data has been successfully saved.\n Data has been successfully saved.\n \n \n Save Failed\n Save Failed\n \n \n An error occurred while saving the data.\n An error occurred while saving the data.\n \n \n Delete Successful\n Delete Successful\n \n \n The data has been successfully removed\n The data has been successfully removed\n \n \n The data has been successfully updated\n The data has been successfully updated\n \n \n Language\n Language\n \n\n \n Smart Connect\n Smart Connect\n \n \n Connection Error\n Connection Error\n \n \n The server is unavailable. Please select another server or use Auto-connect to find the best available server.\n The server is unavailable. Please select another server or use Auto-connect to find the best available server.\n \n \n No servers\n No servers\n \n\n \n Paste your token\n Paste your token\n \n \n Token\n Token\n \n \n OK\n OK\n \n \n Cancel\n Cancel\n \n\n \n Validation Error\n Validation Error\n \n \n Token cannot be empty\n Token cannot be empty\n \n \n Wrong token\n Wrong token\n \n\n \n Close\n Close\n \n\n \n Autostart\n Autostart\n \n \n Auto\n Auto\n \n\n \n New version available\n New version available\n \n\n \n Fake domain to bypass blocking\n Fake domain to bypass blocking\n \n\n \n FPTN_DESCRIPTION\n FPTN is a fully custom-built VPN technology — developed from scratch, including the core protocol, server implementation, and cross-platform clients. It is a non-commercial, open-source project developed by volunteers and designed to bypass censorship. The project's source code is available on GitHub.\n \n\n \n FPTN_WEBSITE_DESCRIPTION\n \n https://storage.googleapis.com/fptn.org/index.html\n ]]>\n \n \n \n FPTN_TELEGRAM_DESCRIPTION\n \n - English Community\n
- Russian Community\n
- Persian Community\n ]]>\n \n \n\n \n Limited access servers\n Limited access servers\n \n\n \n Missing required fields in configuration. Generate and apply a new token.\n Missing required fields in configuration. Generate and apply a new token.\n \n\n \n Failed to connect to the server!\n Failed to connect to the server!\n \n\n \n The VPN connection was unexpectedly closed.\n The VPN connection was unexpectedly closed.\n \n\n \n FPTN Connection Error\n FPTN Connection Error\n \n\n \n VPN Conflict Detected\n VPN Conflict Detected\n \n\n \n A conflicting VPN connection is currently active on your system: %1\nThis may cause network connectivity issues or prevent proper operation of FPTN.\n A conflicting VPN connection is currently active on your system: %1\nThis may cause network connectivity issues or prevent proper operation of FPTN.\n \n\n \n Bypass blocking method\n Bypass blocking method\n \n \n SNI\n Domain spoofing (SNI)\n \n \n OBFUSCATION\n Traffic masking (obfuscation)\n \n \n SNI-REALITY (Generic)\n Domain spoofing\n \n \n SNI-REALITY (Chrome 147)\n Domain spoofing (Chrome 147)\n \n \n SNI-REALITY (Chrome 146)\n Domain spoofing (Chrome 146)\n \n \n SNI-REALITY (Chrome 145)\n Domain spoofing (Chrome 145)\n \n \n SNI-REALITY (Firefox 149)\n Domain spoofing (Firefox 149)\n \n \n SNI-REALITY (Yandex 26)\n Domain spoofing (Yandex 26)\n \n \n SNI-REALITY (Yandex 25)\n Domain spoofing (Yandex 25)\n \n \n SNI-REALITY (Yandex 24)\n Domain spoofing (Yandex 24)\n \n \n SNI-REALITY (Safari 26)\n Domain spoofing (Safari 26)\n \n\n \n Support the project on\n Support the project on\n \n \n Project Sponsors\n Project Sponsors\n \n\n \n Autoscan SNI\n Autoscan SNI\n \n \n All\n All\n \n \n Start\n Start\n \n \n Scan completed\n Scan completed\n \n \n Working SNI found: %1\n Working SNI found: %1\n \n \n No working SNI found.\n No working SNI found.\n \n \n Error\n Error\n \n \n No SNI available for scanning.\n No SNI available for scanning.\n \n \n No servers available for scanning.\n No servers available for scanning.\n \n \n TLS Handshake: %1\n TLS Handshake: %1\n \n \n HTTP Request: %1\n HTTP Request: %1\n \n \n Import SNI file\n Import SNI file\n \n \n Select SNI file\n Select SNI file\n \n \n SNI files (*.sni);;All files (*)\n SNI files (*.sni);;All files (*)\n \n \n File exists\n File exists\n \n \n File \"%1\" already exists. Overwrite?\n File \"%1\" already exists. Overwrite?\n \n \n Success\n Success\n \n \n SNI file imported successfully\n SNI file imported successfully\n \n \n Failed to import SNI file\n Failed to import SNI file\n \n \n Delete this file\n Delete this file\n \n \n No SNI files imported\n No SNI files imported\n \n\n \n Routing\n Routing\n \n \n Blacklist domains\n Blacklist domains\n \n \n Completely block access to the main domain AND all its subdomains. Format: domain:example.com (one per line)\n Completely block access to the main domain AND all its subdomains. Format: domain:example.com (one per line)\n \n \n Exclude tunnel networks\n Exclude tunnel networks\n \n \n Networks that always bypass VPN tunnel. Traffic to these networks goes directly, never through VPN\n Networks that always bypass VPN tunnel. Traffic to these networks goes directly, never through VPN\n \n \n Include tunnel networks\n Include tunnel networks\n \n \n Networks that always use VPN tunnel. Traffic to these networks always goes through VPN\n Networks that always use VPN tunnel. Traffic to these networks always goes through VPN\n \n \n Enable split tunnel\n Enable split tunneling (experimental)\n \n \n When enabled, you can configure which sites use VPN and which go directly.\n When enabled, you can configure which sites use VPN and which go directly.\n \n \n Split tunnel mode\n Split tunnel mode\n \n \n Defines traffic routing strategy for split tunneling.\n Defines traffic routing strategy for split tunneling.\n \n \n Exclude\n Exclude\n \n \n Include\n Include\n \n \n Domains to route through VPN\n Domains to route through VPN\n \n \n Domains to bypass VPN\n Domains to bypass VPN\n \n \n List domains that should bypass VPN tunnel. Only these domains will go through VPN, all other traffic bypasses VPN\n List domains that should bypass VPN tunnel. Only these domains will go through VPN, all other traffic bypasses VPN\n \n \n List websites that should bypass VPN tunnel. These domains will go directly, all other traffic uses VPN\n List websites that should bypass VPN tunnel. These domains will go directly, all other traffic uses VPN\n \n \n Enable advanced DNS management\n Enable advanced DNS management (experimental)\n \n \n Enables advanced DNS configuration to prevent leaks. Recommended when using split tunneling. Use with caution!\n Enables advanced DNS configuration to prevent leaks. Recommended when using split tunneling. Use with caution!\n \n \n\n" }, { "path": "src/fptn-client/gui/resources/translations/fptn_ru.ts", "content": "\n\n\n \n QObject\n \n Connect\n Подключиться\n \n \n Settings\n Настройки\n \n \n Quit\n Выход\n \n \n Connecting...\n Подключение...\n \n \n Disconnecting...\n Отключение...\n \n \n Disconnect\n Отключить\n \n\n \n Upload speed\n Скорость выгрузки\n \n \n Download speed\n Скорость зарузки\n \n \n \n Unable to find the default gateway IP address. Please check your connection and make sure no other VPN is active. If the error persists, specify the gateway address in the FPTN settings using your router's IP address, and ensure that an active internet interface (adapter) is selected. If the issue remains unresolved, please contact the developer via Telegram @fptn_chat.\n Не удалось найти IP-адрес по умолчанию для шлюза. Пожалуйста, проверьте ваше соединение и убедитесь, что у вас не активен другой VPN. Если ошибка сохраняется, укажите адрес шлюза в настройках FPTN, используя IP-адрес вашего маршрутизатора, и убедитесь, что выбран активный интернет-интерфейс (адаптер). Если проблема не устранена, обратитесь к разработчику через Telegram @fptn_chat.\n \n \n Configuration error\n Ошибка конфигурации\n \n \n DNS resolution error\n Ошибка разрешения DNS\n \n \n Connection error\n Ошибка подключения\n \n \n Unable to connect to the server. Please use the Telegram bot to generate a new TOKEN with your personal settings, then try again.\n Невозможно подключиться к серверу. Пожалуйста, сгенерируйте новый TOKEN с вашими персональными настройками через Telegram-бота и повторите попытку.\n \n \n DNS server error! Check your connection!\n Ошибка DNS сервера! Проверьте ваше соединение!\n \n\n \n Network Interface (adapter)\n Сетевой интерфейс (адаптер)\n \n \n Gateway IP Address (typically your router's address)\n IP-адрес шлюза (обычно адрес роутера)\n \n \n Name\n Имя\n \n \n User\n Пользователь\n \n \n Servers\n Серверы\n \n \n Action\n Действие\n \n \n Add token\n Добавить токен\n \n \n Save\n Сохранить\n \n \n About\n О программе\n \n \n Delete\n Удалить\n \n \n Version\n Версия\n \n \n Save Successful\n Сохранение прошло успешно\n \n \n Data has been successfully saved.\n Данные успешно сохранены.\n \n \n Save Failed\n Ошибка сохранения\n \n \n An error occurred while saving the data.\n Произошла ошибка при сохранении данных.\n \n \n Delete Successful\n Успешное удаление\n \n \n The data has been successfully removed\n Данные были успешно удалены\n \n \n The data has been successfully updated\n Данные были успешно обновлены\n \n \n Language\n Язык\n \n\n \n Smart Connect\n Умное подключение\n \n \n Connection Error\n Ошибка подключения\n \n \n The server is unavailable. Please select another server or use Auto-connect to find the best available server.\n Сервер недоступен. Пожалуйста, выберите другой сервер или используйте функцию автоподключения для выбора лучшего доступного сервера.\n \n \n No servers\n Нет серверов\n \n\n \n Paste your token\n Вставьте ваш токен\n \n \n Token\n Токен\n \n \n OK\n OK\n \n \n Cancel\n Отмена\n \n\n \n Validation Error\n Ошибка валидации\n \n \n Token cannot be empty\n Токен не может быть пустым\n \n \n Wrong token\n Неправильный токен\n \n\n \n Close\n Закрыть\n \n\n \n Autostart\n Автостарт\n \n \n Auto\n Автоматически\n \n\n \n New version available\n Доступна новая версия\n \n\n \n Fake domain to bypass blocking\n Фейковый домен для обхода блокировок\n \n\n \n FPTN_DESCRIPTION\n FPTN — это полностью разработанная с нуля технология VPN, включая собственный протокол, сервер и кроссплатформенные клиенты. Это некоммерческий проект с открытым исходным кодом, развиваемый волонтерами и предназначенный для обхода цензуры. Исходный код проекта доступен на Github.\n \n\n \n FPTN_WEBSITE_DESCRIPTION\n \n fptn.org\n ]]>\n \n \n\n \n FPTN_TELEGRAM_DESCRIPTION\n \n - Русскоязычное сообщество\n
- Англоязычное сообщество\n
- Персидское сообщество\n ]]>\n \n \n\n \n Limited access servers\n Серверы с ограниченным доступом\n \n\n \n Missing required fields in configuration. Generate and apply a new token.\n Конфиг не содержит необходимых полей. Пожалуйста, сгенерируйте и используйте новый токен.\n \n\n \n Failed to connect to the server!\n Не удалось подключиться к серверу!\n \n\n \n The VPN connection was unexpectedly closed.\n VPN-соединение было неожиданно разорвано.\n \n\n \n FPTN Connection Error\n FPTN Ошибка подключения\n \n\n \n VPN Conflict Detected\n Обнаружен конфликт VPN\n \n\n \n A conflicting VPN connection is currently active on your system: %1\nThis may cause network connectivity issues or prevent proper operation of FPTN.\n Обнаружено конфликтующее VPN-соединение: %1\nЭто может вызвать проблемы с подключением к сети или нарушить работу FPTN.\n \n\n \n Bypass blocking method\n Метод обхода блокировок\n \n \n SNI\n Подмена домена (SNI)\n \n \n OBFUSCATION\n Маскировка трафика (Обфускация)\n \n \n SNI-REALITY (Generic)\n Подмена домена\n \n \n SNI-REALITY (Chrome 147)\n Подмена домена (Chrome 147)\n \n \n SNI-REALITY (Chrome 146)\n Подмена домена (Chrome 146)\n \n \n SNI-REALITY (Chrome 145)\n Подмена домена (Chrome 145)\n \n \n SNI-REALITY (Firefox 149)\n Подмена домена (Firefox 149)\n \n \n SNI-REALITY (Yandex 26)\n Подмена домена (Яндекс 26)\n \n \n SNI-REALITY (Yandex 25)\n Подмена домена (Яндекс 25)\n \n \n SNI-REALITY (Yandex 24)\n Подмена домена (Яндекс 24)\n \n \n SNI-REALITY (Safari 26)\n Подмена домена (Safari 26)\n \n \n Support the project on\n Поддержать проект можно на\n \n \n Project Sponsors\n Спонсоры проекта\n \n\n \n Autoscan SNI\n Автосканирование SNI\n \n \n All\n Все\n \n \n Start\n Начать\n \n \n Scan completed\n Сканирование завершено\n \n \n Working SNI found: %1\n Рабочий SNI найден: %1\n \n \n No working SNI found.\n Рабочий SNI не найден.\n \n \n Error\n Ошибка\n \n \n No SNI available for scanning.\n Нет доступных SNI для сканирования.\n \n \n No servers available for scanning.\n Нет доступных серверов для сканирования.\n \n \n TLS Handshake: %1\n TLS Handshake: %1\n \n \n HTTP Request: %1\n HTTP Запрос: %1\n \n \n Import SNI file\n Импорт SNI файла\n \n \n Select SNI file\n Выберите SNI файл\n \n \n SNI files (*.sni);;All files (*)\n SNI файлы (*.sni);;Все файлы (*)\n \n \n File exists\n Файл существует\n \n \n File \"%1\" already exists. Overwrite?\n Файл \"%1\" уже существует. Перезаписать?\n \n \n Success\n Успех\n \n \n SNI file imported successfully\n SNI файл успешно импортирован\n \n \n Failed to import SNI file\n Не удалось импортировать SNI файл\n \n \n Delete this file\n Удалить этот файл\n \n \n No SNI files imported\n Нет импортированных SNI файлов\n \n\n \n Routing\n Маршрутизация\n \n \n Blacklist domains\n Черный список доменов\n \n \n Completely block access to the main domain AND all its subdomains. Format: domain:example.com (one per line)\n Полностью блокировать доступ к основному домену и всем его поддоменам. Формат: domain:example.com (по одному в строке)\n \n \n Exclude tunnel networks\n Исключить сети из туннеля\n \n \n Networks that always bypass VPN tunnel. Traffic to these networks goes directly, never through VPN\n Сети, которые всегда обходят VPN-туннель. Трафик к этим сетям идет напрямую, никогда через VPN\n \n \n Include tunnel networks\n Включить сети в туннель\n \n \n Networks that always use VPN tunnel. Traffic to these networks always goes through VPN\n Сети, которые всегда используют VPN-туннель. Трафик к этим сетям всегда идет через VPN\n \n \n Enable split tunnel\n Раздельное туннелирование (экспериментально)\n \n \n When enabled, you can configure which sites use VPN and which go directly.\n Когда включено, вы можете настроить, какие сайты используют VPN, а какие идут напрямую.\n \n \n Split tunnel mode\n Режим раздельного туннеля\n \n \n Defines traffic routing strategy for split tunneling.\n Определяет стратегию маршрутизации трафика для раздельного туннелирования.\n \n \n Exclude\n Исключить\n \n \n Include\n Включить\n \n \n Domains to route through VPN\n Домены для маршрутизации через VPN\n \n \n Domains to bypass VPN\n Домены для обхода VPN\n \n \n List domains that should use VPN tunnel. Only these domains will go through VPN, all other traffic bypasses VPN\n Список доменов, которые должны использовать VPN-туннель. Только эти домены будут проходить через VPN, весь остальной трафик мимо VPN\n \n \n List domains that should bypass VPN tunnel. These domains will go directly, all other traffic uses VPN\n Список доменов, которые не пойдут через VPN-туннель. Эти домены будут идти напрямую, весь остальной трафик пойдет в VPN\n \n\n \n Enable advanced DNS management\n Разрешить расширенное управление DNS (экспериментально)\n \n \n Enables advanced DNS configuration to prevent leaks. Recommended when using split tunneling. Use with caution!\n Включает расширенную конфигурацию DNS для защиты от утечек. Рекомендуется активировать при использовании раздельного туннелирования. Используйте с осторожностью!\n \n \n\n" }, { "path": "src/fptn-client/gui/server_menu_item_widget/server_menu_item_widget.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/server_menu_item_widget/server_menu_item_widget.h\"\n\n#include \n\n#include // NOLINT(build/include_order)\n\nnamespace {\n\nconst QPixmap& GetPingIcon(const int ping_ms) {\n static const QPixmap kRedCircle(\":/icons/ping_red_circle.png\");\n static const QPixmap kGreenCircle(\":/icons/ping_green_circle.png\");\n static const QPixmap kYellowCircle(\":/icons/ping_yellow_circle.png\");\n static const QPixmap kOrangeCircle(\":/icons/ping_orange_circle.png\");\n if (ping_ms == -1) {\n return kRedCircle;\n }\n if (ping_ms < 200) {\n return kGreenCircle;\n }\n if (ping_ms < 300) {\n return kYellowCircle;\n }\n if (ping_ms < 500) {\n return kOrangeCircle;\n }\n return kRedCircle;\n}\n} // namespace\n\nnamespace fptn::gui {\n\n#ifdef __APPLE__\nServerMenuItemWidget::ServerMenuItemWidget(\n QString name, int ping_ms, QObject* parent)\n : QAction(parent), name_(std::move(name)) {\n setIconVisibleInMenu(true);\n UpdatePing(ping_ms);\n}\n\n// macos\nvoid ServerMenuItemWidget::UpdatePing(int ping_ms) {\n const QString ping = (ping_ms == -1) ? \" \" : QString(\"%1ms\").arg(ping_ms);\n\n QString result = name_;\n\n const QFontMetrics kfm(this->font());\n const int target_width = kfm.horizontalAdvance(\"A\") * 25;\n int current_width = kfm.horizontalAdvance(name_);\n while (current_width < target_width) {\n result.append(' ');\n current_width = kfm.horizontalAdvance(result);\n }\n\n result.append(ping);\n\n setText(result);\n setIcon(GetPingIcon(ping_ms));\n}\n#else\n\nServerMenuItemWidget::ServerMenuItemWidget(\n QString name, int ping_ms, QObject* parent)\n : QWidgetAction(parent), name_(std::move(name)) {\n auto* widget = new QWidget();\n widget->setAttribute(Qt::WA_Hover);\n widget->setMouseTracking(true);\n widget->setStyleSheet(R\"(\n QWidget:hover {\n background-color: #e0e0e0;\n }\n )\");\n\n auto* layout = new QHBoxLayout(widget);\n layout->setContentsMargins(2, 2, 2, 2);\n layout->setSpacing(2);\n\n icon_label_ = new QLabel();\n icon_label_->setFixedSize(16, 16);\n icon_label_->setScaledContents(false);\n icon_label_->setAlignment(Qt::AlignCenter);\n icon_label_->setStyleSheet(\"background-color: transparent;\");\n\n name_label_ = new QLabel(name_);\n name_label_->setStyleSheet(\n \"background-color: transparent;padding-right: 10px;\");\n name_label_->setSizePolicy(\n QSizePolicy::MinimumExpanding, QSizePolicy::Preferred);\n name_label_->setMinimumWidth(\n QFontMetrics(name_label_->font()).horizontalAdvance(name_) + 40);\n\n ping_label_ = new QLabel();\n ping_label_->setSizePolicy(QSizePolicy::Minimum, QSizePolicy::Preferred);\n ping_label_->setAlignment(Qt::AlignRight);\n ping_label_->setStyleSheet(\"background-color: transparent;\");\n\n layout->addWidget(icon_label_);\n layout->addWidget(name_label_);\n layout->addWidget(ping_label_);\n\n widget->setLayout(layout);\n setDefaultWidget(widget);\n\n UpdatePing(ping_ms);\n}\n\nvoid ServerMenuItemWidget::UpdatePing(int ping_ms) {\n const QString ping = (ping_ms == -1) ? \"\" : QString(\"%1ms\").arg(ping_ms);\n ping_label_->setText(ping);\n icon_label_->setPixmap(GetPingIcon(ping_ms));\n}\n\n#endif\n\nQString ServerMenuItemWidget::ServerName() const { return name_; }\n\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/server_menu_item_widget/server_menu_item_widget.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\nnamespace fptn::gui {\n\n#ifdef __APPLE__\n// QWidgetAction doesn't work fopr macos\nclass ServerMenuItemWidget : public QAction {\n#else\nclass ServerMenuItemWidget : public QWidgetAction {\n#endif\n Q_OBJECT\n public:\n explicit ServerMenuItemWidget(\n QString name, int ping_ms, QObject* parent = nullptr);\n void UpdatePing(int ping_ms);\n QString ServerName() const;\n\n private:\n QString name_;\n\n QLabel* icon_label_{nullptr};\n QLabel* name_label_{nullptr};\n QLabel* ping_label_{nullptr};\n};\n\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/settingsmodel/settingsmodel.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/settingsmodel/settingsmodel.h\"\n\n#if _WIN32\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#elif defined(__linux__)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#endif\n\n#include \n#include \n#include \n#include \n\n#include \n#include // NOLINT(build/include_order)\n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"routing//route_manager.h\"\n#include \"utils/brotli/brotli.h\"\n\nusing fptn::gui::ServerConfig;\nusing fptn::gui::ServiceConfig;\nusing fptn::gui::SettingsModel;\n\nnamespace {\nQVector ParseServers(const QJsonArray& servers_array) {\n QVector servers;\n for (const auto& server_value : servers_array) {\n const QJsonObject server_obj = server_value.toObject();\n bool status = false;\n auto server = ServerConfig::parse(server_obj, status);\n if (status) {\n servers.push_back(std::move(server));\n } else {\n QString error = QObject::tr(\n \"Missing required fields in configuration. Generate and apply a new \"\n \"token.\");\n throw std::runtime_error(error.toStdString());\n }\n }\n return servers;\n}\n\nQVector SplitStringToVector(const QString& str) {\n QVector result;\n if (str.isEmpty()) {\n return result;\n }\n const auto parts = str.split(',', Qt::SkipEmptyParts);\n for (const auto& part : parts) {\n result.append(part.trimmed());\n }\n return result;\n}\n\nQString JoinVectorToString(const QVector& vec) {\n return vec.join(',');\n}\n\n}; // namespace\n\nSettingsModel::SettingsModel(const QMap& languages,\n const QString& default_language,\n std::size_t ping_thread_pool_size,\n QObject* parent)\n : QObject(parent),\n languages_(languages),\n default_language_(default_language),\n selected_language_(default_language),\n ping_thread_pool_(ping_thread_pool_size),\n ping_timer_(this),\n#if _WIN32\n enable_advanced_dns_management_(false),\n#endif\n client_autostart_(false),\n enable_split_tunnel_(false) {\n#if _WIN32\n wchar_t exe_path[MAX_PATH] = {};\n if (GetModuleFileNameW(nullptr, exe_path, MAX_PATH) != 0) {\n std::filesystem::path exe_dir =\n std::filesystem::path(exe_path).parent_path();\n std::string sni_folder = (exe_dir / \"SNI\").string();\n sni_manager_ = std::make_shared(sni_folder);\n } else {\n const auto settings_folder = GetSettingsFolderPath();\n const std::string sni_folder = settings_folder.toStdString() + \"/\" + \"SNI\";\n sni_manager_ = std::make_shared(sni_folder);\n }\n#elif __linux__\n char exe_path[PATH_MAX] = {};\n ssize_t count = readlink(\"/proc/self/exe\", exe_path, PATH_MAX);\n if (count != -1) {\n exe_path[count] = '\\0';\n std::filesystem::path exe_dir =\n std::filesystem::path(exe_path).parent_path();\n std::string sni_folder = (exe_dir / \"SNI\").string();\n sni_manager_ = std::make_shared(sni_folder);\n } else {\n const auto settings_folder = GetSettingsFolderPath();\n const std::string sni_folder = settings_folder.toStdString() + \"/\" + \"SNI\";\n sni_manager_ = std::make_shared(sni_folder);\n }\n#else\n const auto settings_folder = GetSettingsFolderPath();\n const std::string sni_folder = settings_folder.toStdString() + \"/\" + \"SNI\";\n sni_manager_ = std::make_shared(sni_folder);\n#endif\n Load(true);\n}\n\nSettingsModel::~SettingsModel() {\n StopPingMonitoring();\n\n ping_thread_pool_.stop();\n ping_thread_pool_.join();\n}\n\nQString SettingsModel::GetSettingsFilePath() const {\n const QString directory = GetSettingsFolderPath();\n return directory + \"/fptn-settings-4.json\";\n}\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nQString SettingsModel::GetSettingsFolderPath() const {\n#ifdef __APPLE__\n const QString directory =\n QStandardPaths::writableLocation(QStandardPaths::GenericConfigLocation);\n#else\n const QString directory =\n QStandardPaths::writableLocation(QStandardPaths::AppConfigLocation);\n#endif\n QDir dir(directory);\n if (!dir.exists()) {\n dir.mkpath(directory);\n }\n return directory;\n}\n\nvoid SettingsModel::Load(bool dont_load_server) {\n const std::unique_lock lock(mutex_); // mutex\n\n services_.clear();\n\n const QString file_path = GetSettingsFilePath();\n QFile file(file_path);\n if (!file.open(QIODevice::ReadOnly)) {\n SPDLOG_WARN(\"Failed to open file for reading: {}\", file_path.toStdString());\n return;\n }\n\n const QByteArray data = file.readAll();\n file.close();\n const QJsonDocument document = QJsonDocument::fromJson(data);\n const QJsonObject service_obj = document.object();\n\n if (service_obj.contains(\"services\")) {\n QJsonArray services_array = service_obj[\"services\"].toArray();\n for (const auto& service_value : services_array) {\n QJsonObject jsonservice_obj = service_value.toObject();\n ServiceConfig service;\n\n service.service_name = jsonservice_obj[\"service_name\"].toString();\n service.username = jsonservice_obj[\"username\"].toString();\n service.password = jsonservice_obj[\"password\"].toString();\n\n if (!dont_load_server) {\n service.servers = ParseServers(jsonservice_obj[\"servers\"].toArray());\n if (jsonservice_obj.contains(\"censored_zone_servers\")) {\n service.censored_zone_servers =\n ParseServers(jsonservice_obj[\"censored_zone_servers\"].toArray());\n }\n }\n services_.push_back(service);\n }\n }\n if (service_obj.contains(\"network_interface\")) {\n network_interface_ = service_obj[\"network_interface\"].toString();\n }\n if (network_interface_.isEmpty()) {\n network_interface_ = \"auto\";\n }\n\n if (service_obj.contains(\"language\")) {\n selected_language_ = service_obj[\"language\"].toString();\n }\n if (service_obj.contains(\"autostart\")) {\n client_autostart_ = service_obj[\"autostart\"].toBool();\n }\n\n#if _WIN32\n if (service_obj.contains(\"enable_advanced_dns_management\")) {\n enable_advanced_dns_management_ =\n service_obj[\"enable_advanced_dns_management\"].toBool();\n }\n#endif\n\n if (service_obj.contains(\"gateway_ip\")) {\n gateway_ip_ = service_obj[\"gateway_ip\"].toString();\n }\n if (gateway_ip_.isEmpty()) {\n gateway_ip_ = \"auto\";\n }\n\n if (service_obj.contains(\"sni\")) {\n sni_ = service_obj[\"sni\"].toString();\n }\n if (sni_.isEmpty()) {\n sni_ = FPTN_DEFAULT_SNI;\n }\n\n if (service_obj.contains(\"bypass_method\")) {\n bypass_method_ = service_obj[\"bypass_method\"].toString();\n }\n\n /* Replace DEPRECATED METHODS */\n if (bypass_method_ == kBypassMethodSni ||\n bypass_method_ == kBypassMethodSniReality) {\n bypass_method_ = kBypassMethodSniRealityYandex25;\n }\n\n if (bypass_method_.isEmpty() ||\n (bypass_method_ != kBypassMethodSni &&\n bypass_method_ != kBypassMethodObfuscation &&\n bypass_method_ != kBypassMethodSniReality &&\n /* Chrome */\n bypass_method_ != kBypassMethodSniRealityChrome147 &&\n bypass_method_ != kBypassMethodSniRealityChrome146 &&\n bypass_method_ != kBypassMethodSniRealityChrome145 &&\n /* Firefox */\n bypass_method_ != kBypassMethodSniRealityFirefox149 &&\n /* Yandex Browser */\n bypass_method_ != kBypassMethodSniRealityYandex26 &&\n bypass_method_ != kBypassMethodSniRealityYandex25 &&\n bypass_method_ != kBypassMethodSniRealityYandex24 &&\n /* Safari */\n bypass_method_ != kBypassMethodSniRealitySafari26)) {\n bypass_method_ = kBypassMethodSniRealityYandex25; // BYDEFAULT\n }\n\n if (service_obj.contains(\"blacklist_domains\")) {\n blacklist_domains_ = service_obj[\"blacklist_domains\"].toString();\n }\n if (blacklist_domains_.isEmpty()) {\n blacklist_domains_ =\n \"domain:solovev-live.ru,domain:ria.ru,domain:tass.ru,domain:1tv.ru,\"\n \"domain:ntv.ru,domain:rt.com\";\n }\n\n if (service_obj.contains(\"exclude_tunnel_networks\")) {\n exclude_tunnel_networks_ =\n service_obj[\"exclude_tunnel_networks\"].toString();\n }\n if (exclude_tunnel_networks_.isEmpty()) {\n exclude_tunnel_networks_ = \"10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\";\n }\n\n if (service_obj.contains(\"include_tunnel_networks\")) {\n include_tunnel_networks_ =\n service_obj[\"include_tunnel_networks\"].toString();\n }\n\n if (service_obj.contains(\"enable_split_tunnel\")) {\n enable_split_tunnel_ = service_obj[\"enable_split_tunnel\"].toBool();\n }\n\n if (service_obj.contains(\"split_tunnel_mode\")) {\n split_tunnel_mode_ = service_obj[\"split_tunnel_mode\"].toString();\n }\n if (split_tunnel_mode_.isEmpty() ||\n (split_tunnel_mode_ != kSplitTunnelModeExclude &&\n split_tunnel_mode_ != kSplitTunnelModeInclude)) {\n split_tunnel_mode_ = kSplitTunnelModeExclude;\n }\n\n if (service_obj.contains(\"split_tunnel_domains\")) {\n split_tunnel_domains_ = service_obj[\"split_tunnel_domains\"].toString();\n }\n if (split_tunnel_domains_.isEmpty()) {\n split_tunnel_domains_ =\n \"domain:ru,domain:su,domain:рф,domain:vk.com,domain:yandex.com,\"\n \"domain:userapi.com,domain:yandex.net,domain:clstorage.net\";\n }\n}\n\nQString SettingsModel::LanguageName() const {\n for (auto it = languages_.begin(); it != languages_.end(); ++it) {\n if (it.key() == selected_language_) {\n return it.value();\n }\n }\n return \"English\";\n}\n\nconst QString& SettingsModel::LanguageCode() const {\n return selected_language_;\n}\n\nconst QString& SettingsModel::DefaultLanguageCode() const {\n return default_language_;\n}\n\nvoid SettingsModel::SetLanguage(const QString& language_name) {\n for (auto it = languages_.begin(); it != languages_.end(); ++it) {\n if (language_name == it.value()) {\n selected_language_ = it.key();\n }\n }\n Save();\n}\n\nvoid SettingsModel::SetLanguageCode(const QString& language_code) {\n for (auto it = languages_.begin(); it != languages_.end(); ++it) {\n if (language_code == it.key()) {\n selected_language_ = language_code;\n }\n }\n Save();\n}\n\nQVector SettingsModel::GetLanguages() const {\n QVector languages;\n for (auto it = languages_.begin(); it != languages_.end(); ++it) {\n languages.push_back(it.value());\n }\n return languages;\n}\n\nbool SettingsModel::ExistsTranslation(const QString& language_code) const {\n return languages_.contains(language_code);\n}\n\nbool SettingsModel::Save() {\n const std::unique_lock lock(mutex_); // mutex\n\n QString file_path = GetSettingsFilePath();\n QFile file(file_path);\n if (!file.open(QIODevice::WriteOnly)) {\n SPDLOG_ERROR(\n \"Failed to open file for writing: {}\", file_path.toStdString());\n return false;\n }\n\n QJsonObject json_object;\n QJsonArray services_array;\n for (const auto& service : services_) {\n QJsonObject service_obj;\n service_obj[\"service_name\"] = service.service_name;\n service_obj[\"username\"] = service.username;\n service_obj[\"password\"] = service.password;\n\n QJsonArray servers_array;\n for (const auto& server : service.servers) {\n QJsonObject server_obj;\n server_obj[\"name\"] = server.name;\n server_obj[\"host\"] = server.host;\n server_obj[\"port\"] = server.port;\n server_obj[\"is_using\"] = server.is_using;\n server_obj[\"md5_fingerprint\"] = server.md5_fingerprint;\n servers_array.append(server_obj);\n }\n service_obj[\"servers\"] = servers_array;\n\n QJsonArray censored_zone_servers;\n for (const auto& server : service.censored_zone_servers) {\n QJsonObject server_obj;\n server_obj[\"name\"] = server.name;\n server_obj[\"host\"] = server.host;\n server_obj[\"port\"] = server.port;\n server_obj[\"is_using\"] = server.is_using;\n server_obj[\"md5_fingerprint\"] = server.md5_fingerprint;\n censored_zone_servers.append(server_obj);\n }\n service_obj[\"censored_zone_servers\"] = censored_zone_servers;\n services_array.append(service_obj);\n }\n\n json_object[\"language\"] = selected_language_;\n json_object[\"services\"] = services_array;\n json_object[\"network_interface\"] = network_interface_;\n json_object[\"gateway_ip\"] = gateway_ip_;\n json_object[\"autostart\"] = client_autostart_ ? 1 : 0;\n json_object[\"sni\"] = sni_;\n json_object[\"bypass_method\"] = bypass_method_;\n\n#if _WIN32\n json_object[\"enable_advanced_dns_management\"] =\n enable_advanced_dns_management_;\n#endif\n\n json_object[\"blacklist_domains\"] = blacklist_domains_;\n json_object[\"exclude_tunnel_networks\"] = exclude_tunnel_networks_;\n json_object[\"include_tunnel_networks\"] = include_tunnel_networks_;\n json_object[\"enable_split_tunnel\"] = enable_split_tunnel_;\n json_object[\"split_tunnel_mode\"] = split_tunnel_mode_;\n json_object[\"split_tunnel_domains\"] = split_tunnel_domains_;\n\n QJsonDocument document(json_object);\n auto len = file.write(document.toJson());\n file.close();\n\n emit dataChanged();\n\n return len > 0;\n}\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nServiceConfig SettingsModel::ParseToken(const QString& token) {\n QJsonParseError parse_error;\n const QByteArray token_data = token.toUtf8();\n QJsonDocument json_doc = QJsonDocument::fromJson(token_data, &parse_error);\n\n if (parse_error.error != QJsonParseError::NoError) {\n throw std::runtime_error(\n \"JSON parsing error: \" + parse_error.errorString().toStdString());\n }\n\n QJsonObject json_object = json_doc.object();\n if (!json_object.contains(\"service_name\") ||\n !json_object.contains(\"username\") || !json_object.contains(\"password\") ||\n !json_object.contains(\"servers\")) {\n throw std::runtime_error(\"Missing required fields in JSON.\");\n }\n ServiceConfig service;\n service.service_name = json_object[\"service_name\"].toString();\n service.username = json_object[\"username\"].toString();\n service.password = json_object[\"password\"].toString();\n\n service.servers = ParseServers(json_object[\"servers\"].toArray());\n if (json_object.contains(\"censored_zone_servers\")) {\n service.censored_zone_servers =\n ParseServers(json_object[\"censored_zone_servers\"].toArray());\n }\n return service;\n}\n\nQString SettingsModel::UsingNetworkInterface() const {\n return network_interface_;\n}\n\nvoid SettingsModel::SetUsingNetworkInterface(const QString& iface) {\n network_interface_ = (iface.isEmpty() ? \"auto\" : iface);\n}\n\nQString SettingsModel::GatewayIp() const {\n return gateway_ip_.isEmpty() ? \"auto\" : gateway_ip_;\n}\n\nvoid SettingsModel::SetGatewayIp(const QString& ip) {\n gateway_ip_ = ip.isEmpty() ? \"auto\" : ip;\n Save();\n}\n\nQString SettingsModel::SNI() const {\n return sni_.isEmpty() ? FPTN_DEFAULT_SNI : sni_;\n}\n\nvoid SettingsModel::SetSNI(const QString& sni) {\n sni_ = sni;\n Save();\n}\n\nbool SettingsModel::Autostart() const { return client_autostart_; }\n\nvoid SettingsModel::SetAutostart(bool value) {\n client_autostart_ = value;\n Save();\n}\n\nconst QVector& SettingsModel::Services() const {\n return services_;\n}\n\nvoid SettingsModel::AddService(const ServiceConfig& server) {\n const std::unique_lock lock(mutex_); // mutex\n\n services_.append(server);\n}\n\nvoid SettingsModel::RemoveServer(int index) {\n const std::unique_lock lock(mutex_); // mutex\n\n if (index >= 0 && index < services_.size()) {\n services_.removeAt(index);\n }\n}\n\nvoid SettingsModel::Clear() { services_.clear(); }\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nQVector SettingsModel::GetNetworkInterfaces() const {\n QVector interfaces;\n interfaces.append(\"auto\");\n\n QList network_interfaces =\n QNetworkInterface::allInterfaces();\n\n for (const QNetworkInterface& network_interface : network_interfaces) {\n if (!network_interface.flags().testFlag(QNetworkInterface::IsLoopBack)) {\n const QString iface_name = network_interface.humanReadableName();\n if (!iface_name.isEmpty()) {\n interfaces.append(iface_name);\n }\n }\n }\n return interfaces;\n}\n\nint SettingsModel::GetExistServiceIndex(const QString& name) const {\n for (int i = 0; i < services_.size(); i++) {\n if (services_[i].service_name == name) {\n return i;\n }\n }\n return -1;\n}\n\nQString SettingsModel::BypassMethod() const {\n return bypass_method_.isEmpty() ? kBypassMethodSni : bypass_method_;\n}\n\nvoid SettingsModel::SetBypassMethod(const QString& method) {\n bypass_method_ = method;\n Save();\n}\n\nfptn::gui::SNIManagerSPtr SettingsModel::SniManager() const {\n return sni_manager_;\n}\n\nQVector SettingsModel::BlacklistDomains() const {\n if (blacklist_domains_.isEmpty()) {\n return SplitStringToVector(FPTN_CLIENT_DEFAULT_BLACKLIST_DOMAINS);\n }\n return SplitStringToVector(blacklist_domains_);\n}\n\nvoid SettingsModel::SetBlacklistDomains(const QVector& domains) {\n blacklist_domains_ = JoinVectorToString(domains);\n Save();\n}\n\nQVector SettingsModel::ExcludeTunnelNetworks() const {\n if (exclude_tunnel_networks_.isEmpty()) {\n return SplitStringToVector(FPTN_CLIENT_DEFAULT_EXCLUDE_NETWORKS);\n }\n return SplitStringToVector(exclude_tunnel_networks_);\n}\n\nvoid SettingsModel::SetExcludeTunnelNetworks(const QVector& networks) {\n exclude_tunnel_networks_ = JoinVectorToString(networks);\n Save();\n}\n\nQVector SettingsModel::IncludeTunnelNetworks() const {\n return SplitStringToVector(include_tunnel_networks_);\n}\n\nvoid SettingsModel::SetIncludeTunnelNetworks(const QVector& networks) {\n include_tunnel_networks_ = JoinVectorToString(networks);\n Save();\n}\n\nbool SettingsModel::EnableSplitTunnel() const { return enable_split_tunnel_; }\n\nvoid SettingsModel::SetEnableSplitTunnel(bool enable) {\n enable_split_tunnel_ = enable;\n Save();\n}\n\nQString SettingsModel::SplitTunnelMode() const {\n return split_tunnel_mode_.isEmpty() ? kSplitTunnelModeExclude\n : split_tunnel_mode_;\n}\n\nvoid SettingsModel::SetSplitTunnelMode(const QString& mode) {\n split_tunnel_mode_ = mode;\n Save();\n}\n\nQVector SettingsModel::SplitTunnelDomains() {\n const std::unique_lock lock(mutex_); // mutex\n\n if (split_tunnel_domains_.isEmpty()) {\n return SplitStringToVector(FPTN_CLIENT_DEFAULT_SPLIT_TUNNEL_DOMAINS);\n }\n return SplitStringToVector(split_tunnel_domains_);\n}\n\nvoid SettingsModel::SetSplitTunnelDomains(const QVector& domains) {\n split_tunnel_domains_ = JoinVectorToString(domains);\n Save();\n}\n#if _WIN32\nbool SettingsModel::EnableAdvancedDnsManagement() const {\n return enable_advanced_dns_management_;\n}\n\nvoid SettingsModel::SetEnableAdvancedDnsManagement(const bool enable) {\n enable_advanced_dns_management_ = enable;\n}\n#endif\n\nvoid SettingsModel::StartPingMonitoring() {\n const std::unique_lock lock(mutex_);\n\n if (start_pinging_) {\n return;\n }\n\n start_pinging_ = true;\n connect(&ping_timer_, &QTimer::timeout, [this]() {\n if (!start_pinging_ || pending_pings_ > 0) {\n return;\n }\n\n QSet> servers_to_check;\n {\n const std::unique_lock lock(mutex_);\n for (const auto& service : services_) {\n for (const auto& server : service.servers) {\n servers_to_check.insert({server.host, server.port});\n }\n for (const auto& server : service.censored_zone_servers) {\n servers_to_check.insert({server.host, server.port});\n }\n }\n }\n\n pending_pings_ = servers_to_check.size();\n\n for (const auto& [host, port] : servers_to_check) {\n boost::asio::post(ping_thread_pool_, [this, host, port]() {\n PingServer(host, port);\n pending_pings_--;\n });\n }\n });\n\n if (!ping_timer_.isActive()) {\n ping_timer_.start(1000);\n }\n}\n\nvoid SettingsModel::StopPingMonitoring() {\n if (!start_pinging_) {\n return;\n }\n\n {\n const std::unique_lock lock(mutex_);\n\n // cppcheck-suppress identicalConditionAfterEarlyExit\n if (!start_pinging_) {\n return;\n }\n start_pinging_ = false;\n }\n}\n\nvoid SettingsModel::PingServer(const QString& host, int port) {\n std::vector results;\n\n for (int i = 0; start_pinging_ && i < 3; ++i) {\n const auto start_time = std::chrono::steady_clock::now();\n int ping_ms = -1;\n\n QTcpSocket socket;\n socket.connectToHost(host, port);\n if (socket.waitForConnected(2000)) {\n const auto end_time = std::chrono::steady_clock::now();\n ping_ms = std::chrono::duration_cast(\n end_time - start_time)\n .count();\n }\n socket.close();\n results.push_back(ping_ms);\n }\n\n const bool has_error =\n std::ranges::any_of(results, [](int ping) { return ping == -1; });\n\n int final_ping_ms = -1;\n if (!has_error && !results.empty()) {\n const int sum = std::accumulate(results.begin(), results.end(), 0);\n final_ping_ms = sum / static_cast(results.size());\n }\n\n const std::unique_lock lock(mutex_);\n\n if (start_pinging_) {\n for (auto& service : services_) {\n for (auto& server : service.servers) {\n if (server.host == host && server.port == port) {\n server.ping_ms = final_ping_ms;\n }\n }\n for (auto& server : service.censored_zone_servers) {\n if (server.host == host && server.port == port) {\n server.ping_ms = final_ping_ms;\n }\n }\n }\n }\n}\n" }, { "path": "src/fptn-client/gui/settingsmodel/settingsmodel.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n\n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"gui/sni_manager/sni_manager.h\"\n\nnamespace fptn::gui {\n/*\n{\n \"gateway_ip\": \"auto\",\n \"language\": \"en\",\n \"network_interface\": \"auto\",\n \"services\": [\n {\n \"version\": 2,\n \"service_name\": \"FPTN.ONLINE\",\n \"username\": \"test\",\n \"password\": \"test\",\n \"servers\": [\n {\n \"name\": \"pq1\",\n \"host\": \"74.119.195.151\",\n \"md5_fingerprint\": \"5c903603cbcfbf0601193c4cc859292c\",\n \"port\": 443\n }\n ],\n \"censored_zone_servers\": [\n {\n \"name\": \"Server1\",\n \"host\": \"127.0.0.1\",\n \"port\": 443,\n \"md5_fingerprint\": \"5c903603cbcfbf0601193c4cc859292c\"\n }\n ]\n }\n }\n ],\n \"blacklist_domains\":\n\"domain:solovev-live.ru,domain:ria.ru,domain:tass.ru,domain:1tv.ru,domain:ntv.ru,domain:rt.com\",\n \"exclude_tunnel_networks\": \"10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\",\n \"include_tunnel_networks\": \"\",\n \"enable_split_tunnel\": true,\n \"split_tunnel_mode\": \"exclude\",\n \"split_tunnel_domains\":\n\"domain:ru,domain:su,domain:рф,domain:vk.com,domain:yandex.com,domain:userapi.com,domain:yandex.net,domain:clstorage.net\"\n}\n*/\n\nstruct ServerConfig {\n QString name;\n QString host;\n int port;\n bool is_using;\n QString md5_fingerprint;\n int ping_ms = -1;\n\n static ServerConfig parse(const QJsonObject& server_obj, bool& status) {\n status = false;\n if (!server_obj.contains(\"name\") || !server_obj.contains(\"host\") ||\n !server_obj.contains(\"port\") ||\n !server_obj.contains(\"md5_fingerprint\")) {\n return {};\n }\n ServerConfig server = {};\n server.name = server_obj[\"name\"].toString();\n server.host = server_obj[\"host\"].toString();\n server.port = server_obj[\"port\"].toInt();\n server.md5_fingerprint = server_obj[\"md5_fingerprint\"].toString();\n server.is_using = true;\n server.ping_ms = -1;\n status = true;\n return server;\n }\n};\n\nstruct ServiceConfig {\n QString service_name;\n QString username;\n QString password;\n QVector servers;\n QVector censored_zone_servers;\n QString language;\n};\n\nclass SettingsModel : public QObject {\n Q_OBJECT\n\n public:\n static constexpr const char* kSplitTunnelModeExclude = \"exclude\";\n static constexpr const char* kSplitTunnelModeInclude = \"include\";\n\n // DEPRECATED\n static constexpr const char* kBypassMethodSni = \"SNI\";\n\n static constexpr const char* kBypassMethodObfuscation = \"OBFUSCATION\";\n\n // DEPRECATED\n static constexpr const char* kBypassMethodSniReality = \"SNI-REALITY\";\n\n /* chrome */\n static constexpr const char* kBypassMethodSniRealityChrome147 =\n \"SNI-REALITY-CHROME-147\";\n static constexpr const char* kBypassMethodSniRealityChrome146 =\n \"SNI-REALITY-CHROME-146\";\n static constexpr const char* kBypassMethodSniRealityChrome145 =\n \"SNI-REALITY-CHROME-145\";\n /* Firefox */\n static constexpr const char* kBypassMethodSniRealityFirefox149 =\n \"SNI-REALITY-FIREFOX-149\";\n /* Yandex Browser */\n static constexpr const char* kBypassMethodSniRealityYandex26 =\n \"SNI-REALITY-YANDEX-26\";\n static constexpr const char* kBypassMethodSniRealityYandex25 =\n \"SNI-REALITY-YANDEX-25\";\n static constexpr const char* kBypassMethodSniRealityYandex24 =\n \"SNI-REALITY-YANDEX-24\";\n /* Safari */\n static constexpr const char* kBypassMethodSniRealitySafari26 =\n \"SNI-REALITY-SAFARI-26\";\n\n public:\n explicit SettingsModel(const QMap& languages,\n const QString& default_language = \"en\",\n std::size_t ping_thread_pool_size = 4,\n QObject* parent = nullptr);\n\n ~SettingsModel() override;\n\n void Load(bool dont_load_server = false);\n bool Save();\n\n void StartPingMonitoring();\n void StopPingMonitoring();\n\n QString UsingNetworkInterface() const;\n\n void SetUsingNetworkInterface(const QString&);\n\n QString GatewayIp() const;\n void SetGatewayIp(const QString& ip);\n\n QString SNI() const;\n void SetSNI(const QString& sni);\n\n QVector GetNetworkInterfaces() const;\n\n const QVector& Services() const;\n void AddService(const ServiceConfig& server);\n void RemoveServer(int index);\n int GetExistServiceIndex(const QString& name) const;\n ServiceConfig ParseToken(const QString& token);\n void Clear();\n\n QString LanguageName() const;\n void SetLanguage(const QString& language);\n void SetLanguageCode(const QString& language_code);\n\n QVector GetLanguages() const;\n\n const QString& DefaultLanguageCode() const;\n const QString& LanguageCode() const;\n\n bool ExistsTranslation(const QString& language_code) const;\n\n bool Autostart() const;\n void SetAutostart(bool value);\n\n QString GetSettingsFilePath() const;\n QString GetSettingsFolderPath() const;\n\n QString BypassMethod() const;\n void SetBypassMethod(const QString& method);\n\n SNIManagerSPtr SniManager() const;\n\n QVector BlacklistDomains() const;\n void SetBlacklistDomains(const QVector& domains);\n\n QVector ExcludeTunnelNetworks() const;\n void SetExcludeTunnelNetworks(const QVector& networks);\n\n QVector IncludeTunnelNetworks() const;\n void SetIncludeTunnelNetworks(const QVector& networks);\n\n bool EnableSplitTunnel() const;\n void SetEnableSplitTunnel(bool enable);\n\n QString SplitTunnelMode() const;\n void SetSplitTunnelMode(const QString& mode);\n\n QVector SplitTunnelDomains();\n void SetSplitTunnelDomains(const QVector& domains);\n\n#if _WIN32\n bool EnableAdvancedDnsManagement() const;\n void SetEnableAdvancedDnsManagement(bool enable);\n#endif\n\n protected:\n void PingServer(const QString& host, int port);\n\n signals:\n void dataChanged();\n\n private:\n std::mutex mutex_;\n\n QMap languages_;\n\n QString default_language_;\n\n QString selected_language_;\n\n boost::asio::thread_pool ping_thread_pool_;\n QTimer ping_timer_;\n std::atomic start_pinging_{false};\n std::atomic pending_pings_{0};\n\n QVector services_;\n QString network_interface_;\n QString gateway_ip_;\n QString sni_;\n\n#if _WIN32\n bool enable_advanced_dns_management_;\n#endif\n bool client_autostart_;\n\n QString bypass_method_;\n\n QString blacklist_domains_;\n QString exclude_tunnel_networks_;\n QString include_tunnel_networks_;\n bool enable_split_tunnel_;\n QString split_tunnel_mode_;\n QString split_tunnel_domains_;\n\n SNIManagerSPtr sni_manager_;\n};\n\nusing SettingsModelPtr = std::shared_ptr;\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/settingswidget/settings.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/settingswidget/settings.h\"\n\n#include \"gui/sni_autoscan_dialog/sni_autoscan_dialog.h\"\n\n#if _WIN32\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#endif\n\n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"gui/autostart/autostart.h\"\n#include \"gui/tokendialog/tokendialog.h\"\n#include \"gui/translations/translations.h\"\n\nnamespace {\nQString CleanDomain(const QString& domain) {\n if (domain.isEmpty()) {\n return domain;\n }\n\n QString cleaned;\n cleaned.reserve(domain.length());\n\n static QRegularExpression valid_chars(\"[a-zA-Z0-9.-]\");\n\n for (int i = 0; i < domain.length(); ++i) {\n QChar ch = domain[i];\n\n if (valid_chars.match(ch).hasMatch()) {\n cleaned.append(ch.toLower());\n }\n }\n return cleaned;\n}\n\nQString VectorToText(const QVector& items) { return items.join('\\n'); }\n\nQVector TextToVector(const QString& text) {\n QVector result;\n const auto lines = text.split('\\n', Qt::SkipEmptyParts);\n for (const auto& line : lines) {\n result.append(line.trimmed());\n }\n return result;\n}\n} // namespace\n\nusing fptn::gui::SettingsWidget;\n\nSettingsWidget::SettingsWidget(SettingsModelPtr settings, QWidget* parent)\n : QDialog(parent), settings_(std::move(settings)) {\n SetupUi();\n setWindowIcon(QIcon(\":/icons/app.ico\"));\n // show on top\n setWindowFlags(Qt::Window | Qt::WindowStaysOnTopHint);\n setModal(true);\n show();\n activateWindow();\n raise();\n setWindowTitle(QObject::tr(\"Settings\"));\n}\n\nvoid SettingsWidget::SetupUi() {\n tab_widget_ = new QTabWidget(this);\n tab_widget_->setContextMenuPolicy(Qt::ActionsContextMenu);\n\n // ==================== Settings Tab ====================\n settings_tab_ = new QWidget();\n auto* main_settings_layout = new QVBoxLayout(settings_tab_);\n main_settings_layout->setContentsMargins(0, 0, 0, 0);\n auto* settings_scroll_area = new QScrollArea(this);\n settings_scroll_area->setWidgetResizable(true);\n settings_scroll_area->setHorizontalScrollBarPolicy(Qt::ScrollBarAsNeeded);\n settings_scroll_area->setVerticalScrollBarPolicy(Qt::ScrollBarAlwaysOn);\n settings_scroll_area->setFrameShape(QFrame::NoFrame);\n\n auto* settings_content_widget = new QWidget();\n settings_content_widget->setMinimumWidth(600);\n auto* settings_layout = new QVBoxLayout(settings_content_widget);\n settings_layout->setContentsMargins(5, 5, 5, 5);\n\n grid_layout_ = new QGridLayout();\n grid_layout_->setContentsMargins(0, 0, 0, 0);\n grid_layout_->setHorizontalSpacing(10);\n grid_layout_->setVerticalSpacing(10);\n grid_layout_->setColumnStretch(0, 1);\n grid_layout_->setColumnStretch(1, 3);\n grid_layout_->setColumnMinimumWidth(0, 380);\n\n#ifdef __linux__\n autostart_label_ = new QLabel(QObject::tr(\"Autostart\"), this);\n autostart_checkbox_ = new QCheckBox(\" \", this);\n autostart_checkbox_->setChecked(settings_->Autostart());\n connect(autostart_checkbox_, &QCheckBox::toggled, this,\n &SettingsWidget::onAutostartChanged);\n grid_layout_->addWidget(autostart_label_, 0, 0, Qt::AlignLeft);\n grid_layout_->addWidget(autostart_checkbox_, 0, 1, Qt::AlignLeft);\n#endif\n\n language_label_ = new QLabel(QObject::tr(\"Language\"), this);\n language_combo_box_ = new QComboBox(this);\n language_combo_box_->addItems(settings_->GetLanguages());\n language_combo_box_->setCurrentText(settings_->LanguageName());\n connect(language_combo_box_, &QComboBox::currentTextChanged, this,\n &SettingsWidget::onLanguageChanged);\n grid_layout_->addWidget(language_label_, 1, 0, Qt::AlignLeft);\n grid_layout_->addWidget(language_combo_box_, 1, 1, Qt::AlignLeft);\n\n interface_label_ =\n new QLabel(QObject::tr(\"Network Interface (adapter)\"), this);\n interface_combo_box_ = new QComboBox(this);\n interface_combo_box_->addItems(settings_->GetNetworkInterfaces());\n interface_combo_box_->setCurrentText(settings_->UsingNetworkInterface());\n connect(interface_combo_box_, &QComboBox::currentTextChanged, this,\n &SettingsWidget::onInterfaceChanged);\n grid_layout_->addWidget(interface_label_, 2, 0, Qt::AlignLeft);\n grid_layout_->addWidget(interface_combo_box_, 2, 1, Qt::AlignLeft);\n\n gateway_label_ = new QLabel(\n QObject::tr(\"Gateway IP Address (typically your router's address)\"),\n this);\n gateway_auto_checkbox_ = new QCheckBox(QObject::tr(\"Auto\"), this);\n gateway_line_edit_ = new QLineEdit(this);\n if (settings_->GatewayIp().toLower() != \"auto\") {\n gateway_auto_checkbox_->setChecked(false);\n gateway_line_edit_->setText(settings_->GatewayIp());\n gateway_line_edit_->setEnabled(true);\n } else {\n gateway_auto_checkbox_->setChecked(true);\n gateway_line_edit_->setDisabled(true);\n }\n connect(gateway_auto_checkbox_, &QCheckBox::toggled, this,\n &SettingsWidget::onAutoGatewayChanged);\n\n auto* gateway_layout = new QHBoxLayout();\n gateway_layout->addWidget(gateway_auto_checkbox_);\n gateway_layout->addWidget(gateway_line_edit_);\n gateway_layout->setStretch(0, 0);\n gateway_layout->setStretch(1, 1);\n\n grid_layout_->addWidget(gateway_label_, 3, 0, Qt::AlignLeft);\n grid_layout_->addLayout(gateway_layout, 3, 1);\n\n bypass_method_label_ =\n new QLabel(QObject::tr(\"Bypass blocking method\"), this);\n bypass_method_combo_box_ = new QComboBox(this);\n bypass_method_combo_box_->addItem(\n QObject::tr(\"OBFUSCATION\"), SettingsModel::kBypassMethodObfuscation);\n /* Chrome */\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Chrome 147)\"),\n SettingsModel::kBypassMethodSniRealityChrome147);\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Chrome 146)\"),\n SettingsModel::kBypassMethodSniRealityChrome146);\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Chrome 145)\"),\n SettingsModel::kBypassMethodSniRealityChrome145);\n /* Firefox */\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Firefox 149)\"),\n SettingsModel::kBypassMethodSniRealityFirefox149);\n /* Yandex */\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Yandex 26)\"),\n SettingsModel::kBypassMethodSniRealityYandex26);\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Yandex 25)\"),\n SettingsModel::kBypassMethodSniRealityYandex25);\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Yandex 24)\"),\n SettingsModel::kBypassMethodSniRealityYandex24);\n /* Safari */\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Safari 26)\"),\n SettingsModel::kBypassMethodSniRealitySafari26);\n\n bypass_method_combo_box_->setSizePolicy(\n QSizePolicy::Expanding, QSizePolicy::Fixed);\n bypass_method_combo_box_->setMinimumWidth(200);\n\n const QString current_method = settings_->BypassMethod();\n if (current_method == SettingsModel::kBypassMethodObfuscation) {\n bypass_method_combo_box_->setCurrentText(QObject::tr(\"OBFUSCATION\"));\n }\n /* Chrome */\n else if (current_method == SettingsModel::kBypassMethodSniRealityChrome147) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Chrome 147)\"));\n } else if (current_method ==\n SettingsModel::kBypassMethodSniRealityChrome146) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Chrome 146)\"));\n } else if (current_method ==\n SettingsModel::kBypassMethodSniRealityChrome145) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Chrome 145)\"));\n }\n /* Firefox */\n else if (current_method == SettingsModel::kBypassMethodSniRealityFirefox149) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Firefox 149)\"));\n }\n /* Yandex */\n else if (current_method == SettingsModel::kBypassMethodSniRealityYandex26) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Yandex 26)\"));\n } else if (\n current_method ==\n SettingsModel::\n kBypassMethodSniRealityYandex25) { // NOLINT(bugprone-branch-clone)\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Yandex 25)\"));\n } else if (current_method == SettingsModel::kBypassMethodSniRealityYandex24) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Yandex 24)\"));\n }\n /* Safari */\n else if (current_method == SettingsModel::kBypassMethodSniRealitySafari26) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Safari 26)\"));\n }\n /* Default */\n else {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Yandex 25)\"));\n }\n\n connect(bypass_method_combo_box_, &QComboBox::currentTextChanged, this,\n &SettingsWidget::onBypassMethodChanged);\n\n grid_layout_->addWidget(bypass_method_label_, 4, 0, Qt::AlignLeft);\n grid_layout_->addWidget(bypass_method_combo_box_, 4, 1);\n\n sni_label_ = new QLabel(this);\n if (settings_->BypassMethod() == SettingsModel::kBypassMethodSniReality) {\n sni_label_->setText(QObject::tr(\"Fake domain to bypass blocking\"));\n }\n sni_label_->setMinimumHeight(40);\n sni_label_->setWordWrap(true);\n sni_line_edit_ = new QLineEdit(this);\n sni_line_edit_->setText(settings_->SNI());\n sni_line_edit_->setMinimumWidth(200);\n sni_label_->setSizePolicy(QSizePolicy::Preferred, QSizePolicy::Preferred);\n sni_line_edit_->setSizePolicy(QSizePolicy::Expanding, QSizePolicy::Fixed);\n connect(sni_line_edit_, &QLineEdit::textChanged, this,\n [this](const QString& text) {\n if (text.isEmpty()) {\n settings_->SetSNI(FPTN_DEFAULT_SNI);\n return;\n }\n QString normalized = CleanDomain(text.toLower());\n if (normalized != text) {\n sni_line_edit_->blockSignals(true);\n sni_line_edit_->setText(normalized);\n sni_line_edit_->blockSignals(false);\n }\n settings_->SetSNI(normalized);\n });\n\n grid_layout_->addWidget(sni_label_, 5, 0, Qt::AlignLeft | Qt::AlignVCenter);\n grid_layout_->addWidget(sni_line_edit_, 5, 1);\n\n sni_files_list_widget_ = new QListWidget(this);\n sni_files_list_widget_->setHorizontalScrollBarPolicy(Qt::ScrollBarAsNeeded);\n sni_files_list_widget_->setMaximumHeight(80);\n\n sni_buttons_layout_ = new QHBoxLayout();\n\n sni_autoscan_button_ = new QPushButton(QObject::tr(\"Autoscan SNI\"), this);\n sni_import_button_ = new QPushButton(QObject::tr(\"Import SNI file\"), this);\n\n sni_buttons_layout_->addWidget(sni_autoscan_button_);\n sni_buttons_layout_->addSpacing(10);\n sni_buttons_layout_->addWidget(sni_import_button_);\n sni_buttons_layout_->addStretch(1);\n\n sni_autoscan_button_->setSizePolicy(QSizePolicy::Minimum, QSizePolicy::Fixed);\n sni_import_button_->setSizePolicy(QSizePolicy::Minimum, QSizePolicy::Fixed);\n\n grid_layout_->addLayout(sni_buttons_layout_, 7, 0, 1, 2);\n grid_layout_->addWidget(sni_files_list_widget_, 8, 0, 1, 2);\n connect(sni_autoscan_button_, &QPushButton::clicked, this,\n &SettingsWidget::onAutoscanClicked);\n\n connect(sni_import_button_, &QPushButton::clicked, this,\n &SettingsWidget::onImportSniFile);\n\n settings_layout->addLayout(grid_layout_);\n\n server_table_ = new QTableWidget(0, 4, this);\n server_table_->setHorizontalHeaderLabels({QObject::tr(\"Name\"),\n QObject::tr(\"User\"), QObject::tr(\"Servers\"), QObject::tr(\"Action\")});\n server_table_->horizontalHeader()->setStretchLastSection(false);\n server_table_->horizontalHeader()->setSectionResizeMode(\n 0, QHeaderView::Stretch);\n server_table_->horizontalHeader()->setSectionResizeMode(\n 1, QHeaderView::Stretch);\n server_table_->horizontalHeader()->setSectionResizeMode(\n 2, QHeaderView::Stretch);\n server_table_->horizontalHeader()->setSectionResizeMode(\n 3, QHeaderView::ResizeToContents);\n\n server_table_->setEditTriggers(QAbstractItemView::NoEditTriggers);\n server_table_->setSelectionBehavior(QAbstractItemView::SelectRows);\n server_table_->setHorizontalScrollBarPolicy(Qt::ScrollBarAlwaysOff);\n server_table_->setVerticalScrollBarPolicy(Qt::ScrollBarAlwaysOff);\n server_table_->verticalHeader()->setSectionResizeMode(\n QHeaderView::ResizeToContents);\n server_table_->setSizePolicy(QSizePolicy::Expanding, QSizePolicy::Fixed);\n server_table_->setSizeAdjustPolicy(QAbstractScrollArea::AdjustToContents);\n\n settings_layout->addWidget(server_table_);\n settings_layout->addStretch(1);\n\n settings_scroll_area->setWidget(settings_content_widget);\n main_settings_layout->addWidget(settings_scroll_area);\n\n tab_widget_->addTab(settings_tab_, QObject::tr(\"Settings\"));\n\n // ==================== Routing Tab ====================\n routing_tab_ = new QWidget();\n auto* main_routing_layout = new QVBoxLayout(routing_tab_);\n main_routing_layout->setContentsMargins(0, 0, 0, 0);\n\n auto* routing_scroll_area = new QScrollArea(this);\n routing_scroll_area->setWidgetResizable(true);\n routing_scroll_area->setHorizontalScrollBarPolicy(Qt::ScrollBarAlwaysOff);\n routing_scroll_area->setVerticalScrollBarPolicy(Qt::ScrollBarAlwaysOn);\n routing_scroll_area->setFrameShape(QFrame::NoFrame);\n\n auto* routing_content_widget = new QWidget();\n auto* routing_layout = new QVBoxLayout(routing_content_widget);\n routing_layout->setContentsMargins(10, 10, 10, 10);\n routing_layout->setSpacing(5);\n\n routing_grid_layout_ = new QGridLayout();\n routing_grid_layout_->setContentsMargins(0, 0, 0, 0);\n routing_grid_layout_->setHorizontalSpacing(10);\n routing_grid_layout_->setVerticalSpacing(5);\n routing_grid_layout_->setColumnStretch(0, 1);\n routing_grid_layout_->setColumnStretch(1, 2);\n\n int current_row = 0;\n\n#ifdef _WIN32\n constexpr char kInfoLabelStyle[] = \"color: #111111; font-size: 7pt;\";\n#elif defined(__APPLE__)\n constexpr char kInfoLabelStyle[] = \"color: #888888; font-size: 9pt;\";\n#elif defined(__linux__)\n constexpr char kInfoLabelStyle[] = \"color: #111111; font-size: 8pt;\";\n#endif\n\n// Routing\n#if _WIN32\n // DNS Management\n enable_dns_management_label_ =\n new QLabel(QObject::tr(\"Enable advanced DNS management\"), this);\n enable_dns_management_info_label_ = new QLabel(\n QObject::tr(\"Enables advanced DNS configuration to prevent leaks. \"\n \"Recommended when using split tunneling. Use with caution!\"),\n this);\n enable_dns_management_info_label_->setWordWrap(true);\n enable_dns_management_info_label_->setStyleSheet(kInfoLabelStyle);\n enable_dns_management_info_label_->setMinimumHeight(70);\n auto* dns_label_container = new QWidget(this);\n auto* dns_label_layout = new QVBoxLayout(dns_label_container);\n dns_label_layout->setContentsMargins(0, 0, 0, 0);\n dns_label_layout->addWidget(\n enable_dns_management_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n dns_label_layout->addWidget(\n enable_dns_management_info_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n dns_label_layout->addStretch(1);\n\n enable_dns_management_checkbox_ = new QCheckBox(\" \", this);\n enable_dns_management_checkbox_->setChecked(\n settings_->EnableAdvancedDnsManagement());\n connect(enable_dns_management_checkbox_, &QCheckBox::toggled, this,\n [this](bool checked) {\n settings_->SetEnableAdvancedDnsManagement(checked);\n });\n\n routing_grid_layout_->addWidget(\n dns_label_container, current_row, 0, Qt::AlignLeft | Qt::AlignTop);\n routing_grid_layout_->addWidget(enable_dns_management_checkbox_, current_row,\n 1, Qt::AlignLeft | Qt::AlignTop);\n current_row++;\n#endif\n\n blacklist_domains_label_ = new QLabel(QObject::tr(\"Blacklist domains\"), this);\n blacklist_domains_info_label_ = new QLabel(\n QObject::tr(\"Completely block access to the main domain AND all its \"\n \"subdomains. Format: domain:example.com (one per line)\"),\n this);\n blacklist_domains_info_label_->setWordWrap(true);\n blacklist_domains_info_label_->setMinimumHeight(60);\n blacklist_domains_info_label_->setStyleSheet(kInfoLabelStyle);\n\n auto* blacklist_label_container = new QWidget(this);\n auto* blacklist_label_layout = new QVBoxLayout(blacklist_label_container);\n blacklist_label_layout->setContentsMargins(0, 0, 0, 0);\n blacklist_label_layout->addWidget(\n blacklist_domains_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n blacklist_label_layout->addWidget(\n blacklist_domains_info_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n\n blacklist_domains_text_edit_ = new QTextEdit(this);\n blacklist_domains_text_edit_->setPlainText(\n VectorToText(settings_->BlacklistDomains()));\n blacklist_domains_text_edit_->setSizePolicy(\n QSizePolicy::Expanding, QSizePolicy::Fixed);\n blacklist_domains_text_edit_->setMaximumHeight(60);\n connect(\n blacklist_domains_text_edit_, &QTextEdit::textChanged, this, [this]() {\n settings_->SetBlacklistDomains(\n TextToVector(blacklist_domains_text_edit_->toPlainText()));\n });\n\n routing_grid_layout_->addWidget(\n blacklist_label_container, current_row, 0, Qt::AlignLeft | Qt::AlignTop);\n routing_grid_layout_->addWidget(blacklist_domains_text_edit_, current_row, 1);\n routing_grid_layout_->setRowStretch(current_row, 1);\n current_row++;\n\n exclude_tunnel_networks_label_ =\n new QLabel(QObject::tr(\"Exclude tunnel networks\"), this);\n exclude_tunnel_networks_info_label_ = new QLabel(\n QObject::tr(\"Networks that always bypass VPN tunnel. \"\n \"Traffic to these networks goes directly, never through VPN\"),\n this);\n exclude_tunnel_networks_info_label_->setWordWrap(true);\n exclude_tunnel_networks_info_label_->setMinimumHeight(60);\n exclude_tunnel_networks_info_label_->setStyleSheet(kInfoLabelStyle);\n\n auto* exclude_label_container = new QWidget(this);\n auto* exclude_label_layout = new QVBoxLayout(exclude_label_container);\n exclude_label_layout->setContentsMargins(0, 0, 0, 0);\n exclude_label_layout->addWidget(\n exclude_tunnel_networks_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n exclude_label_layout->addWidget(\n exclude_tunnel_networks_info_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n\n exclude_tunnel_networks_text_edit_ = new QTextEdit(this);\n exclude_tunnel_networks_text_edit_->setPlainText(\n VectorToText(settings_->ExcludeTunnelNetworks()));\n exclude_tunnel_networks_text_edit_->setSizePolicy(\n QSizePolicy::Expanding, QSizePolicy::Fixed);\n exclude_tunnel_networks_text_edit_->setMaximumHeight(60);\n connect(exclude_tunnel_networks_text_edit_, &QTextEdit::textChanged, this,\n [this]() {\n settings_->SetExcludeTunnelNetworks(\n TextToVector(exclude_tunnel_networks_text_edit_->toPlainText()));\n });\n\n routing_grid_layout_->addWidget(\n exclude_label_container, current_row, 0, Qt::AlignLeft | Qt::AlignTop);\n routing_grid_layout_->addWidget(\n exclude_tunnel_networks_text_edit_, current_row, 1);\n current_row++;\n\n include_tunnel_networks_label_ =\n new QLabel(QObject::tr(\"Include tunnel networks\"), this);\n include_tunnel_networks_info_label_ = new QLabel(\n QObject::tr(\"Networks that always use VPN tunnel. \"\n \"Traffic to these networks always goes through VPN\"),\n this);\n include_tunnel_networks_info_label_->setWordWrap(true);\n include_tunnel_networks_info_label_->setMinimumHeight(60);\n include_tunnel_networks_info_label_->setStyleSheet(kInfoLabelStyle);\n\n auto* include_label_container = new QWidget(this);\n auto* include_label_layout = new QVBoxLayout(include_label_container);\n include_label_layout->setContentsMargins(0, 0, 0, 0);\n include_label_layout->addWidget(\n include_tunnel_networks_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n include_label_layout->addWidget(\n include_tunnel_networks_info_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n\n include_tunnel_networks_text_edit_ = new QTextEdit(this);\n include_tunnel_networks_text_edit_->setPlainText(\n VectorToText(settings_->IncludeTunnelNetworks()));\n include_tunnel_networks_text_edit_->setSizePolicy(\n QSizePolicy::Expanding, QSizePolicy::Fixed);\n include_tunnel_networks_text_edit_->setMaximumHeight(60);\n include_tunnel_networks_text_edit_->setPlaceholderText(\n QObject::tr(\"192.168.99.0/24\"));\n connect(include_tunnel_networks_text_edit_, &QTextEdit::textChanged, this,\n [this]() {\n settings_->SetIncludeTunnelNetworks(\n TextToVector(include_tunnel_networks_text_edit_->toPlainText()));\n });\n\n routing_grid_layout_->addWidget(\n include_label_container, current_row, 0, Qt::AlignLeft | Qt::AlignTop);\n routing_grid_layout_->addWidget(\n include_tunnel_networks_text_edit_, current_row, 1);\n current_row++;\n\n enable_split_tunnel_label_ =\n new QLabel(QObject::tr(\"Enable split tunnel\"), this);\n enable_split_tunnel_info_label_ =\n new QLabel(QObject::tr(\"When enabled, you can configure which sites use \"\n \"VPN and which go directly.\"),\n this);\n enable_split_tunnel_info_label_->setWordWrap(true);\n enable_split_tunnel_info_label_->setMinimumHeight(60);\n enable_split_tunnel_info_label_->setStyleSheet(kInfoLabelStyle);\n enable_split_tunnel_info_label_->setSizePolicy(\n QSizePolicy::Expanding, QSizePolicy::Fixed);\n enable_split_tunnel_info_label_->setFixedHeight(40);\n\n auto* enable_split_label_container = new QWidget(this);\n auto* enable_split_label_layout =\n new QVBoxLayout(enable_split_label_container);\n enable_split_label_layout->setContentsMargins(0, 0, 0, 0);\n enable_split_label_layout->addWidget(\n enable_split_tunnel_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n enable_split_label_layout->addWidget(\n enable_split_tunnel_info_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n enable_split_label_layout->addStretch(1);\n\n enable_split_tunnel_checkbox_ = new QCheckBox(\" \", this);\n enable_split_tunnel_checkbox_->setChecked(settings_->EnableSplitTunnel());\n connect(enable_split_tunnel_checkbox_, &QCheckBox::toggled, this,\n [this](bool checked) {\n split_tunnel_mode_label_->setVisible(checked);\n split_tunnel_mode_info_label_->setVisible(checked);\n split_tunnel_mode_combo_box_->setVisible(checked);\n split_tunnel_domains_label_->setVisible(checked);\n split_tunnel_domains_info_label_->setVisible(checked);\n split_tunnel_domains_text_edit_->setVisible(checked);\n settings_->SetEnableSplitTunnel(checked);\n });\n\n routing_grid_layout_->addWidget(enable_split_label_container, current_row, 0,\n Qt::AlignLeft | Qt::AlignTop);\n routing_grid_layout_->addWidget(enable_split_tunnel_checkbox_, current_row, 1,\n Qt::AlignLeft | Qt::AlignTop);\n current_row++;\n\n split_tunnel_mode_label_ = new QLabel(QObject::tr(\"Split tunnel mode\"), this);\n split_tunnel_mode_info_label_ = new QLabel(\n QObject::tr(\"Defines traffic routing strategy for split tunneling.\"),\n this);\n split_tunnel_mode_info_label_->setWordWrap(true);\n split_tunnel_mode_info_label_->setSizePolicy(\n QSizePolicy::Expanding, QSizePolicy::Fixed);\n split_tunnel_mode_info_label_->setFixedHeight(40);\n split_tunnel_mode_info_label_->setStyleSheet(kInfoLabelStyle);\n\n auto* split_mode_label_container = new QWidget(this);\n auto* split_mode_label_layout = new QVBoxLayout(split_mode_label_container);\n split_mode_label_layout->setContentsMargins(0, 0, 0, 0);\n split_mode_label_layout->addWidget(\n split_tunnel_mode_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n split_mode_label_layout->addWidget(\n split_tunnel_mode_info_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n split_mode_label_layout->addStretch(1);\n\n split_tunnel_mode_combo_box_ = new QComboBox(this);\n split_tunnel_mode_combo_box_->addItem(\n QObject::tr(\"Exclude\"), SettingsModel::kSplitTunnelModeExclude);\n split_tunnel_mode_combo_box_->addItem(\n QObject::tr(\"Include\"), SettingsModel::kSplitTunnelModeInclude);\n split_tunnel_mode_combo_box_->setCurrentText(\n settings_->SplitTunnelMode() == SettingsModel::kSplitTunnelModeInclude\n ? QObject::tr(\"Include\")\n : QObject::tr(\"Exclude\"));\n\n connect(split_tunnel_mode_combo_box_, &QComboBox::currentTextChanged, this,\n [this](const QString& mode) {\n if (mode == QObject::tr(\"Include\") ||\n mode == SettingsModel::kSplitTunnelModeInclude) {\n settings_->SetSplitTunnelMode(SettingsModel::kSplitTunnelModeInclude);\n split_tunnel_domains_label_->setText(\n QObject::tr(\"Domains to route through VPN\"));\n split_tunnel_domains_info_label_->setText(\n QObject::tr(\"List domains that should use VPN tunnel. \"\n \"Only these domains will go through VPN, \"\n \"all other traffic bypasses VPN\"));\n } else {\n settings_->SetSplitTunnelMode(SettingsModel::kSplitTunnelModeExclude);\n split_tunnel_domains_label_->setText(\n QObject::tr(\"Domains to bypass VPN\"));\n\n split_tunnel_domains_info_label_->setText(\n QObject::tr(\"List domains that should bypass VPN tunnel. \"\n \"These domains will go directly, \"\n \"all other traffic uses VPN\"));\n }\n });\n\n routing_grid_layout_->addWidget(\n split_mode_label_container, current_row, 0, Qt::AlignLeft | Qt::AlignTop);\n routing_grid_layout_->addWidget(split_tunnel_mode_combo_box_, current_row, 1,\n Qt::AlignLeft | Qt::AlignTop);\n current_row++;\n\n split_tunnel_domains_label_ = new QLabel(this);\n if (settings_->SplitTunnelMode() == SettingsModel::kSplitTunnelModeInclude) {\n split_tunnel_domains_label_->setText(\n QObject::tr(\"Domains to route through VPN\"));\n } else {\n split_tunnel_domains_label_->setText(QObject::tr(\"Domains to bypass VPN\"));\n }\n\n split_tunnel_domains_info_label_ = new QLabel(this);\n if (settings_->SplitTunnelMode() == SettingsModel::kSplitTunnelModeInclude) {\n split_tunnel_domains_info_label_->setText(QObject::tr(\n \"List domains that should use VPN tunnel. Only these domains will go \"\n \"through VPN, all other traffic bypasses VPN\"));\n } else {\n split_tunnel_domains_info_label_->setText(\n QObject::tr(\"List domains that should bypass VPN tunnel. These domains \"\n \"will go directly, all other traffic uses VPN\"));\n }\n split_tunnel_domains_info_label_->setWordWrap(true);\n split_tunnel_domains_info_label_->setStyleSheet(kInfoLabelStyle);\n\n auto* split_domains_label_container = new QWidget(this);\n auto* split_domains_label_layout =\n new QVBoxLayout(split_domains_label_container);\n split_domains_label_layout->setContentsMargins(0, 0, 0, 0);\n split_domains_label_layout->addWidget(\n split_tunnel_domains_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n split_domains_label_layout->addWidget(\n split_tunnel_domains_info_label_, 0, Qt::AlignLeft | Qt::AlignTop);\n\n split_tunnel_domains_text_edit_ = new QTextEdit(this);\n split_tunnel_domains_text_edit_->setPlainText(\n VectorToText(settings_->SplitTunnelDomains()));\n split_tunnel_domains_text_edit_->setSizePolicy(\n QSizePolicy::Expanding, QSizePolicy::Expanding);\n split_tunnel_domains_text_edit_->setMinimumHeight(80);\n split_tunnel_domains_text_edit_->setPlaceholderText(\n QObject::tr(\"domain:com\\ndomain:another.com\\ndomain:sub.domainname.com\"));\n connect(\n split_tunnel_domains_text_edit_, &QTextEdit::textChanged, this, [this]() {\n settings_->SetSplitTunnelDomains(\n TextToVector(split_tunnel_domains_text_edit_->toPlainText()));\n });\n\n routing_grid_layout_->addWidget(split_domains_label_container, current_row, 0,\n Qt::AlignLeft | Qt::AlignTop);\n routing_grid_layout_->addWidget(\n split_tunnel_domains_text_edit_, current_row, 1);\n routing_grid_layout_->setRowStretch(current_row, 1);\n current_row++;\n\n bool split_enabled = settings_->EnableSplitTunnel();\n split_tunnel_mode_label_->setVisible(split_enabled);\n split_tunnel_mode_info_label_->setVisible(split_enabled);\n split_tunnel_mode_combo_box_->setVisible(split_enabled);\n split_tunnel_domains_label_->setVisible(split_enabled);\n split_tunnel_domains_info_label_->setVisible(split_enabled);\n split_tunnel_domains_text_edit_->setVisible(split_enabled);\n\n routing_layout->addLayout(routing_grid_layout_);\n\n routing_layout->addStretch(1);\n\n routing_scroll_area->setWidget(routing_content_widget);\n main_routing_layout->addWidget(routing_scroll_area);\n\n tab_widget_->addTab(routing_tab_, QObject::tr(\"Routing\"));\n\n // ==================== About Tab ====================\n about_tab_ = new QWidget();\n auto* main_about_layout = new QVBoxLayout(about_tab_);\n main_about_layout->setContentsMargins(0, 0, 0, 0);\n\n auto* about_scroll_area = new QScrollArea(this);\n about_scroll_area->setWidgetResizable(true);\n about_scroll_area->setHorizontalScrollBarPolicy(Qt::ScrollBarAlwaysOff);\n about_scroll_area->setVerticalScrollBarPolicy(Qt::ScrollBarAlwaysOn);\n about_scroll_area->setFrameShape(QFrame::NoFrame);\n\n auto* about_content_widget = new QWidget();\n auto* about_layout = new QVBoxLayout(about_content_widget);\n about_layout->setContentsMargins(5, 5, 5, 5);\n about_layout->setSpacing(10);\n\n auto* fptn_label = new QLabel(\"FPTN\", this);\n fptn_label->setAlignment(Qt::AlignCenter);\n about_layout->addWidget(fptn_label);\n\n version_label_ = new QLabel(\n QString(QObject::tr(\"Version\") + \": %1\").arg(FPTN_VERSION), this);\n version_label_->setAlignment(Qt::AlignCenter);\n about_layout->addWidget(version_label_);\n\n project_info_label_ = new QLabel(QObject::tr(\"FPTN_DESCRIPTION\"), this);\n project_info_label_->setWordWrap(true);\n project_info_label_->setAlignment(Qt::AlignJustify);\n about_layout->addWidget(project_info_label_);\n\n website_link_label_ =\n new QLabel(QObject::tr(\"FPTN_WEBSITE_DESCRIPTION\"), this);\n website_link_label_->setOpenExternalLinks(true);\n about_layout->addWidget(website_link_label_);\n\n telegram_group_label_ =\n new QLabel(QObject::tr(\"FPTN_TELEGRAM_DESCRIPTION\"), this);\n telegram_group_label_->setTextFormat(Qt::RichText);\n telegram_group_label_->setTextInteractionFlags(Qt::TextBrowserInteraction);\n telegram_group_label_->setOpenExternalLinks(true);\n about_layout->addWidget(telegram_group_label_);\n\n boosty_link_label_ =\n new QLabel(QObject::tr(\"Support the project on\") +\n \" Boosty\",\n this);\n boosty_link_label_->setOpenExternalLinks(true);\n boosty_link_label_->setAlignment(Qt::AlignLeft);\n about_layout->addWidget(boosty_link_label_);\n\n sponsors_label_ = new QLabel(QObject::tr(\"Project Sponsors\"), this);\n sponsors_label_->setAlignment(Qt::AlignLeft);\n about_layout->addWidget(sponsors_label_);\n\n const QString sponsors_list =\n \" - Brebor
\"\n \" - miklefox
\"\n \" - usrbb
\"\n \" - Secret_Agent_001
\"\n \" - ragdollmaster
\"\n \" - slimefrozik
\"\n \" - HooLigaN
\"\n \" - Dima
\"\n \" - Kori
\"\n \" - DrowASD
\"\n \" - GΣG 5952
\"\n \" - NikVas
\"\n \" - Сергей
\"\n \" - Frizgy
\"\n \" - Tired Smi1e
\"\n \" - Teya Aster
\"\n \" - loftynite
\"\n \" - vlz78
\"\n \" - Erranted
\"\n \" - Kotishqua
\"\n \" - Neiros
\"\n \" - Кабан из AYAYANII
\"\n \" - Stasyan
\"\n \" - Daptepik
\"\n \" - Cu6ic
\"\n \" - FC
\"\n \" - Temikin
\"\n \" - Azeasy
\"\n \" - NekoDark
\"\n \" - Alin Zoberg
\"\n \" - zsergey
\"\n \" - OlegPaRe
\"\n \" - Norelax
\"\n \" - Alligator
\"\n \" - vblll
\"\n \" - Ayuemin
\"\n \" - Semchuk
\"\n \" - Barzas153
\"\n \" - machinefactor
\"\n \" - mahovmm
\"\n \" - KOTleta
\"\n \" - Arelost
\"\n \" - Хмурый
\"\n \" - 弐式炎雷
\"\n \" - ☸️Bhagos☸️
\"\n \" - Pavel
\"\n \" - zoomzoom
\"\n \" - Kovalskij
\"\n \" - Yumarictx
\"\n \" - ББ
\"\n \" - huko
\"\n \" - @UNBREAKABLE189
\"\n \" - TheChosenOne
\";\n\n sponsors_names_label_ = new QLabel(sponsors_list, this);\n sponsors_names_label_->setAlignment(Qt::AlignLeft);\n sponsors_names_label_->setTextInteractionFlags(Qt::TextSelectableByMouse);\n sponsors_names_label_->setWordWrap(true);\n about_layout->addWidget(sponsors_names_label_);\n\n about_layout->addStretch(1);\n\n about_scroll_area->setWidget(about_content_widget);\n main_about_layout->addWidget(about_scroll_area);\n\n tab_widget_->addTab(about_tab_, QObject::tr(\"About\"));\n\n // Setup tabs\n auto* main_layout = new QVBoxLayout(this);\n main_layout->setContentsMargins(5, 5, 5, 5);\n main_layout->addWidget(tab_widget_);\n\n auto* button_layout = new QHBoxLayout();\n button_layout->addStretch();\n\n load_new_token_button_ =\n new QPushButton(\" \" + QObject::tr(\"Add token\") + \" \", this);\n connect(load_new_token_button_, &QPushButton::clicked, this,\n &SettingsWidget::onLoadNewConfig);\n button_layout->addWidget(load_new_token_button_);\n\n exit_button_ = new QPushButton(\" \" + QObject::tr(\"Close\") + \" \", this);\n connect(exit_button_, &QPushButton::clicked, this, &SettingsWidget::onExit);\n button_layout->addWidget(exit_button_);\n\n main_layout->addLayout(button_layout);\n\n setLayout(main_layout);\n\n const QVector& services = settings_->Services();\n if (server_table_) {\n server_table_->setRowCount(services.size());\n for (int i = 0; i < services.size(); ++i) {\n const ServiceConfig& service = services[i];\n server_table_->setItem(i, 0, new QTableWidgetItem(service.service_name));\n server_table_->setItem(i, 1, new QTableWidgetItem(service.username));\n\n QString servers_text_list = \"\";\n for (const auto& s : service.servers) {\n servers_text_list += QString(\"%1\\n\").arg(s.name);\n }\n auto* item = new QTableWidgetItem(servers_text_list);\n item->setTextAlignment(Qt::AlignLeft | Qt::AlignVCenter);\n item->setFlags(item->flags() | Qt::ItemIsEnabled);\n item->setData(Qt::DisplayRole, servers_text_list);\n server_table_->setItem(i, 2, item);\n\n auto* delete_button = new QPushButton(QObject::tr(\"X\"), this);\n delete_button->setFixedSize(24, 24);\n delete_button->setStyleSheet(R\"(\n QPushButton {\n background-color: #444444;\n color: white;\n border: none;\n border-radius: 12px;\n font-weight: bold;\n padding: 0px;\n }\n QPushButton:hover {\n background-color: #cc0000;\n }\n QPushButton:pressed {\n background-color: #990000;\n }\n )\");\n delete_button->setToolTip(QObject::tr(\"Delete\"));\n connect(delete_button, &QPushButton::clicked,\n [this, i]() { onRemoveServer(i); });\n\n auto* button_container = new QWidget(this);\n auto* action_layout = new QHBoxLayout(button_container);\n action_layout->setContentsMargins(0, 0, 0, 0);\n action_layout->setAlignment(Qt::AlignCenter);\n action_layout->addWidget(delete_button);\n server_table_->setCellWidget(i, 3, button_container);\n }\n }\n\n onBypassMethodChanged(bypass_method_combo_box_->currentText());\n\n UpdateSniFilesList();\n\n resize(680, 500);\n if (tab_widget_) {\n tab_widget_->setCurrentIndex(0);\n }\n UpdateServerTableVisibility();\n}\n\n// NOLINTNEXTLINE(bugprone-branch-clone)\nvoid SettingsWidget::onExit() {\n settings_->SetUsingNetworkInterface(interface_combo_box_->currentText());\n settings_->SetLanguage(language_combo_box_->currentText());\n settings_->SetGatewayIp(gateway_line_edit_->text());\n settings_->SetSNI(sni_line_edit_->text());\n\n const QString current_method = bypass_method_combo_box_->currentText();\n\n if (current_method == QObject::tr(\"OBFUSCATION\") ||\n current_method == SettingsModel::kBypassMethodObfuscation) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodObfuscation);\n }\n /* Chrome */\n else if (current_method == QObject::tr(\"SNI-REALITY (Chrome 147)\") ||\n current_method == SettingsModel::kBypassMethodSniRealityChrome147) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityChrome147);\n } else if (current_method == QObject::tr(\"SNI-REALITY (Chrome 146)\") ||\n current_method ==\n SettingsModel::kBypassMethodSniRealityChrome146) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityChrome146);\n } else if (current_method == QObject::tr(\"SNI-REALITY (Chrome 145)\") ||\n current_method ==\n SettingsModel::kBypassMethodSniRealityChrome145) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityChrome145);\n }\n /* Firefox */\n else if (current_method == QObject::tr(\"SNI-REALITY (Firefox 149)\") ||\n current_method == SettingsModel::kBypassMethodSniRealityFirefox149) {\n settings_->SetBypassMethod(\n SettingsModel::kBypassMethodSniRealityFirefox149);\n }\n /* Yandex */\n else if (current_method == QObject::tr(\"SNI-REALITY (Yandex 26)\") ||\n current_method == SettingsModel::kBypassMethodSniRealityYandex26) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityYandex26);\n }\n /* default\n else if (current_method == QObject::tr(\"SNI-REALITY (Yandex 25)\") ||\n current_method == SettingsModel::kBypassMethodSniRealityYandex25) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityYandex25);\n }\n */\n else if (current_method == QObject::tr(\"SNI-REALITY (Yandex 24)\") ||\n current_method == SettingsModel::kBypassMethodSniRealityYandex24) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityYandex24);\n }\n\n /* Safari */\n else if (current_method == QObject::tr(\"SNI-REALITY (Safari 26)\") ||\n current_method == SettingsModel::kBypassMethodSniRealitySafari26) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealitySafari26);\n }\n /* Default */\n else {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityYandex25);\n }\n\n if (!settings_->Save()) {\n QMessageBox::critical(this, QObject::tr(\"Save Failed\"),\n QObject::tr(\"An error occurred while saving the data.\"));\n }\n this->close();\n}\n\nvoid SettingsWidget::onLoadNewConfig() {\n TokenDialog dialog(this);\n dialog.exec();\n const QString token = dialog.Token();\n\n // show on top\n show();\n activateWindow();\n raise();\n\n if (!token.isEmpty()) {\n try {\n ServiceConfig config = settings_->ParseToken(token);\n int exists_index = settings_->GetExistServiceIndex(config.service_name);\n if (exists_index != -1 && server_table_ != nullptr) {\n // remove previous settings\n settings_->RemoveServer(exists_index);\n server_table_->removeRow(exists_index);\n }\n settings_->AddService(config);\n const bool saving_status = settings_->Save();\n if (saving_status && server_table_ != nullptr) {\n // Insert a new row into the server table\n const int new_row = server_table_->rowCount();\n server_table_->insertRow(new_row);\n\n server_table_->setItem(\n new_row, 0, new QTableWidgetItem(config.service_name));\n server_table_->setItem(\n new_row, 1, new QTableWidgetItem(config.username));\n\n QString servers_text_list = \"\";\n for (const auto& s : config.servers) {\n servers_text_list += QString(\"%1\\n\").arg(s.name);\n }\n\n for (const auto& s : config.censored_zone_servers) {\n servers_text_list += QString(\"* %1\\n\").arg(s.name);\n }\n\n auto* item = new QTableWidgetItem(servers_text_list);\n item->setTextAlignment(Qt::AlignLeft | Qt::AlignVCenter);\n item->setFlags(item->flags() | Qt::ItemIsEnabled);\n item->setData(Qt::DisplayRole, servers_text_list);\n server_table_->setItem(new_row, 2, item);\n\n auto* delete_button = new QPushButton(QObject::tr(\"X\"), this);\n delete_button->setFixedSize(24, 24);\n delete_button->setStyleSheet(R\"(\n QPushButton {\n background-color: #444444;\n color: white;\n border: none;\n border-radius: 12px;\n font-weight: bold;\n padding: 0px;\n }\n QPushButton:hover {\n background-color: #cc0000;\n }\n QPushButton:pressed {\n background-color: #990000;\n }\n )\");\n delete_button->setToolTip(QObject::tr(\"Delete\"));\n\n auto* button_container = new QWidget();\n auto* button_layout = new QHBoxLayout(button_container);\n button_layout->setContentsMargins(0, 0, 0, 0);\n button_layout->setAlignment(Qt::AlignCenter);\n button_layout->addWidget(delete_button);\n server_table_->setCellWidget(new_row, 3, button_container);\n\n QMessageBox::information(this, QObject::tr(\"Save Successful\"),\n QObject::tr(\"Data has been successfully saved.\"));\n } else {\n QMessageBox::critical(this, QObject::tr(\"Save Failed\"),\n QObject::tr(\"An error occurred while saving the data.\"));\n }\n } catch (const std::exception& err) {\n QMessageBox::critical(this, QObject::tr(\"Error!\"), err.what());\n }\n }\n UpdateServerTableVisibility();\n}\n\nvoid SettingsWidget::onRemoveServer(int row) {\n if (row >= 0 && row < server_table_->rowCount() && server_table_ != nullptr) {\n server_table_->removeRow(row);\n settings_->RemoveServer(row);\n QMessageBox::information(this, QObject::tr(\"Delete Successful\"),\n QObject::tr(\"The data has been successfully removed\"));\n }\n UpdateServerTableVisibility();\n}\n\nvoid SettingsWidget::closeEvent(QCloseEvent* event) {\n onExit();\n event->accept(); // Accept the event to proceed with the closing\n}\n\nvoid SettingsWidget::onLanguageChanged(const QString&) {\n // set language\n settings_->SetLanguage(language_combo_box_->currentText());\n fptn::gui::SetTranslation(settings_->LanguageCode());\n if (!settings_->Save()) {\n QMessageBox::critical(this, QObject::tr(\"Save Failed\"),\n QObject::tr(\"An error occurred while saving the data.\"));\n }\n\n setWindowTitle(QObject::tr(\"Settings\"));\n if (tab_widget_) {\n tab_widget_->setTabText(0, QObject::tr(\"Settings\"));\n tab_widget_->setTabText(1, QObject::tr(\"Routing\"));\n tab_widget_->setTabText(2, QObject::tr(\"About\"));\n }\n if (language_label_) {\n language_label_->setText(QObject::tr(\"Language\"));\n }\n if (interface_label_) {\n interface_label_->setText(QObject::tr(\"Network Interface (adapter)\"));\n }\n if (gateway_label_) {\n gateway_label_->setText(\n QObject::tr(\"Gateway IP Address (typically your router's address)\"));\n }\n if (server_table_) {\n server_table_->setHorizontalHeaderLabels({QObject::tr(\"Name\"),\n QObject::tr(\"User\"), QObject::tr(\"Servers\"), QObject::tr(\"Action\")});\n }\n if (load_new_token_button_) {\n load_new_token_button_->setText(\" \" + QObject::tr(\"Add token\") + \" \");\n }\n if (exit_button_) {\n exit_button_->setText(\" \" + QObject::tr(\"Close\") + \" \");\n }\n if (gateway_auto_checkbox_) {\n gateway_auto_checkbox_->setText(QObject::tr(\"Auto\"));\n }\n // AUTOSTART (show only for Linux)\n#ifdef __linux__\n if (autostart_label_) {\n autostart_label_->setText(QObject::tr(\"Autostart\"));\n }\n#endif\n\n // Bypass blocking\n if (bypass_method_label_) {\n bypass_method_label_->setText(QObject::tr(\"Bypass blocking method\"));\n }\n\n const auto current_method = settings_->BypassMethod();\n if (bypass_method_combo_box_) {\n bypass_method_combo_box_->clear();\n // bypass_method_combo_box_->addItem(\n // QObject::tr(\"SNI\"), SettingsModel::kBypassMethodSni);\n bypass_method_combo_box_->addItem(\n QObject::tr(\"OBFUSCATION\"), SettingsModel::kBypassMethodObfuscation);\n // bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Generic)\"),\n // SettingsModel::kBypassMethodSniReality);\n /* Chrome */\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Chrome 147)\"),\n SettingsModel::kBypassMethodSniRealityChrome147);\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Chrome 146)\"),\n SettingsModel::kBypassMethodSniRealityChrome146);\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Chrome 145)\"),\n SettingsModel::kBypassMethodSniRealityChrome145);\n /* Firefox */\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Firefox 149)\"),\n SettingsModel::kBypassMethodSniRealityFirefox149);\n /* Yandex */\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Yandex 26)\"),\n SettingsModel::kBypassMethodSniRealityYandex26);\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Yandex 25)\"),\n SettingsModel::kBypassMethodSniRealityYandex25);\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Yandex 24)\"),\n SettingsModel::kBypassMethodSniRealityYandex24);\n /* Safari */\n bypass_method_combo_box_->addItem(QObject::tr(\"SNI-REALITY (Safari 26)\"),\n SettingsModel::kBypassMethodSniRealitySafari26);\n\n /* Chrome */\n if (current_method == SettingsModel::kBypassMethodSniRealityChrome147) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Chrome 147)\"));\n } else if (current_method ==\n SettingsModel::kBypassMethodSniRealityChrome146) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Chrome 146)\"));\n } else if (current_method ==\n SettingsModel::kBypassMethodSniRealityChrome145) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Chrome 145)\"));\n }\n /* Firefox */\n else if (current_method ==\n SettingsModel::kBypassMethodSniRealityFirefox149) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Firefox 149)\"));\n }\n /* Yandex */\n else if (current_method == SettingsModel::kBypassMethodSniRealityYandex26) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Yandex 26)\"));\n } else if (\n current_method ==\n SettingsModel::\n kBypassMethodSniRealityYandex25) { // NOLINT(bugprone-branch-clone)\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Yandex 25)\"));\n } else if (current_method ==\n SettingsModel::kBypassMethodSniRealityYandex24) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Yandex 24)\"));\n }\n /* Safari */\n else if (current_method == SettingsModel::kBypassMethodSniRealitySafari26) {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Safari 26)\"));\n }\n /* Default */\n else {\n bypass_method_combo_box_->setCurrentText(\n QObject::tr(\"SNI-REALITY (Yandex 25)\"));\n }\n }\n\n if (sni_label_) {\n if (settings_->BypassMethod() == SettingsModel::kBypassMethodSniReality) {\n sni_label_->setText(QObject::tr(\"Fake domain to bypass blocking\"));\n }\n }\n if (sni_autoscan_button_) {\n sni_autoscan_button_->setText(QObject::tr(\"Autoscan SNI\"));\n }\n if (sni_import_button_) {\n sni_import_button_->setText(QObject::tr(\"Import SNI file\"));\n }\n\n // Routing tab\n if (enable_dns_management_label_) {\n enable_dns_management_label_->setText(\n QObject::tr(\"Enable advanced DNS management\"));\n }\n if (enable_dns_management_info_label_) {\n enable_dns_management_info_label_->setText(QObject::tr(\n \"Enables advanced DNS configuration to prevent leaks. \"\n \"Recommended when using split tunneling. Use with caution!\"));\n }\n if (blacklist_domains_label_) {\n blacklist_domains_label_->setText(QObject::tr(\"Blacklist domains\"));\n }\n if (blacklist_domains_info_label_) {\n blacklist_domains_info_label_->setText(\n QObject::tr(\"Completely block access to the main domain AND all its \"\n \"subdomains. Format: domain:example.com (one per line)\"));\n }\n if (blacklist_domains_text_edit_) {\n blacklist_domains_text_edit_->setPlaceholderText(\n QObject::tr(\"domain:example.com\\ndomain:another.com\"));\n }\n\n if (exclude_tunnel_networks_label_) {\n exclude_tunnel_networks_label_->setText(\n QObject::tr(\"Exclude tunnel networks\"));\n }\n if (exclude_tunnel_networks_info_label_) {\n exclude_tunnel_networks_info_label_->setText(QObject::tr(\n \"Networks that always bypass VPN tunnel. \"\n \"Traffic to these networks goes directly, never through VPN\"));\n }\n\n if (include_tunnel_networks_label_) {\n include_tunnel_networks_label_->setText(\n QObject::tr(\"Include tunnel networks\"));\n }\n if (include_tunnel_networks_info_label_) {\n include_tunnel_networks_info_label_->setText(\n QObject::tr(\"Networks that always use VPN tunnel. \"\n \"Traffic to these networks always goes through VPN\"));\n }\n\n if (enable_split_tunnel_label_) {\n enable_split_tunnel_label_->setText(QObject::tr(\"Enable split tunnel\"));\n }\n if (enable_split_tunnel_info_label_) {\n enable_split_tunnel_info_label_->setText(\n QObject::tr(\"When enabled, you can configure which sites use VPN and \"\n \"which go directly.\"));\n }\n\n if (split_tunnel_mode_label_) {\n split_tunnel_mode_label_->setText(QObject::tr(\"Split tunnel mode\"));\n }\n if (split_tunnel_mode_info_label_) {\n split_tunnel_mode_info_label_->setText(\n QObject::tr(\"Defines traffic routing strategy for split tunneling.\"));\n }\n if (split_tunnel_mode_combo_box_) {\n QString current_mode = split_tunnel_mode_combo_box_->currentText();\n split_tunnel_mode_combo_box_->clear();\n split_tunnel_mode_combo_box_->addItem(\n QObject::tr(\"Exclude\"), SettingsModel::kSplitTunnelModeExclude);\n split_tunnel_mode_combo_box_->addItem(\n QObject::tr(\"Include\"), SettingsModel::kSplitTunnelModeInclude);\n\n if (current_mode == QObject::tr(\"Include\") ||\n current_mode == SettingsModel::kSplitTunnelModeInclude) {\n split_tunnel_mode_combo_box_->setCurrentText(QObject::tr(\"Include\"));\n } else {\n split_tunnel_mode_combo_box_->setCurrentText(QObject::tr(\"Exclude\"));\n }\n }\n\n if (split_tunnel_domains_label_ && split_tunnel_domains_info_label_) {\n if (settings_->SplitTunnelMode() ==\n SettingsModel::kSplitTunnelModeInclude) {\n split_tunnel_domains_label_->setText(\n QObject::tr(\"Domains to route through VPN\"));\n split_tunnel_domains_info_label_->setText(QObject::tr(\n \"List domains that should use VPN tunnel. Only these domains will \"\n \"go through VPN, all other traffic bypasses VPN\"));\n } else {\n split_tunnel_domains_label_->setText(\n QObject::tr(\"Domains to bypass VPN\"));\n split_tunnel_domains_info_label_->setText(\n QObject::tr(\"List domains that should bypass VPN tunnel. These \"\n \"domains will go directly, all other traffic uses VPN\"));\n }\n }\n if (split_tunnel_domains_text_edit_) {\n split_tunnel_domains_text_edit_->setPlaceholderText(QObject::tr(\n \"domain:com\\ndomain:another.com\\ndomain:sub.domainname.com\"));\n }\n\n // about\n if (version_label_) {\n version_label_->setText(\n QString(QObject::tr(\"Version\") + \": %1\").arg(FPTN_VERSION));\n }\n if (project_info_label_) {\n project_info_label_->setText(QObject::tr(\"FPTN_DESCRIPTION\"));\n }\n if (website_link_label_) {\n website_link_label_->setText(QObject::tr(\"FPTN_WEBSITE_DESCRIPTION\"));\n }\n if (telegram_group_label_) {\n telegram_group_label_->setText(QObject::tr(\"FPTN_TELEGRAM_DESCRIPTION\"));\n }\n // sponsors section\n if (boosty_link_label_) {\n boosty_link_label_->setText(\n QObject::tr(\"Support the project on\") +\n \" Boosty\");\n }\n if (sponsors_label_) {\n sponsors_label_->setText(QObject::tr(\"Project Sponsors\"));\n }\n}\n\nvoid SettingsWidget::onInterfaceChanged(const QString&) {\n settings_->SetUsingNetworkInterface(interface_combo_box_->currentText());\n if (!settings_->Save()) {\n QMessageBox::critical(this, QObject::tr(\"Save Failed\"),\n QObject::tr(\"An error occurred while saving the data.\"));\n }\n}\n\nvoid SettingsWidget::onAutostartChanged(bool checked) {\n if (checked) {\n fptn::gui::autostart::enable();\n settings_->SetAutostart(true);\n } else {\n fptn::gui::autostart::disable();\n settings_->SetAutostart(false);\n }\n}\n\nvoid SettingsWidget::onAutoGatewayChanged(bool checked) {\n if (checked) {\n gateway_line_edit_->setDisabled(true);\n gateway_line_edit_->setText(\"\");\n settings_->SetGatewayIp(\"auto\");\n } else {\n gateway_line_edit_->setEnabled(true);\n }\n}\nvoid SettingsWidget::onBypassMethodChanged(const QString& method) {\n const bool is_reality_mode =\n /* Chrome */\n method == QObject::tr(\"SNI-REALITY (Chrome 147)\") ||\n method == SettingsModel::kBypassMethodSniRealityChrome147 ||\n method == QObject::tr(\"SNI-REALITY (Chrome 146)\") ||\n method == SettingsModel::kBypassMethodSniRealityChrome146 ||\n method == QObject::tr(\"SNI-REALITY (Chrome 145)\") ||\n method == SettingsModel::kBypassMethodSniRealityChrome145 ||\n /* Firefox */\n method == QObject::tr(\"SNI-REALITY (Firefox 149)\") ||\n /* Yandex */\n method == SettingsModel::kBypassMethodSniRealityFirefox149 ||\n method == QObject::tr(\"SNI-REALITY (Yandex 26)\") ||\n method == SettingsModel::kBypassMethodSniRealityYandex26 ||\n method == QObject::tr(\"SNI-REALITY (Yandex 25)\") ||\n method == SettingsModel::kBypassMethodSniRealityYandex25 ||\n method == QObject::tr(\"SNI-REALITY (Yandex 24)\") ||\n method == SettingsModel::kBypassMethodSniRealityYandex24 ||\n /* Safari */\n method == QObject::tr(\"SNI-REALITY (Safari 26)\") ||\n method == SettingsModel::kBypassMethodSniRealitySafari26;\n\n // Show/hide SNI field\n sni_label_->setVisible(is_reality_mode);\n sni_line_edit_->setVisible(is_reality_mode);\n\n // Show/hide SNI files section based on mode\n sni_files_list_widget_->setVisible(is_reality_mode);\n sni_autoscan_button_->setVisible(is_reality_mode);\n sni_import_button_->setVisible(is_reality_mode);\n\n if (is_reality_mode) {\n grid_layout_->addWidget(sni_label_, 5, 0, Qt::AlignLeft | Qt::AlignVCenter);\n grid_layout_->addWidget(sni_line_edit_, 5, 1, 1, 2);\n grid_layout_->addLayout(sni_buttons_layout_, 7, 0);\n grid_layout_->addWidget(sni_files_list_widget_, 7, 1, 1, 2);\n } else {\n grid_layout_->removeWidget(sni_label_);\n grid_layout_->removeWidget(sni_line_edit_);\n grid_layout_->removeItem(sni_buttons_layout_);\n grid_layout_->removeWidget(sni_files_list_widget_);\n }\n\n // Set the bypass method\n if (method == QObject::tr(\"OBFUSCATION\") ||\n method == SettingsModel::kBypassMethodObfuscation) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodObfuscation);\n }\n /* Chrome */\n else if (method == QObject::tr(\"SNI-REALITY (Chrome 147)\") ||\n method == SettingsModel::kBypassMethodSniRealityChrome147) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityChrome147);\n } else if (method == QObject::tr(\"SNI-REALITY (Chrome 146)\") ||\n method == SettingsModel::kBypassMethodSniRealityChrome146) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityChrome146);\n } else if (method == QObject::tr(\"SNI-REALITY (Chrome 145)\") ||\n method == SettingsModel::kBypassMethodSniRealityChrome145) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityChrome145);\n }\n /* Firefox */\n else if (method == QObject::tr(\"SNI-REALITY (Firefox 149)\") ||\n method == SettingsModel::kBypassMethodSniRealityFirefox149) {\n settings_->SetBypassMethod(\n SettingsModel::kBypassMethodSniRealityFirefox149);\n }\n /* Yandex */\n else if (method == QObject::tr(\"SNI-REALITY (Yandex 26)\") ||\n method == SettingsModel::kBypassMethodSniRealityYandex26) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityYandex26);\n }\n /*\n * default\n else if (method == QObject::tr(\"SNI-REALITY (Yandex 25)\") ||\n method == SettingsModel::kBypassMethodSniRealityYandex25) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityYandex25);\n }\n */\n else if (method == QObject::tr(\"SNI-REALITY (Yandex 24)\") ||\n method == SettingsModel::kBypassMethodSniRealityYandex24) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityYandex24);\n }\n /* Safari */\n else if (method == QObject::tr(\"SNI-REALITY (Safari 26)\") ||\n method == SettingsModel::kBypassMethodSniRealitySafari26) {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealitySafari26);\n }\n /* Default */\n else {\n settings_->SetBypassMethod(SettingsModel::kBypassMethodSniRealityYandex25);\n }\n\n if (sni_label_) {\n if (settings_->BypassMethod() != SettingsModel::kBypassMethodSni) {\n sni_label_->setText(QObject::tr(\"Fake domain to bypass blocking\"));\n }\n }\n}\n\nvoid SettingsWidget::UpdateSniFilesList() {\n sni_files_list_widget_->clear();\n\n auto files = settings_->SniManager()->SniFileList();\n for (const auto& file : files) {\n QString file_name = QString::fromStdString(file);\n\n auto* item_widget = new QWidget(this);\n auto* layout = new QHBoxLayout(item_widget);\n layout->setContentsMargins(10, 5, 10, 5);\n layout->setSpacing(10);\n\n auto* name_label = new QLabel(file_name);\n name_label->setStyleSheet(\"QLabel { font-weight: bold; }\");\n name_label->setSizePolicy(QSizePolicy::Expanding, QSizePolicy::Preferred);\n\n layout->addWidget(name_label);\n\n item_widget->setLayout(layout);\n\n auto* item = new QListWidgetItem(sni_files_list_widget_);\n item->setSizeHint(item_widget->sizeHint());\n sni_files_list_widget_->setItemWidget(item, item_widget);\n }\n\n if (files.empty()) {\n auto* empty_item = new QListWidgetItem(\n QObject::tr(\"No SNI files imported\"), sni_files_list_widget_);\n empty_item->setFlags(empty_item->flags() & ~Qt::ItemIsEnabled);\n empty_item->setTextAlignment(Qt::AlignCenter);\n }\n}\n\nvoid SettingsWidget::onImportSniFile() {\n QString file_path =\n QFileDialog::getOpenFileName(this, QObject::tr(\"Select SNI file\"), \"\",\n QObject::tr(\"SNI files (*.sni);;All files (*)\"));\n\n if (!file_path.isEmpty()) {\n QFileInfo file_info(file_path);\n QString file_name = file_info.fileName();\n\n auto existing_files = settings_->SniManager()->SniFileList();\n bool file_exists = false;\n for (const auto& existing_file : existing_files) {\n if (QString::fromStdString(existing_file) == file_name) {\n file_exists = true;\n break;\n }\n }\n\n if (file_exists) {\n QMessageBox::StandardButton reply = QMessageBox::question(this,\n QObject::tr(\"File exists\"),\n QObject::tr(\"File \\\"%1\\\" already exists. Overwrite?\").arg(file_name),\n QMessageBox::Yes | QMessageBox::No);\n if (reply != QMessageBox::Yes) {\n return;\n }\n }\n\n if (settings_->SniManager()->AddSniFile(file_path.toStdString())) {\n UpdateSniFilesList();\n QMessageBox::information(this, QObject::tr(\"Success\"),\n QObject::tr(\"SNI file imported successfully\"));\n } else {\n QMessageBox::warning(\n this, QObject::tr(\"Error\"), QObject::tr(\"Failed to import SNI file\"));\n }\n }\n}\n\nvoid SettingsWidget::onAutoscanClicked() {\n SniAutoscanDialog dialog(settings_, this);\n dialog.exec();\n sni_line_edit_->setText(settings_->SNI());\n}\n\nvoid SettingsWidget::UpdateServerTableVisibility() {\n if (server_table_) {\n const bool has_data = (server_table_->rowCount() > 0);\n server_table_->setVisible(has_data);\n }\n}\n" }, { "path": "src/fptn-client/gui/settingswidget/settings.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \"gui/settingsmodel/settingsmodel.h\"\n\nnamespace fptn::gui {\nclass SettingsWidget : public QDialog {\n Q_OBJECT\n\n public:\n explicit SettingsWidget(SettingsModelPtr settings, QWidget* parent = nullptr);\n\n protected:\n void closeEvent(QCloseEvent* event) override;\n\n protected:\n void SetupUi();\n void UpdateSniFilesList();\n void UpdateServerTableVisibility();\n\n // cppcheck-suppress unknownMacro\n private slots:\n void onExit();\n void onLoadNewConfig();\n void onRemoveServer(int row);\n void onLanguageChanged(const QString& new_language);\n void onInterfaceChanged(const QString& new_language);\n void onAutostartChanged(bool checked);\n void onAutoGatewayChanged(bool checked);\n void onBypassMethodChanged(const QString& method);\n\n // cppcheck-suppress unknownMacro\n private slots:\n void onImportSniFile();\n void onAutoscanClicked();\n\n private:\n SettingsModelPtr settings_;\n\n QTabWidget* tab_widget_ = nullptr;\n QWidget* settings_tab_ = nullptr;\n QWidget* routing_tab_ = nullptr;\n QWidget* about_tab_ = nullptr;\n QTableWidget* server_table_ = nullptr;\n\n// AUTOSTART (show only for Linux)\n#ifdef __linux__\n QLabel* autostart_label_ = nullptr;\n QCheckBox* autostart_checkbox_ = nullptr;\n#endif\n QLabel* language_label_ = nullptr;\n QComboBox* language_combo_box_ = nullptr;\n\n QGridLayout* grid_layout_ = nullptr;\n QGridLayout* routing_grid_layout_ = nullptr;\n\n QComboBox* interface_combo_box_ = nullptr;\n QLabel* interface_label_ = nullptr;\n\n QLineEdit* gateway_line_edit_ = nullptr;\n QCheckBox* gateway_auto_checkbox_ = nullptr;\n QLabel* gateway_label_ = nullptr;\n\n QLabel* bypass_method_label_ = nullptr;\n QComboBox* bypass_method_combo_box_ = nullptr;\n\n QHBoxLayout* sni_buttons_layout_ = nullptr;\n\n QLabel* sni_label_ = nullptr;\n QLineEdit* sni_line_edit_ = nullptr;\n\n QListWidget* sni_files_list_widget_ = nullptr;\n QPushButton* sni_import_button_ = nullptr;\n QPushButton* sni_autoscan_button_ = nullptr;\n\n // New fields widgets for routing tab\n QLabel* enable_dns_management_label_ = nullptr;\n QLabel* enable_dns_management_info_label_ = nullptr;\n QCheckBox* enable_dns_management_checkbox_ = nullptr;\n\n QLabel* blacklist_domains_label_ = nullptr;\n QLabel* blacklist_domains_info_label_ = nullptr;\n QTextEdit* blacklist_domains_text_edit_ = nullptr;\n\n QLabel* exclude_tunnel_networks_label_ = nullptr;\n QLabel* exclude_tunnel_networks_info_label_ = nullptr;\n QTextEdit* exclude_tunnel_networks_text_edit_ = nullptr;\n\n QLabel* include_tunnel_networks_label_ = nullptr;\n QLabel* include_tunnel_networks_info_label_ = nullptr;\n QTextEdit* include_tunnel_networks_text_edit_ = nullptr;\n\n QLabel* enable_split_tunnel_label_ = nullptr;\n QLabel* enable_split_tunnel_info_label_ = nullptr;\n QCheckBox* enable_split_tunnel_checkbox_ = nullptr;\n\n QLabel* split_tunnel_mode_label_ = nullptr;\n QLabel* split_tunnel_mode_info_label_ = nullptr;\n QComboBox* split_tunnel_mode_combo_box_ = nullptr;\n\n QLabel* split_tunnel_domains_label_ = nullptr;\n QLabel* split_tunnel_domains_info_label_ = nullptr;\n QTextEdit* split_tunnel_domains_text_edit_ = nullptr;\n\n QPushButton* load_new_token_button_ = nullptr;\n\n QPushButton* exit_button_ = nullptr;\n\n QLabel* version_label_ = nullptr;\n\n QLabel* project_info_label_ = nullptr;\n QLabel* website_link_label_ = nullptr;\n QLabel* telegram_group_label_ = nullptr;\n QLabel* boosty_link_label_ = nullptr;\n QLabel* sponsors_label_ = nullptr;\n QLabel* sponsors_names_label_ = nullptr;\n};\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/sni_autoscan_dialog/sni_autoscan_dialog.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/sni_autoscan_dialog/sni_autoscan_dialog.h\"\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"fptn-protocol-lib/https/api_client/api_client.h\"\n\nnamespace fptn::gui {\n\nSniAutoscanDialog::SniAutoscanDialog(SettingsModelPtr settings, QWidget* parent)\n : QDialog(parent), settings_(std::move(settings)) {\n SetupUi();\n}\n\nSniAutoscanDialog::~SniAutoscanDialog() { StopScanning(); }\n\nvoid SniAutoscanDialog::SetupUi() {\n setMinimumSize(650, 400);\n setWindowTitle(QObject::tr(\"Autoscan SNI\"));\n setModal(true);\n\n auto* main_layout = new QVBoxLayout(this);\n main_layout->setSpacing(3);\n main_layout->setContentsMargins(3, 3, 3, 3);\n\n auto* top_layout = new QHBoxLayout(this);\n top_layout->setAlignment(Qt::AlignVCenter);\n\n server_combo_box_ = new QComboBox(this);\n server_combo_box_->addItem(QObject::tr(\"All\"));\n const QVector& services = settings_->Services();\n for (const auto& service : services) {\n for (const auto& server : service.servers) {\n server_combo_box_->addItem(server.name);\n }\n for (const auto& server : service.censored_zone_servers) {\n server_combo_box_->addItem(\"* \" + server.name);\n }\n }\n\n sni_file_combo_box_ = new QComboBox(this);\n sni_file_combo_box_->addItem(QObject::tr(\"All\"));\n auto sni_files = settings_->SniManager()->SniFileList();\n for (const auto& file : sni_files) {\n sni_file_combo_box_->addItem(QString::fromStdString(file));\n }\n\n progress_label_ = new QLabel(\"0/0\", this);\n progress_label_->setMinimumWidth(80);\n progress_label_->setAlignment(Qt::AlignCenter);\n\n start_stop_button_ = new QPushButton(QObject::tr(\"Start\"), this);\n connect(start_stop_button_, &QPushButton::clicked, this,\n &SniAutoscanDialog::onStartStopClicked);\n\n close_button_ = new QPushButton(QObject::tr(\"Close\"), this);\n connect(close_button_, &QPushButton::clicked, this, [this]() {\n if (is_scanning_) {\n StopScanning();\n }\n reject();\n });\n\n top_layout->addWidget(server_combo_box_);\n top_layout->addWidget(sni_file_combo_box_);\n top_layout->addWidget(progress_label_);\n top_layout->addWidget(start_stop_button_);\n top_layout->addWidget(close_button_);\n\n log_text_edit_ = new QTextEdit(this);\n log_text_edit_->setReadOnly(true);\n log_text_edit_->setVerticalScrollBarPolicy(Qt::ScrollBarAlwaysOn);\n QFont log_font = QFontDatabase::systemFont(QFontDatabase::FixedFont);\n log_font.setPointSize(8);\n log_text_edit_->setFont(log_font);\n connect(log_text_edit_->verticalScrollBar(), &QScrollBar::rangeChanged, this,\n [this](int min, int max) {\n (void)min;\n if (auto_scroll_ && is_scanning_) {\n log_text_edit_->verticalScrollBar()->setValue(max);\n }\n });\n connect(log_text_edit_->verticalScrollBar(), &QScrollBar::valueChanged, this,\n [this](int value) {\n auto_scroll_ =\n (value == log_text_edit_->verticalScrollBar()->maximum());\n });\n\n main_layout->addLayout(top_layout);\n main_layout->addWidget(log_text_edit_, 1);\n\n progress_timer_ = new QTimer(this);\n connect(progress_timer_, &QTimer::timeout, this,\n &SniAutoscanDialog::onUpdateProgress);\n}\n\nvoid SniAutoscanDialog::onStartStopClicked() {\n if (!is_scanning_) {\n StartScanning();\n } else {\n StopScanning();\n }\n}\n\nvoid SniAutoscanDialog::onUpdateProgress() {\n if (!is_scanning_) {\n return;\n }\n\n const auto total = sni_vector_.size();\n const auto tested = static_cast(tested_count_);\n\n if (total > 0) {\n progress_label_->setText(QString(\"%1/%2\").arg(tested).arg(total));\n } else {\n progress_label_->setText(\"0/0\");\n }\n\n if (working_sni_found_ > 0 && !found_working_sni_.empty()) {\n StopScanning();\n\n settings_->SetSNI(QString::fromStdString(found_working_sni_));\n settings_->Save();\n\n QMessageBox::information(this, QObject::tr(\"Scan completed\"),\n QObject::tr(\"Working SNI found: %1\")\n .arg(QString::fromStdString(found_working_sni_)));\n return;\n }\n\n if (static_cast(tested_count_) >= sni_vector_.size()) {\n StopScanning();\n if (working_sni_found_ == 0) {\n QMessageBox::information(this, QObject::tr(\"Scan completed\"),\n QObject::tr(\"No working SNI found.\"));\n }\n }\n}\n\nvoid SniAutoscanDialog::StartScanning() {\n if (sni_file_combo_box_->currentText() == QObject::tr(\"All\")) {\n sni_vector_ = CollectAllSni();\n } else {\n sni_vector_ = CollectSniFromSelectedFile();\n }\n\n if (sni_vector_.empty()) {\n QMessageBox::warning(this, QObject::tr(\"Error\"),\n QObject::tr(\"No SNI available for scanning.\"));\n return;\n }\n\n target_servers_ = CollectTargetServers();\n if (target_servers_.isEmpty()) {\n QMessageBox::warning(this, QObject::tr(\"Error\"),\n QObject::tr(\"No servers available for scanning.\"));\n return;\n }\n\n std::random_device rd;\n std::mt19937 g(rd());\n std::ranges::shuffle(sni_vector_, g);\n\n is_scanning_ = true;\n stop_requested_ = false;\n tested_count_ = 0;\n working_sni_found_ = 0;\n current_sni_index_ = 0;\n found_working_sni_.clear();\n\n start_stop_button_->setText(QObject::tr(\"Cancel\"));\n server_combo_box_->setEnabled(false);\n sni_file_combo_box_->setEnabled(false);\n progress_label_->setText(\"0/0\");\n\n constexpr int kThreadCount = 8;\n for (int i = 0; i < kThreadCount; ++i) {\n worker_threads_.emplace_back(&SniAutoscanDialog::WorkerThread, this, i);\n }\n progress_timer_->start(100);\n}\n\nvoid SniAutoscanDialog::StopScanning() {\n if (!is_scanning_) return;\n\n stop_requested_ = true;\n\n for (auto& thread : worker_threads_) {\n if (thread.joinable()) {\n thread.join();\n }\n }\n worker_threads_.clear();\n\n is_scanning_ = false;\n progress_timer_->stop();\n\n start_stop_button_->setText(QObject::tr(\"Start\"));\n server_combo_box_->setEnabled(true);\n sni_file_combo_box_->setEnabled(true);\n}\n\nstd::string SniAutoscanDialog::GetNextSni() {\n const std::unique_lock lock(mutex_);\n\n if (current_sni_index_ >= sni_vector_.size()) {\n return std::string();\n }\n return sni_vector_[current_sni_index_++];\n}\n\nvoid SniAutoscanDialog::WorkerThread(int thread_id) {\n (void)thread_id;\n\n while (!stop_requested_) {\n std::string sni = GetNextSni();\n if (sni.empty()) {\n break;\n }\n\n bool sni_works = false;\n\n for (const auto& server : target_servers_) {\n if (stop_requested_) {\n break;\n }\n\n bool handshake_ok = false;\n bool http_ok = false;\n\n constexpr int kHandshakeTimeout = 2;\n fptn::protocol::https::ApiClient client(server.host.toStdString(),\n server.port, sni, server.md5_fingerprint.toStdString(),\n protocol::https::CensorshipStrategy::kSni);\n\n handshake_ok = client.TestHandshake(kHandshakeTimeout);\n if (handshake_ok) {\n constexpr int kHttpTimeout = 5;\n const auto response = client.Get(\"/api/v1/dns\", kHttpTimeout);\n http_ok = (response.code == 200);\n\n if (http_ok) {\n sni_works = true;\n }\n }\n\n AddLogEntry(\n server.name, QString::fromStdString(sni), handshake_ok, http_ok);\n\n if (sni_works) {\n break;\n }\n }\n\n ++tested_count_;\n\n if (sni_works) {\n found_working_sni_ = sni;\n ++working_sni_found_;\n break;\n }\n }\n}\n\nstd::vector SniAutoscanDialog::CollectAllSni() const {\n std::vector all_sni;\n\n auto files = settings_->SniManager()->SniFileList();\n for (const auto& file : files) {\n auto sni_list = settings_->SniManager()->GetSniList(file);\n for (const auto& sni : sni_list) {\n all_sni.push_back(sni);\n }\n }\n\n return all_sni;\n}\n\nstd::vector SniAutoscanDialog::CollectSniFromSelectedFile() const {\n std::vector sni_list;\n\n QString selected_file = sni_file_combo_box_->currentText();\n if (selected_file != QObject::tr(\"All\")) {\n sni_list = settings_->SniManager()->GetSniList(selected_file.toStdString());\n }\n\n return sni_list;\n}\n\nQVector SniAutoscanDialog::CollectTargetServers() const {\n QVector servers;\n QString selected = server_combo_box_->currentText();\n\n const QVector& services = settings_->Services();\n\n if (selected == QObject::tr(\"All\")) {\n for (const auto& service : services) {\n for (const auto& server : service.servers) {\n servers.append(server);\n }\n for (const auto& server : service.censored_zone_servers) {\n servers.append(server);\n }\n }\n } else {\n for (const auto& service : services) {\n for (const auto& server : service.servers) {\n if (server.name == selected) {\n servers.append(server);\n break;\n }\n }\n\n // specific servers\n QString clean_name = selected;\n if (clean_name.startsWith(\"* \")) {\n clean_name = clean_name.mid(2);\n }\n for (const auto& server : service.censored_zone_servers) {\n if (server.name == clean_name) {\n servers.append(server);\n break;\n }\n }\n }\n }\n return servers;\n}\n\nvoid SniAutoscanDialog::AddLogEntry(const QString& server,\n const QString& sni,\n bool handshake_ok,\n bool http_ok) {\n QMetaObject::invokeMethod(this, [this, server, sni, handshake_ok, http_ok]() {\n const QString handshake_status =\n handshake_ok ? QString(\"YES\")\n : QString(\"NO\");\n\n const QString http_status =\n http_ok ? QString(\"YES\")\n : QString(\"NO\");\n\n const QString log_entry = QString(R\"(\n \n \n \n \n \n \n \n
%1%2Handshake: %3HTTP: %4
\n )\")\n .arg(server.toHtmlEscaped())\n .arg(sni.toHtmlEscaped())\n .arg(handshake_status)\n .arg(http_status);\n\n {\n const std::unique_lock lock(mutex_);\n\n constexpr int kMaxLogSize = 2048;\n\n if (log_text_edit_->document()->lineCount() > kMaxLogSize) {\n QTextCursor cursor(log_text_edit_->document());\n cursor.movePosition(QTextCursor::Start);\n cursor.select(QTextCursor::LineUnderCursor);\n cursor.removeSelectedText();\n }\n\n log_text_edit_->moveCursor(QTextCursor::End);\n log_text_edit_->insertHtml(log_entry);\n\n QTextCursor cursor(log_text_edit_->textCursor());\n cursor.movePosition(QTextCursor::End);\n log_text_edit_->setTextCursor(cursor);\n }\n });\n}\n\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/sni_autoscan_dialog/sni_autoscan_dialog.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"fptn-protocol-lib/https/obfuscator/methods/obfuscator_interface.h\"\n#include \"gui/settingsmodel/settingsmodel.h\"\n\nnamespace fptn::gui {\n\nclass SniAutoscanDialog : public QDialog {\n Q_OBJECT\n\n public:\n explicit SniAutoscanDialog(\n SettingsModelPtr settings, QWidget* parent = nullptr);\n ~SniAutoscanDialog() override;\n\n // cppcheck-suppress unknownMacro\n public slots:\n void onStartStopClicked();\n void onUpdateProgress();\n\n protected:\n void SetupUi();\n\n void StartScanning();\n void StopScanning();\n void WorkerThread(int thread_id);\n\n std::vector CollectAllSni() const;\n std::vector CollectSniFromSelectedFile() const;\n QVector CollectTargetServers() const;\n std::string GetNextSni();\n\n void AddLogEntry(const QString& server,\n const QString& sni,\n bool handshake_ok,\n bool http_ok);\n\n private:\n mutable std::mutex mutex_;\n\n std::vector sni_vector_;\n std::size_t current_sni_index_ = 0;\n\n std::atomic is_scanning_{false};\n std::atomic stop_requested_{false};\n std::atomic tested_count_{0};\n std::atomic working_sni_found_{0};\n std::string found_working_sni_;\n\n QVector target_servers_;\n std::vector worker_threads_;\n\n SettingsModelPtr settings_;\n\n QComboBox* server_combo_box_ = nullptr;\n QComboBox* sni_file_combo_box_ = nullptr;\n QLabel* progress_label_ = nullptr;\n QPushButton* start_stop_button_ = nullptr;\n QPushButton* close_button_ = nullptr;\n QTextEdit* log_text_edit_ = nullptr;\n QTimer* progress_timer_ = nullptr;\n\n bool auto_scroll_ = true;\n};\n\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/sni_manager/sni_manager.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/sni_manager/sni_manager.h\"\n\n#include \n#include \n#include \n#include \n#include \n#include \n\nnamespace fptn::gui {\n\nSNIManager::SNIManager(std::string sni_folder)\n : sni_folder_(std::move(sni_folder)) {\n std::error_code ec;\n std::filesystem::create_directories(sni_folder_, ec);\n}\n\nstd::vector SNIManager::SniFileList() const {\n std::vector result;\n\n std::error_code ec;\n auto dir_iter = std::filesystem::directory_iterator(sni_folder_, ec);\n if (ec) {\n return {};\n }\n for (const auto& entry : dir_iter) {\n if (entry.is_regular_file() && entry.path().extension() == \".sni\") {\n result.push_back(entry.path().filename().string());\n }\n }\n\n std::ranges::sort(result);\n return result;\n}\n\nbool SNIManager::AddSniFile(const std::string& path) {\n std::error_code ec;\n if (!std::filesystem::exists(path, ec) || ec) {\n return false;\n }\n\n std::filesystem::path source(path);\n std::filesystem::path dest = sni_folder_ + \"/\" + source.filename().string();\n\n std::filesystem::copy_file(\n source, dest, std::filesystem::copy_options::overwrite_existing, ec);\n return !ec;\n}\n\nbool SNIManager::RemoveFile(const std::string& file_name) {\n std::filesystem::path file_path = sni_folder_ + \"/\" + file_name;\n std::error_code ec;\n return std::filesystem::remove(file_path, ec) && !ec;\n}\n\nstd::vector SNIManager::GetSniList(\n const std::string& file_name) const {\n std::vector result;\n\n std::filesystem::path file_path = sni_folder_ + \"/\" + file_name;\n std::ifstream file(file_path);\n\n if (!file.is_open()) {\n return result;\n }\n\n std::string line;\n while (std::getline(file, line)) {\n if (!line.empty()) {\n result.push_back(line);\n }\n }\n\n return result;\n}\n\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/sni_manager/sni_manager.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\nnamespace fptn::gui {\n\nclass SNIManager {\n public:\n explicit SNIManager(std::string sni_folder);\n\n std::vector SniFileList() const;\n bool AddSniFile(const std::string& path);\n bool RemoveFile(const std::string& file_name);\n std::vector GetSniList(const std::string& file_name) const;\n\n private:\n const std::string sni_folder_;\n};\n\nusing SNIManagerSPtr = std::shared_ptr;\n\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/speedwidget/speedwidget.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/speedwidget/speedwidget.h\"\n\nusing fptn::gui::SpeedWidget;\n\nnamespace {\n\nQString FormatSpeed(std::size_t bytes_per_sec) {\n QString speed_str;\n double bits_per_sec = bytes_per_sec * 8.0;\n if (bits_per_sec >= 1e9) {\n speed_str = QString::asprintf(\"%.2f Gbps\", bits_per_sec / 1e9);\n } else if (bits_per_sec >= 1e6) {\n speed_str = QString::asprintf(\"%.2f Mbps\", bits_per_sec / 1e6);\n } else if (bits_per_sec >= 1e3) {\n speed_str = QString::asprintf(\"%.2f Kbps\", bits_per_sec / 1e3);\n } else {\n speed_str = QString::asprintf(\"%.2f bps\", bits_per_sec);\n }\n if (speed_str.size() >= 20) {\n return speed_str;\n }\n return speed_str.leftJustified(25);\n}\n\nQString FormatSpeedLabel(const QString& text, std::size_t speed) {\n return \" \" + text + \": \" + FormatSpeed(speed);\n}\n\n} // namespace\n\nSpeedWidget::SpeedWidget(QWidget* parent)\n : QWidget(parent),\n upload_speed_label_(\n new QLabel(FormatSpeedLabel(QObject::tr(\"Upload speed\"), 0), this)),\n download_speed_label_(new QLabel(\n FormatSpeedLabel(QObject::tr(\"Download speed\"), 0), this)) {\n auto* layout = new QVBoxLayout();\n layout->setContentsMargins(4, 4, 4, 4);\n layout->addWidget(download_speed_label_);\n layout->addWidget(upload_speed_label_);\n setLayout(layout);\n}\n\nvoid SpeedWidget::UpdateSpeed(\n std::size_t upload_speed, std::size_t download_speed) {\n upload_speed_label_->setText(\n FormatSpeedLabel(QObject::tr(\"Upload speed\"), upload_speed));\n download_speed_label_->setText(\n FormatSpeedLabel(QObject::tr(\"Download speed\"), download_speed));\n}\n" }, { "path": "src/fptn-client/gui/speedwidget/speedwidget.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\nnamespace fptn::gui {\nclass SpeedWidget : public QWidget {\n Q_OBJECT\n\n public:\n explicit SpeedWidget(QWidget* parent = nullptr);\n void UpdateSpeed(std::size_t upload_speed, std::size_t download_speed);\n\n private:\n QLabel* upload_speed_label_;\n QLabel* download_speed_label_;\n};\n\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/style/style.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/style/style.h\"\n\nnamespace fptn::gui {\n\nQString GetMacStyleSheet() {\n static const QString kStyleSheet = R\"(\nQMenu {\n background-color: #333;\n color: #fff;\n border: 1px solid #555;\n}\nQMenu::item {\n background-color: #333;\n color: #fff;\n padding: 5px 5px;\n}\nQMenu::item:selected {\n background-color: #555;\n color: #fff;\n}\nQMenu::icon {\n margin-right: 4px;\n}\nQAction {\n padding: 2px 2px;\n color: #fff;\n}\nQWidgetAction {\n padding: 5px;\n}\n)\";\n return kStyleSheet;\n}\n\nQString GetUbuntuStyleSheet() {\n static const QString kStyleSheet = R\"(\nQMenu {\n background-color: #ffffff;\n color: #333333;\n border: 1px solid #d0d0d0;\n border-radius: 8px;\n padding: 5px;\n}\nQMenu::item {\n background-color: #ffffff;\n color: #333333;\n padding: 2px 3px;\n border-radius: 4px;\n}\nQMenu::item:selected {\n background-color: #e0e0e0;\n color: #333333;\n}\nQMenu::item:hover {\n background-color: #e0e0e0;\n}\nQMenu::icon {\n margin-right: 4px;\n}\nQAction {\n color: #333333;\n}\nQWidgetAction {\n padding: 2px 4px;\n}\nQWidget {\n font-family: 'Ubuntu', 'Segoe UI', Tahoma, Verdana, Arial, sans-serif;\n font-size: 10pt;\n color: #333333;\n background-color: #f0f0f0;\n}\nQPushButton {\n background-color: #ffffff;\n color: #333333;\n border: 1px solid #d0d0d0;\n border-radius: 4px;\n padding: 6px 12px;\n}\nQPushButton:hover {\n background-color: #e0e0e0;\n}\nQPushButton:pressed {\n background-color: #d0d0d0;\n}\nQLineEdit, QTextEdit {\n background-color: #ffffff;\n color: #333333;\n border: 1px solid #d0d0d0;\n border-radius: 4px;\n padding: 4px 8px;\n}\nQCheckBox, QRadioButton {\n color: #333333;\n}\nQSlider::groove:horizontal {\n border: 1px solid #d0d0d0;\n height: 8px;\n background: #ffffff;\n border-radius: 4px;\n}\nQSlider::handle:horizontal {\n background: #333333;\n border: 1px solid #d0d0d0;\n width: 16px;\n border-radius: 4px;\n}\nQScrollBar:vertical {\n border: 1px solid #d0d0d0;\n background: #ffffff;\n width: 16px;\n}\nQScrollBar::handle:vertical {\n background: #c0c0c0;\n min-height: 20px;\n border-radius: 8px;\n}\nQTabBar::tab {\n background: #e0e0e0;\n color: #333333;\n padding: 6px 12px;\n border: 1px solid #d0d0d0;\n border-bottom: 1px solid #ffffff;\n border-radius: 4px 4px 0 0;\n}\nQTabBar::tab:selected {\n background: #ffffff;\n color: #333333;\n border: 1px solid #d0d0d0;\n border-bottom: 1px solid #ffffff;\n border-radius: 4px 4px 0 0;\n font-weight: bold;\n}\nQTabBar::tab:!selected {\n background: #f0f0f0;\n}\nQTabWidget::pane {\n border: 1px solid #d0d0d0;\n border-radius: 4px;\n background: #ffffff;\n}\nQMenu::item:disabled {\n background-color: #ffffff;\n color: #a0a0a0;\n}\nQAction:disabled {\n color: #a0a0a0;\n}\n)\";\n return kStyleSheet;\n}\n\nQString GetWindowsStyleSheet() {\n static const QString kStyleSheet = R\"(\nQMenu {\n background-color: #ffffff;\n color: #000000;\n border: 1px solid #bfbfbf;\n border-radius: 4px;\n padding: 5px;\n}\nQPushButton {\n padding: 6px 12px;\n}\nQMenu::item {\n background-color: #ffffff;\n color: #000000;\n padding: 2px 1px;\n border-radius: 3px;\n}\nQMenu::item:selected {\n background-color: #e0e0e0;\n color: #000000;\n}\nQMenu::item:hover {\n background-color: #e0e0e0;\n}\nQMenu::icon {\n margin-right: 4px;\n}\nQAction {\n color: #000000;\n}\nQMenu QWidget {\n background-color: #ffffff;\n color: #000000;\n border: none;\n padding: 1px 4px;\n}\nQMenu::item:disabled {\n background-color: #ffffff;\n color: #a0a0a0;\n}\nQAction:disabled {\n color: #a0a0a0;\n}\n\n)\";\n return kStyleSheet;\n}\n\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/style/style.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n\nnamespace fptn::gui {\n\nQString GetMacStyleSheet();\nQString GetUbuntuStyleSheet();\nQString GetWindowsStyleSheet();\n\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/tokendialog/tokendialog.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/tokendialog/tokendialog.h\"\n\n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"common/utils/base64.h\"\n#include \"common/utils/utils.h\"\n\n#include \"utils/brotli/brotli.h\"\n#include \"utils/utils.h\"\n\nusing fptn::gui::TokenDialog;\n\nTokenDialog::TokenDialog(QWidget* parent) : QDialog(parent) {\n setWindowTitle(\"Token\");\n label_ = new QLabel(QObject::tr(\"Paste your token\") + \": \", this);\n token_field_ = new QLineEdit(this);\n token_field_->setPlaceholderText(QObject::tr(\"Token\") + \"...\");\n token_field_->setMinimumWidth(350);\n\n token_layout_ = new QHBoxLayout();\n token_layout_->addWidget(label_);\n token_layout_->addWidget(token_field_);\n\n save_button_ = new QPushButton(QObject::tr(\"Save\"), this);\n cancel_button_ = new QPushButton(QObject::tr(\"Cancel\"), this);\n\n // Layout for buttons\n button_layout_ = new QHBoxLayout();\n button_layout_->addStretch();\n button_layout_->addWidget(save_button_);\n button_layout_->addWidget(cancel_button_);\n\n // Main layout\n main_layout_ = new QVBoxLayout(this);\n main_layout_->addLayout(token_layout_);\n main_layout_->addLayout(button_layout_);\n\n setLayout(main_layout_);\n\n connect(cancel_button_, &QPushButton::clicked, this, &QDialog::reject);\n connect(save_button_, &QPushButton::clicked, this, &TokenDialog::onOkClicked);\n\n // show on top\n setWindowFlags(Qt::Window | Qt::WindowStaysOnTopHint);\n setModal(true);\n show();\n activateWindow();\n raise();\n setWindowModality(Qt::ApplicationModal);\n}\n\nconst QString& TokenDialog::Token() const { return token_; }\n\nvoid TokenDialog::onOkClicked() {\n try {\n const std::string entered_token =\n token_field_->text().trimmed().toStdString();\n const std::string token = fptn::common::utils::RemoveSubstring(\n entered_token, {\" \", \"\\n\", \"\\r\", \"\\t\"});\n\n std::string decoded_token;\n if (token.starts_with(\"fptnb:\") || token.starts_with(\"fptnb//\")) {\n const std::string clean_token =\n common::utils::RemoveSubstring(token, {\"fptnb:\", \"fptnb//\"});\n decoded_token = fptn::utils::brotli::Decompress(\n fptn::common::utils::base64::decode(clean_token));\n } else {\n const std::string clean_token = fptn::common::utils::RemoveSubstring(\n entered_token, {\"fptn:\", \"fptn://\"});\n decoded_token = fptn::common::utils::base64::decode(clean_token);\n }\n\n const QString t = QString::fromStdString(decoded_token);\n if (t.isEmpty()) {\n QMessageBox::warning(this, QObject::tr(\"Validation Error\"),\n QObject::tr(\"Token cannot be empty\") + \"!\");\n } else {\n token_ = t;\n accept();\n }\n } catch (const std::runtime_error& err) {\n SPDLOG_WARN(\"Wrong token: {}\", err.what());\n QMessageBox::warning(this, QObject::tr(\"Wrong token\"),\n QObject::tr(\"Wrong token\") + \": \" + err.what());\n }\n}\n" }, { "path": "src/fptn-client/gui/tokendialog/tokendialog.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\nnamespace fptn::gui {\nclass TokenDialog final : public QDialog {\n Q_OBJECT\n public:\n explicit TokenDialog(QWidget* parent = nullptr);\n const QString& Token() const;\n\n // cppcheck-suppress unknownMacro\n private slots:\n void onOkClicked();\n\n private:\n QLabel* label_;\n QLineEdit* token_field_;\n QHBoxLayout* token_layout_;\n\n QPushButton* save_button_;\n QPushButton* cancel_button_;\n QHBoxLayout* button_layout_;\n\n QVBoxLayout* main_layout_;\n\n QString token_;\n};\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/gui/translations/translations.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/translations/translations.h\"\n\n#include // NOLINT(build/include_order)\n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/logger/logger.h\"\n\nnamespace {\nQTranslator& getTranslator() {\n static QTranslator translator;\n return translator;\n}\n} // namespace\n\nbool fptn::gui::SetTranslation(const QString& language_code) {\n const QString translation_file = QString(\"fptn_%1.qm\").arg(language_code);\n QTranslator& translator = getTranslator();\n qApp->removeTranslator(&translator);\n if (translator.load(translation_file, \":/translations\")) {\n if (!qApp->installTranslator(&translator)) {\n SPDLOG_WARN(\"Failed to install translator for language: {}\",\n language_code.toStdString());\n } else {\n return true;\n }\n } else {\n SPDLOG_WARN(\n \"Translation file not found: {}\", translation_file.toStdString());\n }\n return false;\n}\n" }, { "path": "src/fptn-client/gui/translations/translations.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include // NOLINT(build/include_order)\n\nnamespace fptn::gui {\nbool SetTranslation(const QString& language_code);\n}\n" }, { "path": "src/fptn-client/gui/tray/tray.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"gui/tray/tray.h\"\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_packet.h\"\n#include \"common/system/command.h\"\n\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls/tls_obfuscator.h\"\n#include \"fptn-protocol-lib/time/time_provider.h\"\n#include \"gui/autoupdate/autoupdate.h\"\n#include \"gui/server_menu_item_widget/server_menu_item_widget.h\"\n#include \"gui/style/style.h\"\n#include \"gui/translations/translations.h\"\n#include \"plugins/blacklist/domain_blacklist.h\"\n\n#ifdef _WIN32\n#include \"utils/windows/vpn_conflict.h\"\n#endif\n\nusing fptn::gui::TrayApp;\n\nnamespace {\n\nQPixmap LoadIcon(const QString& icon_path, int size = 12) {\n QPixmap pixmap(icon_path);\n if (pixmap.isNull()) {\n return QPixmap();\n }\n return pixmap.scaled(\n size, size, Qt::KeepAspectRatio, Qt::SmoothTransformation);\n}\n\nvoid ShowError(const QString& title, const QString& msg) {\n QMessageBox msg_box;\n msg_box.setWindowIcon(QIcon(\":/icons/app.ico\"));\n msg_box.setIcon(QMessageBox::Critical);\n msg_box.setWindowTitle(title);\n#ifdef _WIN32\n msg_box.setText(msg.toUtf8());\n#else\n msg_box.setText(msg);\n#endif\n msg_box.exec();\n}\n\n#ifdef _WIN32\nvoid ShowWarning(const QString& title, const QString& msg) {\n QMessageBox msg_box;\n msg_box.setWindowIcon(QIcon(\":/icons/app.ico\"));\n msg_box.setIcon(QMessageBox::Warning);\n msg_box.setWindowTitle(title);\n msg_box.setText(msg);\n msg_box.exec();\n}\n#endif\n\n} // namespace\n\nTrayApp::TrayApp(const SettingsModelPtr& settings, QObject* parent)\n : settings_(settings),\n tray_icon_(new QSystemTrayIcon(this)),\n tray_menu_(new QMenu(this)),\n connect_menu_(new QMenu(QObject::tr(\"Connect\") + \" \", tray_menu_)),\n speed_widget_(new SpeedWidget(tray_menu_)),\n update_timer_(new QTimer(this)),\n active_icon_path_(\":/icons/active.ico\"),\n inactive_icon_path_(\":/icons/inactive.ico\") {\n (void)parent;\n#ifdef __linux__\n qApp->setStyleSheet(fptn::gui::GetUbuntuStyleSheet());\n#elif __APPLE__\n qApp->setStyleSheet(fptn::gui::GetMacStyleSheet());\n#elif _WIN32\n qApp->setStyleSheet(fptn::gui::GetWindowsStyleSheet());\n#else\n#error \"Unsupported system!\"\n#endif\n\n#if __linux__\n connect(tray_icon_, &QSystemTrayIcon::activated,\n [this](QSystemTrayIcon::ActivationReason reason) {\n if (reason == QSystemTrayIcon::Context) {\n tray_menu_->popup(tray_icon_->geometry().bottomLeft());\n } else {\n tray_menu_->close();\n }\n });\n#elif _WIN32\n connect(tray_icon_, &QSystemTrayIcon::activated,\n [this](QSystemTrayIcon::ActivationReason reason) {\n if (reason == QSystemTrayIcon::Context) {\n tray_menu_->show();\n tray_menu_->exec(QCursor::pos());\n } else {\n tray_menu_->close();\n }\n });\n#endif\n const QString selected_language = settings->LanguageCode();\n if (selected_language.isEmpty()) { // save default language for first start\n const QString system_language = GetSystemLanguageCode();\n if (settings->ExistsTranslation(system_language)) {\n settings->SetLanguageCode(system_language);\n } else {\n settings->SetLanguageCode(settings->DefaultLanguageCode());\n }\n } else {\n fptn::gui::SetTranslation(selected_language);\n }\n\n // State\n connect(this, &TrayApp::defaultState, this, &TrayApp::handleDefaultState);\n connect(this, &TrayApp::connecting, this, &TrayApp::handleConnecting);\n connect(this, &TrayApp::connected, this, &TrayApp::handleConnected);\n connect(this, &TrayApp::disconnecting, this, &TrayApp::handleDisconnecting);\n connect(this, &TrayApp::vpnStarted, this, &TrayApp::handleVpnStarted);\n\n // Show connection... label\n connecting_label_action_ = new QAction(QObject::tr(\"Connecting...\"), this);\n connecting_label_action_->setIcon(LoadIcon(\":/icons/menu_connection.png\"));\n connect(connecting_label_action_, &QAction::triggered, this,\n &TrayApp::handleDefaultState);\n\n // Show Disconnecting... label\n disconnecting_label_action_ =\n new QAction(QObject::tr(\"Disconnecting...\"), this);\n\n // Disconect\n disconnect_action_ = new QAction(QObject::tr(\"Disconnect\"), this);\n disconnect_action_->setIcon(LoadIcon(\":/icons/menu_disconnect.png\"));\n connect(disconnect_action_, &QAction::triggered, this,\n &TrayApp::onDisconnectFromServer);\n\n speed_widget_action_ = new QWidgetAction(this);\n speed_widget_action_->setDefaultWidget(speed_widget_);\n\n // Settings\n connect(settings_.get(), &SettingsModel::dataChanged, this,\n &TrayApp::UpdateTrayMenu);\n connect(update_timer_, &QTimer::timeout, this, &TrayApp::handleTimer);\n update_timer_->start(1000);\n\n // Settings\n settings_action_ = new QAction(QObject::tr(\"Settings\"), this);\n settings_action_->setIcon(LoadIcon(\":/icons/menu_settings.png\"));\n connect(\n settings_action_, &QAction::triggered, this, &TrayApp::onShowSettings);\n\n // Autoupdate\n auto_update_action_ = new QAction(\n QObject::tr(\"New version available\") + \" \" + auto_available_version_,\n this);\n auto_update_action_->setIcon(\n LoadIcon(\":/icons/menu_new_version_download.png\"));\n connect(auto_update_action_, &QAction::triggered, this,\n [this] { OpenWebBrowser(FPTN_GITHUB_PAGE_LINK); });\n auto_update_action_->setVisible(false);\n\n // Quit\n quit_action_ = new QAction(QObject::tr(\"Quit\"), this);\n quit_action_->setIcon(LoadIcon(\":/icons/menu_exit.png\"));\n connect(quit_action_, &QAction::triggered, this, &QCoreApplication::quit);\n\n // Show menu\n // tray_menu_->addAction(connecting_action_);\n tray_menu_->addAction(disconnect_action_);\n tray_menu_->addAction(connecting_label_action_);\n tray_menu_->addAction(disconnecting_label_action_);\n tray_menu_->addAction(speed_widget_action_);\n tray_menu_->addSeparator();\n tray_menu_->addAction(settings_action_);\n tray_menu_->addSeparator();\n tray_menu_->addAction(auto_update_action_);\n tray_menu_->addSeparator();\n tray_menu_->addAction(quit_action_);\n\n tray_icon_->setContextMenu(tray_menu_);\n\n tray_icon_->show();\n\n // check update\n CheckForUpdatesAsync();\n\n try {\n settings_->Load(false); // use this to show notification about change\n // structure v1 and v2 config\n } catch (std::runtime_error& err) {\n ShowError(QObject::tr(\"Settings\"), err.what());\n }\n UpdateTrayMenu();\n\n#ifdef _WIN32\n std::string found_adapters;\n if (fptn::utils::windows::HasVpnConflicts(found_adapters)) {\n SPDLOG_WARN(\n \"Detected conflicting VPN network adapters: {}\", found_adapters);\n const QString message = QObject::tr(\n \"A conflicting VPN connection is currently active on your system: %1\\n\"\n \"This may cause network connectivity issues or prevent proper \"\n \"operation of FPTN.\")\n .arg(QString::fromStdString(found_adapters));\n\n ShowWarning(QObject::tr(\"VPN Conflict Detected\"), message);\n }\n#endif\n // start pinging\n settings_->StartPingMonitoring();\n\n // Show pings\n ping_update_timer_ = new QTimer(this);\n connect(ping_update_timer_, &QTimer::timeout, [this]() { UpdatePings(); });\n ping_update_timer_->start(1000);\n}\n\nvoid TrayApp::CheckForUpdatesAsync() {\n (void)QtConcurrent::run([this]() {\n try {\n SPDLOG_DEBUG(\"Checking for updates in background thread\");\n\n const auto update_result = fptn::gui::autoupdate::Check();\n const bool is_available = update_result.first;\n const std::string version_name = update_result.second;\n\n SPDLOG_INFO(\"Update check completed: available={}, version={}\",\n is_available, version_name);\n if (is_available && !version_name.empty()) {\n QMetaObject::invokeMethod(\n this,\n // NOLINTNEXTLINE(bugprone-exception-escape)\n [this, version_name]() noexcept {\n try {\n auto_available_version_ = QString::fromStdString(version_name);\n auto_update_action_->setText(\n QObject::tr(\"New version available\") + \" \" +\n auto_available_version_);\n auto_update_action_->setVisible(true);\n RetranslateUi();\n } catch (...) {\n SPDLOG_WARN(\"Failed to update UI with new version info\");\n }\n },\n Qt::QueuedConnection);\n } else {\n SPDLOG_DEBUG(\"No updates available or version name is empty\");\n }\n } catch (const std::exception& e) {\n SPDLOG_WARN(\"Failed to check for updates: {}\", e.what());\n } catch (...) {\n SPDLOG_WARN(\"Unknown error during update check\");\n }\n });\n}\n\nvoid TrayApp::UpdateTrayMenu() {\n if (limited_zone_connect_menu_) {\n limited_zone_connect_menu_->clear();\n }\n if (connect_menu_) {\n connect_menu_->clear();\n }\n if (tray_menu_ && connect_menu_) {\n tray_menu_->removeAction(connect_menu_->menuAction());\n smart_connect_action_ = nullptr;\n empty_configuration_action_ = nullptr;\n\n limited_zone_connect_menu_ = nullptr;\n }\n\n switch (connection_state_) {\n case ConnectionState::None: {\n tray_icon_->setIcon(QIcon(inactive_icon_path_));\n const auto& services = settings_->Services();\n\n // calculate services\n const std::size_t servers_number =\n std::accumulate(services.begin(), services.end(), std::size_t{0},\n [](std::size_t sum, const auto& service) {\n return sum + service.servers.size();\n });\n\n if (0 != servers_number) {\n smart_connect_action_ =\n new QAction(QObject::tr(\"Smart Connect\"), connect_menu_);\n smart_connect_action_->setIcon(QIcon(\":/icons/ping_green_circle.png\"));\n connect(smart_connect_action_, &QAction::triggered, [this]() {\n smart_connect_ = true;\n onConnectToServer();\n });\n\n connect_menu_->addAction(smart_connect_action_);\n connect_menu_->addSeparator();\n // servers\n for (const auto& service : services) {\n // usual servers\n for (const auto& server : service.servers) {\n auto* action = new ServerMenuItemWidget(\n server.name, server.ping_ms, connect_menu_);\n // auto* widget_action = new QWidgetAction(connect_menu_);\n // widget_action->setDefaultWidget(widget);\n connect_menu_->addAction(action);\n\n // FIXME\n connect(action, &QAction::triggered, [this, server, service]() {\n smart_connect_ = false;\n fptn::utils::speed_estimator::ServerInfo cfg_server;\n {\n cfg_server.name = server.name.toStdString();\n cfg_server.host = server.host.toStdString();\n cfg_server.port = server.port;\n cfg_server.is_using = server.is_using;\n cfg_server.service_name = service.service_name.toStdString();\n cfg_server.username = service.username.toStdString();\n cfg_server.password = service.password.toStdString();\n cfg_server.md5_fingerprint =\n server.md5_fingerprint.toStdString();\n }\n selected_server_ = cfg_server;\n onConnectToServer();\n });\n }\n // Censored zone servers\n for (const auto& server : service.censored_zone_servers) {\n if (!limited_zone_connect_menu_) {\n limited_zone_connect_menu_ = new QMenu(\n QObject::tr(\"Limited access servers\") + \" \", connect_menu_);\n connect_menu_->setIcon(LoadIcon(\":/icons/menu_server_list.png\"));\n connect_menu_->addMenu(limited_zone_connect_menu_);\n }\n auto* server_connect =\n new QAction(server.name, limited_zone_connect_menu_);\n limited_zone_connect_menu_->addAction(server_connect);\n\n // FIXME\n connect(\n server_connect, &QAction::triggered, [this, server, service]() {\n smart_connect_ = false;\n fptn::utils::speed_estimator::ServerInfo cfg_server;\n {\n cfg_server.name = server.name.toStdString();\n cfg_server.host = server.host.toStdString();\n cfg_server.port = server.port;\n cfg_server.is_using = server.is_using;\n cfg_server.service_name =\n service.service_name.toStdString();\n cfg_server.username = service.username.toStdString();\n cfg_server.password = service.password.toStdString();\n cfg_server.md5_fingerprint =\n server.md5_fingerprint.toStdString();\n }\n selected_server_ = cfg_server;\n onConnectToServer();\n });\n }\n }\n } else {\n empty_configuration_action_ =\n new QAction(QObject::tr(\"No servers\"), connect_menu_);\n connect_menu_->addAction(empty_configuration_action_);\n empty_configuration_action_->setEnabled(false);\n }\n tray_menu_->insertMenu(settings_action_, connect_menu_);\n if (connect_menu_) {\n connect_menu_->setVisible(false);\n }\n if (disconnect_action_) {\n disconnect_action_->setVisible(false);\n }\n if (speed_widget_action_) {\n speed_widget_action_->setVisible(false);\n }\n if (settings_action_) {\n settings_action_->setEnabled(true);\n }\n if (speed_widget_) {\n speed_widget_->setVisible(false);\n }\n if (connecting_label_action_) {\n connecting_label_action_->setVisible(false);\n }\n if (disconnecting_label_action_) {\n disconnecting_label_action_->setVisible(false);\n }\n if (quit_action_) {\n quit_action_->setEnabled(true);\n }\n break;\n }\n case ConnectionState::Connecting: {\n tray_icon_->setIcon(QIcon(inactive_icon_path_));\n if (connecting_label_action_) {\n connecting_label_action_->setVisible(true);\n }\n if (disconnecting_label_action_) {\n disconnecting_label_action_->setVisible(false);\n }\n if (speed_widget_action_) {\n speed_widget_action_->setVisible(false);\n }\n if (settings_action_) {\n settings_action_->setEnabled(false);\n }\n if (disconnect_action_) {\n disconnect_action_->setVisible(false);\n }\n if (quit_action_) {\n quit_action_->setEnabled(false);\n }\n break;\n }\n case ConnectionState::Connected: {\n tray_icon_->setIcon(QIcon(active_icon_path_));\n if (disconnect_action_) {\n disconnect_action_->setText(QString(QObject::tr(\"Disconnect\") + \": %1\")\n .arg(QString::fromStdString(selected_server_.name)));\n disconnect_action_->setVisible(true);\n }\n if (speed_widget_) {\n speed_widget_->setVisible(true);\n }\n if (settings_action_) {\n settings_action_->setEnabled(false);\n }\n if (speed_widget_action_) {\n speed_widget_action_->setVisible(true);\n }\n if (connecting_label_action_) {\n connecting_label_action_->setVisible(false);\n }\n if (disconnecting_label_action_) {\n disconnecting_label_action_->setVisible(false);\n }\n if (quit_action_) {\n quit_action_->setEnabled(true);\n }\n break;\n }\n case ConnectionState::Disconnecting: {\n tray_icon_->setIcon(QIcon(inactive_icon_path_));\n if (disconnect_action_) {\n disconnect_action_->setVisible(false);\n }\n if (speed_widget_action_) {\n speed_widget_action_->setVisible(false);\n }\n if (settings_action_) {\n settings_action_->setEnabled(false);\n }\n if (connecting_label_action_) {\n connecting_label_action_->setVisible(false);\n }\n if (disconnecting_label_action_) {\n disconnecting_label_action_->setVisible(true);\n }\n if (quit_action_) {\n quit_action_->setEnabled(false);\n }\n break;\n }\n }\n\n // Apply the language translation based on the user's settings\n const QString selected_language = settings_->LanguageCode();\n if (!selected_language.isEmpty()) {\n fptn::gui::SetTranslation(selected_language);\n }\n RetranslateUi();\n}\n\nvoid TrayApp::onConnectToServer() {\n SPDLOG_INFO(\"Signal: connecting to server\");\n {\n const std::unique_lock lock(mutex_); // mutex\n\n connection_state_ = ConnectionState::Connecting;\n UpdateTrayMenu();\n }\n emit connecting();\n}\n\nvoid TrayApp::onDisconnectFromServer() {\n SPDLOG_INFO(\"Signal: disconnected from server\");\n const std::unique_lock lock(mutex_); // mutex\n\n connection_state_ = ConnectionState::None;\n if (route_manager_) {\n route_manager_->Clean();\n route_manager_.reset();\n }\n if (vpn_client_) {\n vpn_client_->Stop();\n vpn_client_.reset();\n }\n\n settings_->StartPingMonitoring();\n\n UpdateTrayMenu();\n}\n\nvoid TrayApp::onShowSettings() {\n auto dialog = std::make_unique(settings_);\n QMetaObject::invokeMethod(dialog.get(), \"setFocus\", Qt::QueuedConnection);\n dialog->exec();\n}\n\nvoid TrayApp::handleDefaultState() {\n SPDLOG_INFO(\"Signal: entering default state\");\n {\n const std::unique_lock lock(mutex_); // mutex\n\n cancel_connecting_ = true;\n settings_->StartPingMonitoring();\n\n connection_state_ = ConnectionState::None;\n if (route_manager_) {\n route_manager_->Clean();\n route_manager_.reset();\n }\n if (vpn_client_) {\n vpn_client_->Stop();\n vpn_client_.reset();\n }\n }\n UpdateTrayMenu();\n}\n\nvoid TrayApp::handleConnecting() {\n SPDLOG_INFO(\"Signal: connecting to server\");\n\n const std::unique_lock lock(mutex_); // mutex\n\n settings_->StopPingMonitoring();\n\n connection_state_ = ConnectionState::Connecting;\n UpdateTrayMenu();\n\n if (!connecting_in_progress_) { // only once!\n cancel_connecting_ = false;\n connecting_in_progress_ = true;\n\n QFuture> future = QtConcurrent::run([this]() {\n QString err_msg;\n const auto status = startVpn(err_msg);\n return std::make_tuple(status, std::move(err_msg));\n });\n\n auto* watcher = new QFutureWatcher>(this);\n connect(watcher, &QFutureWatcher>::finished, this,\n [this, watcher]() {\n const std::tuple result = watcher->result();\n watcher->deleteLater();\n\n if (!cancel_connecting_) {\n const bool status = std::get<0>(result);\n const QString err_msg = std::get<1>(result);\n emit this->vpnStarted(status, err_msg);\n }\n connecting_in_progress_ = false;\n });\n watcher->setFuture(future);\n }\n}\n\nvoid TrayApp::handleConnected() {\n SPDLOG_INFO(\"Signal: connected to server\");\n {\n const std::unique_lock lock(mutex_); // mutex\n\n connection_state_ = ConnectionState::Connected;\n }\n UpdateTrayMenu();\n}\n\nvoid TrayApp::handleDisconnecting() {\n {\n const std::unique_lock lock(mutex_); // mutex\n\n settings_->StartPingMonitoring();\n\n connection_state_ = ConnectionState::None;\n UpdateTrayMenu();\n\n stopVpn();\n }\n emit defaultState();\n}\n\nvoid TrayApp::handleTimer() {\n static bool reconnection_in_progress = false;\n static auto last_reconnection_time = std::chrono::steady_clock::now();\n\n // check connection state\n bool is_disconnected = false;\n if (connection_state_ == ConnectionState::Connected && vpn_client_) {\n const std::unique_lock lock(mutex_); // mutex\n\n // cppcheck-suppress identicalConditionAfterEarlyExit\n if (connection_state_ == ConnectionState::Connected && vpn_client_) {\n if (!vpn_client_->IsStarted()) {\n // check reconnection\n auto now = std::chrono::steady_clock::now();\n auto time_since_last = std::chrono::duration_cast(\n now - last_reconnection_time);\n\n if (!reconnection_in_progress &&\n time_since_last > std::chrono::seconds(3)) {\n reconnection_in_progress = true;\n last_reconnection_time = now;\n is_disconnected = true;\n }\n } else if (speed_widget_) {\n speed_widget_->UpdateSpeed(\n vpn_client_->GetReceiveRate(), vpn_client_->GetSendRate());\n }\n }\n }\n\n if (is_disconnected) {\n // show error\n ShowError(QObject::tr(\"FPTN Connection Error\"),\n QObject::tr(\"The VPN connection was unexpectedly closed.\"));\n SPDLOG_INFO(\"FPTN Connection Error\");\n emit disconnecting();\n }\n}\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nQString TrayApp::GetSystemLanguageCode() const {\n const QLocale locale;\n const QString locale_name = locale.name();\n if (locale_name.contains('_')) {\n const QString language_code = locale.name().split('_').first();\n return language_code;\n }\n return \"en\";\n}\n\nvoid TrayApp::RetranslateUi() {\n if (connect_menu_) {\n connect_menu_->setTitle(QObject::tr(\"Connect\") + \" \");\n }\n if (settings_action_) {\n settings_action_->setText(QObject::tr(\"Settings\"));\n }\n if (quit_action_) {\n quit_action_->setText(QObject::tr(\"Quit\"));\n }\n if (connecting_label_action_) {\n connecting_label_action_->setText(QObject::tr(\"Connecting...\"));\n }\n if (empty_configuration_action_) {\n empty_configuration_action_->setText(QObject::tr(\"No servers\"));\n }\n if (smart_connect_action_) {\n smart_connect_action_->setText(QObject::tr(\"Smart Connect\"));\n }\n if (limited_zone_connect_menu_) {\n limited_zone_connect_menu_->setTitle(\n QObject::tr(\"Limited access servers\") + \" \");\n }\n if (connecting_label_action_) {\n connecting_label_action_->setText(QObject::tr(\"Connecting...\"));\n }\n if (disconnecting_label_action_) {\n disconnecting_label_action_->setText(QObject::tr(\"Disconnecting...\"));\n }\n\n if (disconnect_action_) {\n const QString disconnect_text =\n QString(QObject::tr(\"Disconnect\") + \": %1\")\n .arg(QString::fromStdString(selected_server_.name));\n disconnect_action_->setText(disconnect_text);\n }\n if (auto_update_action_) {\n auto_update_action_->setText(\n QObject::tr(\"New version available\") + \" \" + auto_available_version_);\n }\n}\n\nvoid TrayApp::stop() {\n SPDLOG_INFO(\"Stopping TrayApp\");\n settings_->StopPingMonitoring();\n\n if (route_manager_) {\n route_manager_->Clean();\n route_manager_.reset();\n }\n if (vpn_client_) {\n vpn_client_->Stop();\n vpn_client_.reset();\n }\n}\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nvoid TrayApp::OpenWebBrowser(const std::string& url) {\n#if __APPLE__\n QDesktopServices::openUrl(QString::fromStdString(url));\n#elif __linux__\n const std::string command = fmt::format(\n R\"(bash -c \"xhost +SI:localuser:root && (xdg-open \\\"{0}\\\" || sensible-browser \\\"{0}\\\" || x-www-browser \\\"{0}\\\" || gnome-open \\\"{0}\\\" ) \" )\",\n url);\n fptn::common::system::command::run(command);\n#elif _WIN32\n const std::string command = fmt::format(R\"(explorer \"{}\" )\", url);\n fptn::common::system::command::run(command);\n#endif\n}\n\nbool TrayApp::startVpn(QString& err_msg) {\n SPDLOG_DEBUG(\"Handling connecting state\");\n\n const fptn::common::network::IPv4Address tun_interface_address_ipv4(\n FPTN_CLIENT_DEFAULT_ADDRESS_IP4);\n const fptn::common::network::IPv6Address tun_interface_address_ipv6(\n FPTN_CLIENT_DEFAULT_ADDRESS_IP6);\n const std::string tun_interface_name = \"tun0\";\n\n /* check gateway address */\n const auto gateway_ip = (settings_->GatewayIp() == \"auto\"\n ? fptn::routing::GetDefaultGatewayIPAddress()\n : fptn::common::network::IPv4Address(\n settings_->GatewayIp().toStdString()));\n\n const auto gateway_ipv6 = fptn::routing::GetDefaultGatewayIPv6Address();\n\n if (gateway_ip.IsEmpty()) {\n err_msg = QObject::tr(\n \"Unable to find the default gateway IP address. \"\n \"Please check your connection and make sure no other VPN \"\n \"is active. \"\n \"If the error persists, specify the gateway address in the \"\n \"FPTN settings using your router's IP address, \"\n \"and ensure that an active internet interface (adapter) is \"\n \"selected. If the issue remains unresolved, \"\n \"please contact the developer via Telegram @fptn_chat.\");\n return false;\n }\n\n /* config */\n const std::string network_interface =\n (settings_->UsingNetworkInterface() == \"auto\"\n ? \"\"\n : settings_->UsingNetworkInterface().toStdString());\n\n const std::string sni = !settings_->SNI().isEmpty()\n ? settings_->SNI().toStdString()\n : FPTN_DEFAULT_SNI;\n fptn::protocol::https::CensorshipStrategy censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeYandex25;\n\n const auto& bypass_method = settings_->BypassMethod();\n if (bypass_method == SettingsModel::kBypassMethodObfuscation) {\n SPDLOG_INFO(\"Using obfuscation to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kTlsObfuscator;\n } else if (bypass_method == SettingsModel::kBypassMethodSniReality) {\n // DEPRECATED\n SPDLOG_INFO(\"Using generic reality mode to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityMode;\n }\n /* chrome */\n else if (bypass_method == SettingsModel::kBypassMethodSniRealityChrome147) {\n SPDLOG_INFO(\"Using Chrome 147 reality mode to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeChrome147;\n } else if (bypass_method == SettingsModel::kBypassMethodSniRealityChrome146) {\n SPDLOG_INFO(\"Using Chrome 146 reality mode to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeChrome146;\n } else if (bypass_method == SettingsModel::kBypassMethodSniRealityChrome145) {\n SPDLOG_INFO(\"Using Chrome 145 reality mode to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeChrome145;\n }\n /* firefox */\n else if (bypass_method == SettingsModel::kBypassMethodSniRealityFirefox149) {\n SPDLOG_INFO(\"Using Firefox 149 reality mode to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeFirefox149;\n }\n /* Yandex */\n else if (bypass_method == SettingsModel::kBypassMethodSniRealityYandex26) {\n SPDLOG_INFO(\"Using Yandex 26 reality mode to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeYandex26;\n } else if (bypass_method == SettingsModel::kBypassMethodSniRealityYandex25) {\n SPDLOG_INFO(\"Using Yandex 25 reality mode to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeYandex25;\n } else if (bypass_method == SettingsModel::kBypassMethodSniRealityYandex24) {\n SPDLOG_INFO(\"Using Yandex 24 reality mode to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeYandex24;\n }\n /* Safari */\n else if (bypass_method == SettingsModel::kBypassMethodSniRealitySafari26) {\n SPDLOG_INFO(\"Using Safari 26 reality mode to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeSafari26;\n }\n /* Default */\n else {\n SPDLOG_INFO(\"Using default SNI spoofing to bypass censorship\");\n censorship_strategy =\n fptn::protocol::https::CensorshipStrategy::kSniRealityModeYandex25;\n }\n\n if (cancel_connecting_) {\n return false;\n }\n\n fptn::config::ConfigFile config(sni, censorship_strategy); // SET SNI\n if (smart_connect_) { // find the best server\n for (const auto& service : settings_->Services()) {\n for (const auto& s : service.servers) {\n fptn::utils::speed_estimator::ServerInfo cfg_server;\n {\n cfg_server.name = s.name.toStdString();\n cfg_server.host = s.host.toStdString();\n cfg_server.port = s.port;\n cfg_server.is_using = s.is_using;\n cfg_server.service_name = service.service_name.toStdString();\n cfg_server.username = service.username.toStdString();\n cfg_server.password = service.password.toStdString();\n cfg_server.md5_fingerprint = s.md5_fingerprint.toStdString();\n }\n config.AddServer(cfg_server);\n }\n }\n try {\n selected_server_ = config.FindFastestServer(30);\n } catch (std::runtime_error& err) {\n err_msg = QObject::tr(\"Config error: \") + err.what();\n return false;\n }\n }\n /*\n else {\n // check connection to selected server\n const std::uint64_t time = config.GetDownloadTimeMs(\n selected_server_, sni, 30, selected_server_.md5_fingerprint);\n if (time == UINT64_MAX) {\n err_msg = QObject::tr(\n \"The server is unavailable. Please select another server \"\n \"or use Auto-connect to find the best available server.\");\n return false;\n }\n }\n */\n\n const auto server_ip = fptn::routing::ResolveDomain(selected_server_.host);\n if (server_ip == fptn::common::network::IPv4Address()) {\n err_msg = QObject::tr(\n \"The server is unavailable. Please select another server \"\n \"or use Auto-connect to find the best available server.\");\n return false;\n }\n\n if (cancel_connecting_) {\n return false;\n }\n\n auto http_client = std::make_unique(server_ip,\n selected_server_.port, tun_interface_address_ipv4,\n tun_interface_address_ipv6, sni, selected_server_.md5_fingerprint,\n censorship_strategy);\n // login\n bool login_status =\n http_client->Login(selected_server_.username, selected_server_.password);\n if (!login_status) {\n const std::string error = http_client->LatestError();\n err_msg = QObject::tr(\n \"Unable to connect to the server. Please use the Telegram \"\n \"bot to generate a new TOKEN with your personal settings, \"\n \"then try again.\") +\n \"\\n\\n\" + QObject::tr(\"Error message: \") +\n QString::fromStdString(error);\n return false;\n }\n\n if (cancel_connecting_) {\n return false;\n }\n\n // get dns\n const auto [dns_server_ipv4, dns_server_ipv6] = http_client->GetDns();\n if (dns_server_ipv4.IsEmpty() || dns_server_ipv6.IsEmpty()) {\n const std::string error = http_client->LatestError();\n err_msg = QObject::tr(\"DNS server error! Check your connection!\") + \"\\n\\n\" +\n QObject::tr(\"Error message: \") + QString::fromStdString(error);\n return false;\n }\n\n if (cancel_connecting_) {\n return false;\n }\n\n const auto blacklist_domains = settings_->BlacklistDomains();\n const auto exclude_networks = settings_->ExcludeTunnelNetworks();\n const auto include_networks = settings_->IncludeTunnelNetworks();\n const bool enable_split_tunnel = settings_->EnableSplitTunnel();\n const QString split_tunnel_mode = settings_->SplitTunnelMode();\n const auto split_tunnel_domains = settings_->SplitTunnelDomains();\n\n // route manager\n route_manager_ = std::make_unique(\n network_interface, tun_interface_name, server_ip, dns_server_ipv4,\n dns_server_ipv6, gateway_ip, gateway_ipv6, tun_interface_address_ipv4,\n tun_interface_address_ipv6\n#if _WIN32\n ,\n settings_->EnableAdvancedDnsManagement()\n#endif\n ); // NOLINT\n\n if (cancel_connecting_) {\n return false;\n }\n\n // setup plugins\n std::vector client_plugins;\n if (!blacklist_domains.empty()) {\n std::vector blacklist_domains_std;\n for (const auto& domain : blacklist_domains) {\n blacklist_domains_std.push_back(domain.toStdString());\n }\n auto blacklist_plugin = std::make_unique(\n blacklist_domains_std, route_manager_);\n client_plugins.push_back(std::move(blacklist_plugin));\n }\n if (enable_split_tunnel) {\n std::vector split_domains_std;\n for (const auto& domain : split_tunnel_domains) {\n split_domains_std.push_back(domain.toStdString());\n }\n\n const auto policy = (split_tunnel_mode == \"exclude\")\n ? fptn::routing::RoutingPolicy::kExcludeFromVpn\n : fptn::routing::RoutingPolicy::kIncludeInVpn;\n\n auto split_tunnel_plugin = std::make_unique(\n split_domains_std, route_manager_, policy);\n client_plugins.push_back(std::move(split_tunnel_plugin));\n }\n\n if (cancel_connecting_) {\n return false;\n }\n\n // setup tun interface\n auto virtual_network_interface =\n std::make_unique(\n fptn::common::network::TunInterface::Config{\n .name = tun_interface_name,\n .ipv4_addr = tun_interface_address_ipv4,\n .ipv4_netmask = 30, // IPv4 netmask\n .ipv6_addr = tun_interface_address_ipv6,\n .ipv6_netmask = 126 // IPv6 netmask\n });\n\n // setup vpn client\n vpn_client_ = std::make_unique(std::move(http_client),\n std::move(virtual_network_interface), dns_server_ipv4, dns_server_ipv6,\n std::move(client_plugins));\n\n if (cancel_connecting_) {\n return false;\n }\n\n // Wait for the WebSocket tunnel to establish\n vpn_client_->Start();\n\n if (cancel_connecting_) {\n return false;\n }\n\n // Update tun name to actual device name (may differ on macOS)\n route_manager_->UpdateTunInterfaceName(vpn_client_->GetInterfaceName());\n\n constexpr auto kTimeout = std::chrono::seconds(10);\n const auto start = std::chrono::steady_clock::now();\n while (!vpn_client_->IsStarted()) {\n if (std::chrono::steady_clock::now() - start > kTimeout) {\n err_msg = QObject::tr(\"Failed to connect to the server!\");\n return false;\n }\n std::this_thread::sleep_for(std::chrono::microseconds(300));\n }\n\n if (cancel_connecting_) {\n return false;\n }\n\n route_manager_->Apply();\n\n if (!exclude_networks.empty()) {\n std::vector exclude_networks_std;\n for (const auto& network : exclude_networks) {\n exclude_networks_std.push_back(network.toStdString());\n }\n route_manager_->AddExcludeNetworks(exclude_networks_std);\n }\n\n if (!include_networks.empty()) {\n std::vector include_networks_std;\n for (const auto& network : include_networks) {\n include_networks_std.push_back(network.toStdString());\n }\n route_manager_->AddIncludeNetworks(include_networks_std);\n }\n if (cancel_connecting_) {\n return false;\n }\n\n return true;\n}\n\nbool TrayApp::stopVpn() {\n SPDLOG_INFO(\"Stopping vpn\");\n if (route_manager_) {\n route_manager_->Clean();\n route_manager_.reset();\n }\n if (vpn_client_) {\n vpn_client_->Stop();\n vpn_client_.reset();\n }\n return true;\n}\n\nvoid TrayApp::handleVpnStarted(bool success, const QString& err_msg) {\n cancel_connecting_ = false;\n if (success) {\n emit connected();\n } else {\n ShowError(QObject::tr(\"FPTN Connection Error\"), err_msg);\n emit disconnecting();\n\n settings_->StartPingMonitoring();\n }\n}\n\nvoid TrayApp::UpdatePings() {\n const std::unique_lock lock(mutex_); // mutex\n\n if (connection_state_ == ConnectionState::Connected ||\n connection_state_ == ConnectionState::Connecting ||\n connection_state_ == ConnectionState::Disconnecting) {\n return;\n }\n\n for (auto* action : connect_menu_->actions()) {\n if (auto* server_action = qobject_cast(action)) {\n for (const auto& service : settings_->Services()) {\n for (const auto& server : service.servers) {\n if (server.name == server_action->ServerName()) {\n server_action->UpdatePing(server.ping_ms);\n break;\n }\n }\n }\n }\n }\n}\n" }, { "path": "src/fptn-client/gui/tray/tray.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/data/channel.h\"\n#include \"common/network/ip_address.h\"\n#include \"common/network/net_interface.h\"\n\n#include \"config/config_file.h\"\n#include \"gui/settingsmodel/settingsmodel.h\"\n#include \"gui/settingswidget/settings.h\"\n#include \"gui/speedwidget/speedwidget.h\"\n#include \"gui/tray/tray.h\"\n#include \"routing/route_manager.h\"\n#include \"utils/speed_estimator/server_info.h\"\n#include \"vpn/http/client.h\"\n#include \"vpn/vpn_client.h\"\n\nnamespace fptn::gui {\nclass TrayApp : public QWidget {\n Q_OBJECT\n\n protected:\n enum class ConnectionState { None, Connecting, Connected, Disconnecting };\n\n public:\n explicit TrayApp(const SettingsModelPtr& settings, QObject* parent = nullptr);\n void stop();\n\n protected:\n QString GetSystemLanguageCode() const;\n void RetranslateUi();\n signals:\n void defaultState();\n void connecting();\n void connected();\n void disconnecting();\n void vpnStarted(bool success, const QString& err_msg);\n\n // cppcheck-suppress unknownMacro\n protected slots:\n void onConnectToServer();\n void onDisconnectFromServer();\n void onShowSettings();\n\n // cppcheck-suppress unknownMacro\n protected slots:\n void handleDefaultState();\n void handleConnecting();\n void handleConnected();\n void handleDisconnecting();\n void handleTimer();\n void handleVpnStarted(bool success, const QString& err_msg);\n\n protected:\n void UpdateTrayMenu();\n void UpdatePings();\n void OpenWebBrowser(const std::string& url);\n\n protected:\n bool startVpn(QString& err_msg);\n bool stopVpn();\n\n void CheckForUpdatesAsync();\n\n private:\n mutable std::mutex mutex_;\n\n bool smart_connect_ = false;\n fptn::utils::speed_estimator::ServerInfo selected_server_;\n\n SettingsModelPtr settings_;\n\n QSystemTrayIcon* tray_icon_ = nullptr;\n QMenu* tray_menu_ = nullptr;\n QMenu* connect_menu_ = nullptr;\n QAction* smart_connect_action_ = nullptr;\n QMenu* limited_zone_connect_menu_ = nullptr;\n QAction* empty_configuration_action_ = nullptr;\n QAction* disconnect_action_ = nullptr;\n // QAction* connecting_action_ = nullptr;\n QAction* settings_action_ = nullptr;\n\n QAction* auto_update_action_ = nullptr;\n QString auto_available_version_;\n\n QAction* quit_action_ = nullptr;\n QAction* connecting_label_action_ = nullptr;\n QAction* disconnecting_label_action_ = nullptr;\n QWidgetAction* speed_widget_action_ = nullptr;\n SpeedWidget* speed_widget_ = nullptr;\n QTimer* update_timer_ = nullptr;\n ConnectionState connection_state_ = ConnectionState::None;\n QString connected_server_address_;\n\n QString active_icon_path_;\n QString inactive_icon_path_;\n\n fptn::vpn::VpnClientPtr vpn_client_;\n fptn::routing::RouteManagerSPtr route_manager_;\n\n // connecting\n std::atomic connecting_in_progress_{false};\n\n QTimer* ping_update_timer_{nullptr};\n\n std::atomic cancel_connecting_{false};\n};\n} // namespace fptn::gui\n" }, { "path": "src/fptn-client/plugins/base_plugin.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include \"common/network/ip_packet.h\"\n\nnamespace fptn::plugin {\nclass BasePlugin {\n public:\n virtual ~BasePlugin() = default;\n virtual std::pair HandlePacket(\n fptn::common::network::IPPacketPtr packet) = 0;\n};\n\nusing BasePluginPtr = std::unique_ptr;\nusing PluginList = std::vector;\n\n} // namespace fptn::plugin\n" }, { "path": "src/fptn-client/plugins/blacklist/domain_blacklist.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"plugins/blacklist/domain_blacklist.h\"\n\n#include \n#include \n#include \n#include \n#include \n\n#include \"common/utils/utils.h\"\n\n#include \"utils/utils.h\"\n\nnamespace fptn::plugin {\n\nDomainBlacklist::DomainBlacklist(const std::vector& rules,\n routing::RouteManagerSPtr route_manager)\n : route_manager_(std::move(route_manager)) {\n RE2::Options re_options;\n re_options.set_case_sensitive(false);\n re_options.set_log_errors(false);\n\n for (const auto& rule : rules) {\n const std::string regex_pattern = fptn::utils::DomainToRegex(rule);\n if (!regex_pattern.empty()) {\n auto re = std::make_unique(regex_pattern, re_options);\n if (re->ok()) {\n SPDLOG_INFO(\"Added blacklist rule: '{}' -> '{}'\", rule, regex_pattern);\n rules_.push_back(std::move(re));\n } else {\n SPDLOG_WARN(\"Invalid regex pattern: {}, item={}\", re->error(), rule);\n }\n } else {\n SPDLOG_WARN(\"Wrong pattern {}\", rule);\n }\n }\n}\n\nstd::pair\nDomainBlacklist::HandlePacket(fptn::common::network::IPPacketPtr packet) {\n bool triggered = false;\n if (packet->IsDns()) {\n const auto domain_opt = packet->GetDnsDomain();\n if (domain_opt.has_value()) {\n const std::string& domain = domain_opt.value();\n\n if (std::ranges::any_of(rules_, [&domain](const auto& re) {\n return RE2::PartialMatch(domain, *re);\n })) {\n SPDLOG_INFO(\"Domain {} is blacklisted\", domain);\n\n const auto ipv4_addresses = packet->GetDnsIPv4Addresses();\n const auto ipv6_addresses = packet->GetDnsIPv6Addresses();\n\n // save\n const std::unique_lock lock(mutex_); // mutex\n {\n for (const auto& ipv4_address : ipv4_addresses) {\n if (!ipv4_addresses_.contains(ipv4_address.ToInt())) {\n SPDLOG_INFO(\n \"Added IPv4 to blacklist: {}\", ipv4_address.ToString());\n ipv4_addresses_.insert(ipv4_address.ToInt());\n }\n }\n for (const auto& ipv6_address : ipv6_addresses) {\n if (ipv6_addresses_.contains(ipv6_address.ToString())) {\n SPDLOG_INFO(\n \"Added IPv6 to blacklist: {}\", ipv6_address.ToString());\n ipv6_addresses_.insert(ipv6_address.ToString());\n }\n }\n }\n triggered = true;\n }\n }\n } else if (packet->IsIPv4()) {\n const std::uint32_t src_ipv4 =\n packet->IPv4Layer()->getSrcIPAddress().getIPv4().toInt();\n\n const std::unique_lock lock(mutex_); // mutex\n\n if (ipv4_addresses_.contains(src_ipv4)) {\n SPDLOG_INFO(\"Blocked IPv4 packet from {}\",\n packet->IPv4Layer()->getSrcIPAddress().getIPv4().toString());\n return {nullptr, true};\n }\n } else if (packet->IsIPv6()) {\n const std::string src_ipv6 =\n packet->IPv6Layer()->getSrcIPAddress().getIPv6().toString();\n\n const std::unique_lock lock(mutex_); // mutex\n\n if (ipv6_addresses_.contains(src_ipv6)) {\n SPDLOG_INFO(\"Blocked IPv6 packet from {}\", src_ipv6);\n return {nullptr, true};\n }\n }\n return {std::move(packet), triggered};\n}\n\n} // namespace fptn::plugin\n" }, { "path": "src/fptn-client/plugins/blacklist/domain_blacklist.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"plugins/base_plugin.h\"\n#include \"routing/route_manager.h\"\n\nnamespace fptn::plugin {\nclass DomainBlacklist final : public BasePlugin {\n public:\n explicit DomainBlacklist(const std::vector& rules,\n routing::RouteManagerSPtr route_manager);\n\n ~DomainBlacklist() override = default;\n\n std::pair HandlePacket(\n fptn::common::network::IPPacketPtr packet) override;\n\n private:\n mutable std::mutex mutex_;\n\n const routing::RouteManagerSPtr route_manager_;\n std::vector> rules_;\n\n std::unordered_set ipv4_addresses_;\n std::unordered_set ipv6_addresses_;\n};\n\nusing DomainBlacklistPtr = std::unique_ptr;\n\n} // namespace fptn::plugin\n" }, { "path": "src/fptn-client/plugins/split/tunneling.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"plugins/split/tunneling.h\"\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"utils/utils.h\"\n\nnamespace fptn::plugin {\n\nTunneling::Tunneling(const std::vector& rules,\n routing::RouteManagerSPtr route_manager,\n fptn::routing::RoutingPolicy policy)\n : route_manager_(std::move(route_manager)), policy_(policy) {\n RE2::Options re_options;\n re_options.set_case_sensitive(false);\n re_options.set_log_errors(false);\n\n for (const auto& rule : rules) {\n const std::string regex_pattern = fptn::utils::DomainToRegex(rule);\n if (!regex_pattern.empty()) {\n auto re = std::make_unique(regex_pattern, re_options);\n if (re->ok()) {\n SPDLOG_INFO(\"Added tunneling rule: '{}' -> '{}'\", rule, regex_pattern);\n rules_.push_back(std::move(re));\n } else {\n SPDLOG_WARN(\"Invalid regex pattern: {}, item={}\", re->error(), rule);\n }\n } else {\n SPDLOG_WARN(\"Wrong pattern {}\", rule);\n }\n }\n}\n\nstd::pair Tunneling::HandlePacket(\n fptn::common::network::IPPacketPtr packet) {\n bool triggered = false;\n if (packet->IsDns()) {\n const auto domain_opt = packet->GetDnsDomain();\n if (domain_opt.has_value()) {\n const std::string& domain = domain_opt.value();\n const bool domain_matched = std::ranges::any_of(rules_,\n [&domain](const auto& re) { return RE2::PartialMatch(domain, *re); });\n\n const auto ipv4_addresses = packet->GetDnsIPv4Addresses();\n if (policy_ == routing::RoutingPolicy::kIncludeInVpn) {\n if (!domain_matched) {\n triggered = true;\n route_manager_->AddDnsRoutesIPv4(\n ipv4_addresses, routing::RoutingPolicy::kExcludeFromVpn);\n SPDLOG_INFO(\n \"Domain '{}' -> EXCLUDE from VPN (policy: INCLUDE only selected)\",\n domain);\n }\n } else if (policy_ == routing::RoutingPolicy::kExcludeFromVpn) {\n if (domain_matched) {\n triggered = true;\n route_manager_->AddDnsRoutesIPv4(\n ipv4_addresses, routing::RoutingPolicy::kExcludeFromVpn);\n SPDLOG_INFO(\n \"Domain '{}' -> EXCLUDE from VPN (policy: EXCLUDE selected)\",\n domain);\n }\n }\n#ifndef __APPLE__\n const auto ipv6_addresses = packet->GetDnsIPv6Addresses();\n if (!ipv6_addresses.empty()) {\n if (policy_ == routing::RoutingPolicy::kIncludeInVpn) {\n if (!domain_matched) {\n triggered = true;\n route_manager_->AddDnsRoutesIPv6(\n ipv6_addresses, routing::RoutingPolicy::kExcludeFromVpn);\n SPDLOG_INFO(\n \"Domain '{}' -> EXCLUDE from VPN (policy: INCLUDE only \"\n \"selected)\",\n domain);\n }\n } else if (policy_ == routing::RoutingPolicy::kExcludeFromVpn) {\n if (domain_matched) {\n triggered = true;\n route_manager_->AddDnsRoutesIPv6(\n ipv6_addresses, routing::RoutingPolicy::kExcludeFromVpn);\n SPDLOG_INFO(\n \"Domain '{}' -> EXCLUDE from VPN (policy: EXCLUDE selected)\",\n domain);\n }\n }\n }\n#endif\n }\n }\n return {std::move(packet), triggered};\n}\n\n} // namespace fptn::plugin\n" }, { "path": "src/fptn-client/plugins/split/tunneling.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_packet.h\"\n\n#include \"plugins/base_plugin.h\"\n#include \"routing/route_manager.h\"\n\nnamespace fptn::plugin {\nclass Tunneling final : public BasePlugin {\n public:\n explicit Tunneling(const std::vector& rules,\n routing::RouteManagerSPtr route_manager,\n fptn::routing::RoutingPolicy policy);\n\n ~Tunneling() override = default;\n\n std::pair HandlePacket(\n fptn::common::network::IPPacketPtr packet) override;\n\n private:\n const routing::RouteManagerSPtr route_manager_;\n const fptn::routing::RoutingPolicy policy_;\n\n std::vector> rules_;\n};\n\nusing TunnelingPtr = std::unique_ptr;\n\n} // namespace fptn::plugin\n" }, { "path": "src/fptn-client/routing/route_manager.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"routing/route_manager.h\"\n\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n\n#include \"common/network/net_interface.h\"\n#include \"common/system/command.h\"\n\nnamespace {\n#ifdef _WIN32\nstd::string GetWindowsInterfaceNumber(const std::string& interface_name) {\n if (interface_name.empty()) {\n return {};\n }\n\n ULONG out_buf_len = 15000;\n ULONG flags = GAA_FLAG_INCLUDE_PREFIX | GAA_FLAG_INCLUDE_GATEWAYS;\n\n std::unique_ptr adapter_addresses;\n DWORD ret = ERROR_BUFFER_OVERFLOW;\n\n for (int i = 0; i < 3 && ret == ERROR_BUFFER_OVERFLOW; i++) {\n adapter_addresses = std::make_unique(\n out_buf_len / sizeof(IP_ADAPTER_ADDRESSES) + 1);\n\n ret = GetAdaptersAddresses(\n AF_UNSPEC, flags, nullptr, adapter_addresses.get(), &out_buf_len);\n\n if (ret == ERROR_BUFFER_OVERFLOW) {\n adapter_addresses.reset();\n }\n }\n\n if (ret == NO_ERROR && adapter_addresses) {\n PIP_ADAPTER_ADDRESSES current = adapter_addresses.get();\n DWORD if_index = 0;\n\n while (current) {\n std::string adapter_name = current->AdapterName;\n\n int size_need = WideCharToMultiByte(\n CP_UTF8, 0, current->FriendlyName, -1, nullptr, 0, nullptr, nullptr);\n std::string friendly_name(size_need - 1, 0);\n WideCharToMultiByte(CP_UTF8, 0, current->FriendlyName, -1,\n &friendly_name[0], size_need, nullptr, nullptr);\n\n size_need = WideCharToMultiByte(\n CP_UTF8, 0, current->Description, -1, nullptr, 0, nullptr, nullptr);\n std::string description(size_need - 1, 0);\n WideCharToMultiByte(CP_UTF8, 0, current->Description, -1, &description[0],\n size_need, nullptr, nullptr);\n\n if (interface_name == adapter_name || interface_name == friendly_name ||\n interface_name == description) {\n if_index = current->IfIndex;\n break;\n }\n current = current->Next;\n }\n\n return if_index > 0 ? std::to_string(if_index) : std::string();\n }\n\n return {};\n}\n\nstd::pair ParseIPv4CIDR(const std::string& network) {\n std::string ip = network;\n std::string mask = \"255.255.255.255\";\n\n std::size_t slash_pos = network.find('/');\n if (slash_pos != std::string::npos) {\n ip = network.substr(0, slash_pos);\n std::string cidr_str = network.substr(slash_pos + 1);\n\n try {\n int cidr = std::stoi(cidr_str);\n if (cidr >= 0 && cidr <= 32) {\n std::uint32_t mask_value = 0;\n if (cidr > 0) {\n mask_value = ~0u << (32 - cidr);\n }\n mask = fmt::format(\"{}.{}.{}.{}\", (mask_value >> 24) & 0xFF,\n (mask_value >> 16) & 0xFF, (mask_value >> 8) & 0xFF,\n mask_value & 0xFF);\n }\n } catch (...) {\n SPDLOG_WARN(\"Warning: Failed to parse CIDR: {}\", network);\n }\n }\n return {ip, mask};\n}\n\nstd::pair ParseIPv6CIDR(const std::string& network) {\n std::string ip = network;\n int prefix = 128;\n\n size_t slash_pos = network.find('/');\n if (slash_pos != std::string::npos) {\n ip = network.substr(0, slash_pos);\n std::string cidr_str = network.substr(slash_pos + 1);\n\n try {\n int cidr = std::stoi(cidr_str);\n if (cidr >= 0 && cidr <= 128) {\n prefix = cidr;\n }\n } catch (...) {\n SPDLOG_WARN(\"Warning: Failed to parse IPv6 CIDR: {}\", network);\n }\n }\n return {ip, prefix};\n}\n#elif __linux__\n\nstd::vector GetLinuxDnsServers(const std::string& interface) {\n std::vector dns_servers;\n\n const std::string command = fmt::format(\n \"resolvectl status {} | grep 'DNS Servers:' | awk -F': ' '{{print $2}}'\",\n interface);\n\n std::vector output;\n fptn::common::system::command::run(command, output);\n\n if (!output.empty() && !output[0].empty()) {\n std::istringstream iss(output[0]);\n std::string server;\n while (iss >> server) {\n if (!server.empty()) {\n dns_servers.push_back(server);\n }\n }\n }\n return dns_servers;\n}\n#endif\n\nbool AddIPv4RouteToSystem(const std::string& destination,\n const std::string& gateway_ip,\n const std::string& out_interface) {\n (void)gateway_ip;\n (void)out_interface;\n try {\n#ifdef __linux__\n const std::string command =\n fmt::format(R\"(ip route add {} via \"{}\" dev \"{}\" )\", destination,\n gateway_ip, out_interface);\n#elif __APPLE__\n const std::string command =\n fmt::format(\"route add -net {} {}\", destination, gateway_ip);\n#elif _WIN32\n auto [ip, mask] = ParseIPv4CIDR(destination);\n std::string interface_param = \"\";\n if (!out_interface.empty()) {\n std::string interface_number = GetWindowsInterfaceNumber(out_interface);\n if (!interface_number.empty()) {\n interface_param = \"if \" + interface_number;\n }\n }\n const std::string command =\n fmt::format(\"route add {} mask {} {} METRIC 2 {}\", ip, mask, gateway_ip,\n interface_param);\n#else\n return false;\n#endif\n fptn::common::system::command::run(command);\n return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Failed to add IPv4 route {}: {}\", destination, e.what());\n return false;\n } catch (...) {\n SPDLOG_ERROR(\"Unknown error adding IPv4 route: {}\", destination);\n return false;\n }\n}\n\nbool AddIPv6RouteToSystem(const std::string& destination,\n const std::string& gateway_ip,\n const std::string& out_interface) {\n (void)gateway_ip;\n (void)out_interface;\n try {\n#ifdef __linux__\n const std::string command =\n fmt::format(R\"(ip -6 route add {} via \"{}\" dev \"{}\" )\", destination,\n gateway_ip, out_interface);\n#elif __APPLE__\n const std::string command =\n fmt::format(\"route add -inet6 {} {}\", destination, gateway_ip);\n#elif _WIN32\n auto [ip, prefix] = ParseIPv6CIDR(destination);\n std::string interface_name = out_interface;\n if (interface_name.empty()) {\n SPDLOG_ERROR(\"Interface name required for IPv6 route on Windows\");\n return false;\n }\n const std::string command =\n fmt::format(\"netsh interface ipv6 add route {}/{} \\\"{}\\\" {}\", ip,\n prefix, interface_name, gateway_ip);\n#else\n return false;\n#endif\n fptn::common::system::command::run(command);\n return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Failed to add IPv6 route {}: {}\", destination, e.what());\n return false;\n } catch (...) {\n SPDLOG_ERROR(\"Unknown error adding IPv6 route: {}\", destination);\n return false;\n }\n}\n\nbool RemoveIPv4RouteFromSystem(const std::string& destination,\n const std::string& gateway_ip,\n const std::string& out_interface) {\n (void)gateway_ip;\n (void)out_interface;\n try {\n#ifdef __linux__\n const std::string command = fmt::format(\"ip route del {} via {} dev {}\",\n destination, gateway_ip, out_interface);\n#elif __APPLE__\n const std::string command =\n fmt::format(\"route delete -net {} {}\", destination, gateway_ip);\n#elif _WIN32\n auto [ip, mask] = ParseIPv4CIDR(destination);\n std::string interface_param = \"\";\n if (!out_interface.empty()) {\n std::string interface_number = GetWindowsInterfaceNumber(out_interface);\n if (!interface_number.empty()) {\n interface_param = \"if \" + interface_number;\n }\n }\n const std::string command = fmt::format(\n \"route delete {} mask {} {} {}\", ip, mask, gateway_ip, interface_param);\n#else\n return false;\n#endif\n fptn::common::system::command::run(command);\n return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Failed to remove IPv4 route {}: {}\", destination, e.what());\n return false;\n } catch (...) {\n SPDLOG_ERROR(\"Unknown error removing IPv4 route: {}\", destination);\n return false;\n }\n}\n\nbool RemoveIPv6RouteFromSystem(const std::string& destination,\n const std::string& gateway_ip,\n const std::string& out_interface) {\n (void)gateway_ip;\n (void)out_interface;\n try {\n#ifdef __linux__\n const std::string command = fmt::format(\"ip -6 route del {} via {} dev {}\",\n destination, gateway_ip, out_interface);\n#elif __APPLE__\n const std::string command =\n fmt::format(\"route delete -inet6 {} {}\", destination, gateway_ip);\n#elif _WIN32\n auto [ip, prefix] = ParseIPv6CIDR(destination);\n std::string interface_name = out_interface;\n if (interface_name.empty()) {\n SPDLOG_ERROR(\"Interface name required for IPv6 route removal on Windows\");\n return false;\n }\n const std::string command =\n fmt::format(\"netsh interface ipv6 delete route {}/{} \\\"{}\\\"\", ip,\n prefix, interface_name);\n#else\n return false;\n#endif\n fptn::common::system::command::run(command);\n return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Failed to remove IPv6 route {}: {}\", destination, e.what());\n return false;\n } catch (...) {\n SPDLOG_ERROR(\"Unknown error removing IPv6 route: {}\", destination);\n return false;\n }\n}\n\n} // namespace\n\nusing fptn::routing::RouteManager;\n\nRouteManager::RouteManager(std::string out_interface_name,\n std::string tun_interface_name,\n fptn::common::network::IPv4Address vpn_server_ip,\n fptn::common::network::IPv4Address dns_server_ipv4,\n fptn::common::network::IPv6Address dns_server_ipv6,\n fptn::common::network::IPv4Address gateway_ipv4,\n fptn::common::network::IPv6Address gateway_ipv6,\n fptn::common::network::IPv4Address tun_interface_address_ipv4,\n fptn::common::network::IPv6Address tun_interface_address_ipv6\n#if _WIN32\n ,\n bool enable_advanced_dns_management\n#endif\n\n )\n : running_(false),\n out_interface_name_(std::move(out_interface_name)),\n tun_interface_name_(std::move(tun_interface_name)),\n vpn_server_ip_(std::move(vpn_server_ip)),\n dns_server_ipv4_(std::move(dns_server_ipv4)),\n dns_server_ipv6_(std::move(dns_server_ipv6)),\n gateway_ipv4_(std::move(gateway_ipv4)),\n gateway_ipv6_(std::move(gateway_ipv6)),\n tun_interface_address_ipv4_(std::move(tun_interface_address_ipv4)),\n tun_interface_address_ipv6_(std::move(tun_interface_address_ipv6))\n#if _WIN32\n ,\n enable_advanced_dns_management_(enable_advanced_dns_management)\n#endif\n{\n}\n\nRouteManager::~RouteManager() { // NOLINT(bugprone-exception-escape)\n if (running_) {\n Clean();\n }\n}\n\nbool RouteManager::Apply() {\n const std::unique_lock lock(mutex_); // mutex\n\n running_ = true;\n#if defined(__APPLE__) || defined(__linux__)\n detected_out_interface_name_ =\n (out_interface_name_.empty() ? GetDefaultNetworkInterfaceName()\n : out_interface_name_);\n#endif\n detected_out_interface_name_ =\n (out_interface_name_.empty() ? GetDefaultNetworkInterfaceName()\n : out_interface_name_);\n detected_gateway_ipv4_ =\n gateway_ipv4_.IsEmpty() ? GetDefaultGatewayIPAddress() : gateway_ipv4_;\n\n SPDLOG_INFO(\"=== Setting up routing ===\");\n SPDLOG_INFO(\"IPTABLES VPN SERVER IP: {}\", vpn_server_ip_.ToString());\n SPDLOG_INFO(\n \"IPTABLES OUT NETWORK INTERFACE: {}\", detected_out_interface_name_);\n SPDLOG_INFO(\n \"IPTABLES GATEWAY IP: {}\", detected_gateway_ipv4_.ToString());\n SPDLOG_INFO(\n \"IPTABLES DNS SERVER: {}\", dns_server_ipv4_.ToString());\n#ifdef __linux__\n original_dns_servers_ = GetLinuxDnsServers(detected_out_interface_name_);\n for (const auto& dns : original_dns_servers_) {\n SPDLOG_INFO(\"Saved dns: {}\", dns);\n }\n std::vector commands = {fmt::format(\"systemctl start sysctl\"),\n fmt::format(\"sysctl -w net.ipv4.ip_forward=1\"),\n fmt::format(\"sysctl -w net.ipv6.conf.default.disable_ipv6=0\"),\n fmt::format(\"sysctl -w net.ipv6.conf.all.disable_ipv6=0\"),\n fmt::format(\"sysctl -w net.ipv6.conf.lo.disable_ipv6=0\"),\n fmt::format(\"sysctl -w net.ipv6.conf.all.forward=1\"),\n fmt::format(\"sysctl -p\"),\n // iptables\n fmt::format(\"iptables -t nat -A POSTROUTING -o {} -j MASQUERADE\",\n detected_out_interface_name_),\n fmt::format(\"iptables -A FORWARD -i {} -o {} -m state --state \"\n \"RELATED,ESTABLISHED -j ACCEPT\",\n detected_out_interface_name_, tun_interface_name_),\n fmt::format(\"iptables -A FORWARD -i {} -o {} -j ACCEPT\",\n tun_interface_name_, detected_out_interface_name_),\n fmt::format(\"iptables -A OUTPUT -o {} -d {} -j ACCEPT\",\n detected_out_interface_name_, vpn_server_ip_.ToString()),\n fmt::format(\"iptables -A INPUT -i {} -s {} -j ACCEPT\",\n detected_out_interface_name_, vpn_server_ip_.ToString()),\n // IPv4 default & DNS route\n fmt::format(\"ip route add default dev {}\", tun_interface_name_),\n fmt::format(\"ip route add {} dev {}\", dns_server_ipv4_.ToString(),\n tun_interface_name_), // via TUN\n // IPv6 default\n fmt::format(\"ip -6 route add {} dev {}\", dns_server_ipv6_.ToString(),\n tun_interface_name_),\n fmt::format(\"ip -6 route add default via {} dev {}\",\n dns_server_ipv6_.ToString(), tun_interface_name_),\n // exclude vpn server\n fmt::format(\"ip route add {} via {} dev {}\", vpn_server_ip_.ToString(),\n detected_gateway_ipv4_.ToString(), detected_out_interface_name_),\n // Allow DNS responses from TUN (sport 53, not dport 53)\n fmt::format(\"iptables -A OUTPUT -o {} -p udp --sport 53 -j ACCEPT\",\n tun_interface_name_),\n fmt::format(\"iptables -A OUTPUT -o {} -p tcp --sport 53 -j ACCEPT\",\n tun_interface_name_),\n fmt::format(\"ip6tables -A OUTPUT -o {} -p udp --sport 53 -j ACCEPT\",\n tun_interface_name_),\n fmt::format(\"ip6tables -A OUTPUT -o {} -p tcp --sport 53 -j ACCEPT\",\n tun_interface_name_),\n // Block DNS requests on physical interface\n fmt::format(\"iptables -A OUTPUT -o {} -p udp --dport 53 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"iptables -A OUTPUT -o {} -p tcp --dport 53 -j DROP\",\n detected_out_interface_name_),\n // Block DNS IPv6\n fmt::format(\"ip6tables -A OUTPUT -o {} -p udp --dport 53 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"ip6tables -A OUTPUT -o {} -p tcp --dport 53 -j DROP\",\n detected_out_interface_name_),\n // Block DoT IPv4\n fmt::format(\"iptables -A OUTPUT -o {} -p udp --dport 853 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"iptables -A OUTPUT -o {} -p tcp --dport 853 -j DROP\",\n detected_out_interface_name_),\n // Block DoT IPv6\n fmt::format(\"ip6tables -A OUTPUT -o {} -p udp --dport 853 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"ip6tables -A OUTPUT -o {} -p tcp --dport 853 -j DROP\",\n detected_out_interface_name_),\n // Also allow DNS to specific DNS server IP\n fmt::format(\"iptables -A OUTPUT -d {} -p udp --dport 53 -j ACCEPT\",\n dns_server_ipv4_.ToString()),\n fmt::format(\"iptables -A OUTPUT -d {} -p tcp --dport 53 -j ACCEPT\",\n dns_server_ipv4_.ToString()),\n // DNS via resolvectl\n fmt::format(\"resolvectl resolv-conf false\"),\n fmt::format(\"resolvectl dns {} {}\", detected_out_interface_name_,\n dns_server_ipv4_.ToString()),\n fmt::format(\n \"resolvectl default-route {} false\", detected_out_interface_name_),\n fmt::format(\"resolvectl dns {} {}\", tun_interface_name_,\n dns_server_ipv4_.ToString()),\n fmt::format(\"resolvectl default-route {} true\", tun_interface_name_),\n fmt::format(\"resolvectl domain {} ~.\", tun_interface_name_),\n fmt::format(R\"(bash -c \"chattr -i /etc/resolv.conf\")\"),\n fmt::format(\n R\"(bash -c \"grep -q '^nameserver {}$' /etc/resolv.conf || sed -i '1i nameserver {}' /etc/resolv.conf\")\",\n dns_server_ipv6_.ToString(), dns_server_ipv6_.ToString()),\n fmt::format(\n R\"(bash -c \"grep -q '^nameserver {}$' /etc/resolv.conf || sed -i '1i nameserver {}' /etc/resolv.conf\")\",\n dns_server_ipv4_.ToString(), dns_server_ipv4_.ToString()),\n fmt::format(R\"(bash -c \"chattr +i /etc/resolv.conf\")\"),\n fmt::format(\"resolvectl flush-caches\")};\n\n#elif __APPLE__\n const std::vector commands = {\n fmt::format(\n R\"(bash -c \"networksetup -listallnetworkservices | grep -v '^An asterisk' | grep -v '^\\* ' | xargs -I {{}} networksetup -setdnsservers '{{}}' empty\")\",\n dns_server_ipv4_.ToString()), // clean DNS\n fmt::format(\"sysctl -w net.inet.ip.forwarding=1\"),\n fmt::format(\"sysctl -w net.inet6.ip6.forwarding=1\"),\n fmt::format(\n R\"(bash -c \"printf 'nat on {findOutInterfaceName} from {tunInterfaceName}:network to any -> ({findOutInterfaceName})\nnat on {findOutInterfaceName} inet6 from {tunInterfaceName}:network to any -> ({findOutInterfaceName})\npass out on {findOutInterfaceName} proto tcp from any to {vpnServerIP}\npass in on {findOutInterfaceName} proto tcp from {vpnServerIP} to any\npass in on {tunInterfaceName} proto tcp from any to any\npass out on {tunInterfaceName} proto tcp from any to any\npass in on {tunInterfaceName} proto udp from any to any\npass out on {tunInterfaceName} proto udp from any to any\npass in on {tunInterfaceName} proto udp from any to any port 53\npass out on {tunInterfaceName} proto udp from any to any port 53\npass in on {tunInterfaceName} proto tcp from any to any port 53\npass out on {tunInterfaceName} proto tcp from any to any port 53\n' > /tmp/pf.conf\")\",\n fmt::arg(\"findOutInterfaceName\", detected_out_interface_name_),\n fmt::arg(\"tunInterfaceName\", tun_interface_name_),\n fmt::arg(\"vpnServerIP\", vpn_server_ip_.ToString())),\n fmt::format(\"pfctl -ef /tmp/pf.conf\"),\n // IPv4 default & DNS route\n fmt::format(\n \"route add -net 0.0.0.0/1 -interface {}\", tun_interface_name_),\n fmt::format(\n \"route add -net 128.0.0.0/1 -interface {}\", tun_interface_name_),\n fmt::format(\"route add -host {} -interface {}\",\n dns_server_ipv4_.ToString(), tun_interface_name_), // via TUN\n // IPv6 routes\n fmt::format(\n \"route add -inet6 -net ::0/1 -interface {}\", tun_interface_name_),\n fmt::format(\n \"route add -inet6 -net 8000::/1 -interface {}\", tun_interface_name_),\n fmt::format(\"route add -inet6 default -interface {} 2>/dev/null || true\",\n tun_interface_name_),\n fmt::format(\"route add -inet6 -host {} -interface {}\",\n dns_server_ipv6_.ToString(), tun_interface_name_),\n // DNS IPv6 route\n fmt::format(\"route add -inet6 -host {} -interface {}\",\n dns_server_ipv6_.ToString(), tun_interface_name_),\n // exclude vpn server & networks\n fmt::format(\"route add -host {} {}\", vpn_server_ip_.ToString(),\n detected_gateway_ipv4_.ToString()),\n // DNS\n fmt::format(\"dscacheutil -flushcache\"),\n fmt::format(\n R\"(bash -c \"networksetup -listallnetworkservices | grep -v '^An asterisk' | grep -v '^\\* ' | xargs -I {{}} networksetup -setdnsservers '{{}}' {} {}\")\",\n dns_server_ipv6_.ToString(), dns_server_ipv4_.ToString())};\n\n#elif _WIN32\n const std::string win_interface_number =\n GetWindowsInterfaceNumber(tun_interface_name_);\n const std::string interface_info =\n win_interface_number.empty() ? \"\" : \" if \" + win_interface_number;\n const std::string backup_dns_cmd = R\"PSHELL(powershell -Command \"\n if (-not (Test-Path \\\"$env:TEMP\\\\fptn_orig_dns.txt\\\")) {\n $interface = ')PSHELL\" + detected_out_interface_name_ +\n R\"PSHELL(';\n if (-not $interface) { $interface = ''; }\n if ($interface) {\n # IPv4\n $netshIPv4 = netsh interface ipv4 show dnsservers \\\"$interface\\\" 2>`$null;\n if ($netshIPv4 -match 'DHCP') {\n $output = @{IPv4='DHCP'};\n } else {\n $dns4 = Get-DnsClientServerAddress -InterfaceAlias $interface -AddressFamily IPv4 2>`$null | Select-Object -ExpandProperty ServerAddresses;\n if ($dns4) {\n $output = @{IPv4=($dns4 -join ',')};\n }\n }\n # IPv6\n $netshIPv6 = netsh interface ipv6 show dnsservers \\\"$interface\\\" 2>`$null;\n if ($netshIPv6 -match 'DHCP') {\n $output.IPv6 = 'DHCP';\n } else {\n $dns6 = Get-DnsClientServerAddress -InterfaceAlias $interface -AddressFamily IPv6 2>`$null | Select-Object -ExpandProperty ServerAddresses;\n if ($dns6) {\n $output.IPv6 = $dns6 -join ',';\n }\n }\n if ($output) {\n $output | ConvertTo-Json | Out-File \\\"$env:TEMP\\\\fptn_orig_dns.txt\\\" -Encoding UTF8;\n }\n }\n }\")PSHELL\";\n\n const std::string configure_dns_cmd = R\"PSHELL(powershell -Command \"\n $dns4 = ')PSHELL\" + dns_server_ipv4_.ToString() +\n R\"PSHELL(';\n $dns6 = ')PSHELL\" + dns_server_ipv6_.ToString() +\n R\"PSHELL(';\n $interface = ')PSHELL\" + detected_out_interface_name_ +\n R\"PSHELL(';\n if (-not $interface) { $interface = ''; }\n if ($interface) {\n # IPv4\n Set-DnsClientServerAddress -InterfaceAlias $interface -ServerAddresses $dns4 -ErrorAction SilentlyContinue;\n netsh interface ipv4 set dnsservers name=\\\"$interface\\\" source=static address=$dns4 validate=no register=no 2>`$null;\n # IPv6\n Set-DnsClientServerAddress -InterfaceAlias $interface -ServerAddresses $dns6 -ErrorAction SilentlyContinue;\n netsh interface ipv6 set dnsservers name=\\\"$interface\\\" source=static address=$dns6 validate=no register=no 2>`$null;\n }\")PSHELL\";\n\n const std::vector commands = {\n fmt::format(\"route add {} mask 255.255.255.255 {} METRIC 2\",\n vpn_server_ip_.ToString(), detected_gateway_ipv4_.ToString()),\n // Default gateway & dns\n fmt::format(\"route add 0.0.0.0 mask 0.0.0.0 {} METRIC 1 {}\",\n tun_interface_address_ipv4_.ToString(), interface_info),\n fmt::format(\"route add {} mask 255.255.255.255 {} METRIC 2 {}\",\n dns_server_ipv4_.ToString(), tun_interface_address_ipv4_.ToString(),\n interface_info), // via TUN\n // DNS\n enable_advanced_dns_management_ ? backup_dns_cmd\n : \"echo \\\"No advanced DNS management\\\" \",\n enable_advanced_dns_management_ ? configure_dns_cmd\n : \"echo \\\"No advanced DNS management\\\" \",\n fmt::format(\"netsh interface ip set dns name=\\\"{}\\\" static {}\",\n tun_interface_name_, dns_server_ipv4_.ToString()),\n // IPv6\n fmt::format(\"netsh interface ipv6 add route ::/0 \\\"{}\\\" \\\"{}\\\" \",\n tun_interface_name_, tun_interface_address_ipv6_.ToString()),\n fmt::format(\"netsh interface ipv6 add dnsservers=\\\"{}\\\" \\\"{}\\\" index=1\",\n tun_interface_name_, dns_server_ipv6_.ToString()),\n // Flush DNS cache\n \"ipconfig /flushdns\"};\n\n#else\n#error \"Unsupported system!\"\n#endif\n try {\n for (const auto& cmd : commands) {\n fptn::common::system::command::run(cmd);\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"IPTables error: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"Undefined error\");\n }\n SPDLOG_INFO(\"=== Routing setup completed successfully ===\");\n return true;\n}\n\nbool RouteManager::Clean() { // NOLINT(bugprone-exception-escape)\n if (!running_) {\n SPDLOG_INFO(\"No need to clean rules!\");\n return true;\n }\n\n const std::unique_lock lock(mutex_); // mutex\n\n running_ = false;\n\n // clean dns ipv4\n for (const auto& ip : dns_routes_ipv4_) {\n std::string interface_name;\n if (ip.policy == RoutingPolicy::kExcludeFromVpn) {\n if (!detected_out_interface_name_.empty()) {\n interface_name = detected_out_interface_name_;\n } else if (!out_interface_name_.empty()) {\n interface_name = out_interface_name_;\n } else {\n interface_name = GetDefaultNetworkInterfaceName();\n }\n } else {\n interface_name = tun_interface_name_;\n }\n RemoveIPv4RouteFromSystem(\n ip.destination, gateway_ipv4_.ToString(), interface_name);\n }\n dns_routes_ipv4_.clear();\n\n // clean dns ipv6\n for (const auto& ip : dns_routes_ipv6_) {\n std::string interface_name;\n if (ip.policy == RoutingPolicy::kExcludeFromVpn) {\n if (!detected_out_interface_name_.empty()) {\n interface_name = detected_out_interface_name_;\n } else if (!out_interface_name_.empty()) {\n interface_name = out_interface_name_;\n } else {\n interface_name = GetDefaultNetworkInterfaceName();\n }\n } else {\n interface_name = tun_interface_name_;\n }\n RemoveIPv6RouteFromSystem(\n ip.destination, gateway_ipv6_.ToString(), interface_name);\n }\n dns_routes_ipv6_.clear();\n\n // clean route ipv4\n for (const auto& route : additional_routes_ipv4_) {\n if (route.policy == RoutingPolicy::kExcludeFromVpn) {\n RemoveIPv4RouteFromSystem(\n route.destination, gateway_ipv4_.ToString(), out_interface_name_);\n } else {\n // Include route - remove through VPN interface\n RemoveIPv4RouteFromSystem(route.destination,\n tun_interface_address_ipv4_.ToString(), tun_interface_name_);\n }\n }\n additional_routes_ipv4_.clear();\n\n // Remove additional IPv6 routes\n for (const auto& route : additional_routes_ipv6_) {\n if (route.policy == RoutingPolicy::kExcludeFromVpn) {\n RemoveIPv6RouteFromSystem(\n route.destination, gateway_ipv6_.ToString(), out_interface_name_);\n } else {\n // Include route - remove through VPN interface\n RemoveIPv6RouteFromSystem(route.destination,\n tun_interface_address_ipv6_.ToString(), tun_interface_name_);\n }\n }\n additional_routes_ipv6_.clear();\n\n#ifdef __linux__\n std::vector commands = {\n fmt::format(\"iptables -t nat -D POSTROUTING -o {} -j MASQUERADE\",\n detected_out_interface_name_),\n fmt::format(\"iptables -D FORWARD -i {} -o {} -m state --state \"\n \"RELATED,ESTABLISHED -j ACCEPT\",\n detected_out_interface_name_, tun_interface_name_),\n fmt::format(\"iptables -D FORWARD -i {} -o {} -j ACCEPT\",\n tun_interface_name_, detected_out_interface_name_),\n fmt::format(\"iptables -D OUTPUT -o {} -d {} -j ACCEPT\",\n detected_out_interface_name_, vpn_server_ip_.ToString()),\n fmt::format(\"iptables -D INPUT -i {} -s {} -j ACCEPT\",\n detected_out_interface_name_, vpn_server_ip_.ToString()),\n // del routes\n fmt::format(\"ip route del default dev {}\", tun_interface_name_),\n fmt::format(\"ip route del {} via {} dev {}\", vpn_server_ip_.ToString(),\n detected_gateway_ipv4_.ToString(), detected_out_interface_name_),\n // Delete DNS server route\n fmt::format(\"ip route del {} dev {}\", dns_server_ipv4_.ToString(),\n tun_interface_name_),\n fmt::format(\n R\"(bash -c \"chattr -i /etc/resolv.conf; sed -i '/^nameserver {}$/d' /etc/resolv.conf; sed -i '/^nameserver {}$/d' /etc/resolv.conf\")\",\n dns_server_ipv4_.ToString(), dns_server_ipv6_.ToString()),\n // Delete DNS to specific DNS server IP rules\n fmt::format(\"iptables -D OUTPUT -d {} -p udp --dport 53 -j ACCEPT\",\n dns_server_ipv4_.ToString()),\n fmt::format(\"iptables -D OUTPUT -d {} -p tcp --dport 53 -j ACCEPT\",\n dns_server_ipv4_.ToString()),\n // Delete DNS block rules IPv4\n fmt::format(\"iptables -D OUTPUT -o {} -p udp --dport 53 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"iptables -D OUTPUT -o {} -p tcp --dport 53 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"iptables -D OUTPUT -o {} -p udp --dport 853 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"iptables -D OUTPUT -o {} -p tcp --dport 853 -j DROP\",\n detected_out_interface_name_),\n // Delete DNS block rules IPv6\n fmt::format(\"ip6tables -D OUTPUT -o {} -p udp --dport 53 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"ip6tables -D OUTPUT -o {} -p tcp --dport 53 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"ip6tables -D OUTPUT -o {} -p udp --dport 853 -j DROP\",\n detected_out_interface_name_),\n fmt::format(\"ip6tables -D OUTPUT -o {} -p tcp --dport 853 -j DROP\",\n detected_out_interface_name_),\n // Delete TUN allow rules IPv4\n fmt::format(\"iptables -D OUTPUT -o {} -p udp --sport 53 -j ACCEPT\",\n tun_interface_name_),\n fmt::format(\"iptables -D OUTPUT -o {} -p tcp --sport 53 -j ACCEPT\",\n tun_interface_name_),\n // Delete TUN allow rules IPv6\n fmt::format(\"ip6tables -D OUTPUT -o {} -p udp --sport 53 -j ACCEPT\",\n tun_interface_name_),\n fmt::format(\"ip6tables -D OUTPUT -o {} -p tcp --sport 53 -j ACCEPT\",\n tun_interface_name_)};\n\n // Restore DNS\n if (!original_dns_servers_.empty()) {\n std::string all_dns;\n for (const auto& dns : original_dns_servers_) {\n if (!all_dns.empty()) {\n all_dns += \" \";\n }\n all_dns += dns;\n }\n commands.push_back(fmt::format(\n \"resolvectl dns {} {}\", detected_out_interface_name_, all_dns));\n commands.push_back(\n fmt::format(\"resolvectl domain {} .\", detected_out_interface_name_));\n commands.push_back(fmt::format(\n \"resolvectl default-route {} true\", detected_out_interface_name_));\n SPDLOG_INFO(\"Restoring {} DNS servers for {}\", original_dns_servers_.size(),\n detected_out_interface_name_);\n } else {\n commands.push_back(\n fmt::format(\"resolvectl revert {}\", detected_out_interface_name_));\n SPDLOG_INFO(\"Reverting DNS to DHCP for {}\", detected_out_interface_name_);\n }\n commands.emplace_back(\"resolvectl flush-caches\");\n\n#elif __APPLE__\n const std::vector commands = {\n fmt::format(\n R\"(bash -c \"networksetup -listallnetworkservices | grep -v '^An asterisk' | grep -v '^\\* ' | xargs -I {{}} networksetup -setdnsservers '{{}}' empty\")\"), // clean DNS\n fmt::format(\"pfctl -F all -f /etc/pf.conf\"),\n // del routes\n fmt::format(\"route delete -host {} -interface {}\",\n dns_server_ipv4_.ToString(),\n tun_interface_name_), // via TUN\n fmt::format(\n \"route delete -net 0.0.0.0/1 -interface {}\", tun_interface_name_),\n fmt::format(\n \"route delete -net 128.0.0.0/1 -interface {}\", tun_interface_name_),\n // del IPv6 routes\n fmt::format(\n \"route delete -inet6 -net ::0/1 -interface {}\", tun_interface_name_),\n fmt::format(\"route delete -inet6 -net 8000::/1 -interface {}\",\n tun_interface_name_),\n fmt::format(\"route delete -host {} {}\", vpn_server_ip_.ToString(),\n detected_gateway_ipv4_.ToString()),\n // DNS\n fmt::format(\n R\"(bash -c \"networksetup -listallnetworkservices | grep -v '^An asterisk' | grep -v '^\\* ' | xargs -I {{}} networksetup -setdnsservers '{{}}' empty\")\") // clean DNS\n };\n#elif _WIN32\n std::string current_interface_name = detected_out_interface_name_;\n if (current_interface_name.empty()) {\n current_interface_name = out_interface_name_;\n }\n if (current_interface_name.empty()) {\n current_interface_name = GetDefaultNetworkInterfaceName();\n }\n const std::string restore_dns_cmd = R\"PSHELL(powershell -Command \"\n $interface = ')PSHELL\" + current_interface_name +\n R\"PSHELL(';\n if ($interface) {\n if (Test-Path \\\"$env:TEMP\\\\fptn_orig_dns.txt\\\") {\n $config = Get-Content \\\"$env:TEMP\\\\fptn_orig_dns.txt\\\" -Raw | ConvertFrom-Json;\n # IPv4\n if ($config.IPv4 -eq 'DHCP') {\n netsh interface ip set dns \\\"$interface\\\" dhcp\n } elseif ($config.IPv4) {\n $dns4Servers = $config.IPv4 -split ',' | ForEach-Object { $_.Trim() } | Where-Object { $_ -ne '' };\n if ($dns4Servers.Count -gt 0) {\n netsh interface ip set dns \\\"$interface\\\" static $($dns4Servers[0])\n if ($dns4Servers.Count -gt 1) {\n netsh interface ip add dns \\\"$interface\\\" $($dns4Servers[1]) index=2\n }\n }\n }\n # IPv6\n if ($config.IPv6 -eq 'DHCP') {\n netsh interface ipv6 set dnsservers \\\"$interface\\\" dhcp\n } elseif ($config.IPv6) {\n $dns6Servers = $config.IPv6 -split ',' | ForEach-Object { $_.Trim() } | Where-Object { $_ -ne '' };\n if ($dns6Servers.Count -gt 0) {\n netsh interface ipv6 set dnsservers \\\"$interface\\\" static $($dns6Servers[0]) primary\n if ($dns6Servers.Count -gt 1) {\n netsh interface ipv6 add dnsservers \\\"$interface\\\" $($dns6Servers[1]) index=2\n }\n }\n }\n Remove-Item \\\"$env:TEMP\\\\fptn_orig_dns.txt\\\" -Force\n } else {\n netsh interface ip set dns \\\"$interface\\\" dhcp\n netsh interface ipv6 set dnsservers \\\"$interface\\\" dhcp\n }\n }\")PSHELL\";\n\n const std::vector commands = {\n enable_advanced_dns_management_ ? restore_dns_cmd\n : \"echo \\\"No advanced DNS management\\\" \",\n // Remove routes\n fmt::format(\n \"route delete {} mask 255.255.255.255\", vpn_server_ip_.ToString()),\n fmt::format(\"route delete 0.0.0.0 mask 0.0.0.0\"),\n fmt::format(\n \"route delete {} mask 255.255.255.255\", dns_server_ipv4_.ToString()),\n fmt::format(\n \"netsh interface ipv6 delete route ::/0 \\\"{}\\\"\", tun_interface_name_),\n\n // Final cleanup\n \"ipconfig /flushdns\",\n\n // restore routing\n fmt::format(\"route add 0.0.0.0 mask 0.0.0.0 {} METRIC 1\",\n detected_gateway_ipv4_.ToString())};\n\n#else\n#error \"Unsupported system!\"\n#endif\n try {\n for (const auto& cmd : commands) {\n fptn::common::system::command::run(cmd);\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"IPTables error: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"Undefined error\");\n }\n running_ = false;\n return true;\n}\n\nbool RouteManager::AddDnsRoutesIPv4(\n const std::vector& ips,\n const RoutingPolicy policy) {\n std::string interface_name;\n std::string gateway_ip;\n\n if (policy == RoutingPolicy::kExcludeFromVpn) {\n if (!detected_out_interface_name_.empty()) {\n interface_name = detected_out_interface_name_;\n } else if (!out_interface_name_.empty()) {\n interface_name = out_interface_name_;\n } else {\n interface_name = GetDefaultNetworkInterfaceName();\n }\n gateway_ip = gateway_ipv4_.ToString();\n } else {\n interface_name = tun_interface_name_;\n gateway_ip = tun_interface_address_ipv4_.ToString();\n }\n if (interface_name.empty()) {\n interface_name = fptn::routing::GetDefaultNetworkInterfaceName();\n }\n\n if (interface_name.empty()) {\n SPDLOG_WARN(\n \"Cannot add DNS IPv4 routes: interface name is empty for policy {}\",\n policy == RoutingPolicy::kExcludeFromVpn ? \"EXCLUDE\" : \"INCLUDE\");\n return false;\n }\n\n std::vector entries_to_add;\n {\n const std::unique_lock lock(mutex_);\n\n for (const auto& ip : ips) {\n std::string ip_str = ip.ToString();\n RouteEntry entry{.destination = ip_str, .policy = policy};\n\n if (!dns_routes_ipv4_.contains(entry)) {\n dns_routes_ipv4_.insert(entry);\n entries_to_add.push_back(std::move(entry));\n }\n }\n }\n\n if (entries_to_add.empty()) {\n return true;\n }\n\n bool status = true;\n for (const auto& entry : entries_to_add) {\n try {\n const bool rv =\n AddIPv4RouteToSystem(entry.destination, gateway_ip, interface_name);\n\n if (rv) {\n const std::string policy_str = (policy == RoutingPolicy::kExcludeFromVpn\n ? \"EXCLUDE (bypass VPN)\"\n : \"INCLUDE (through VPN)\");\n SPDLOG_INFO(\"DNS route added: {} [{}]\", entry.destination, policy_str);\n } else {\n SPDLOG_WARN(\"Failed to add DNS route: {}\", entry.destination);\n\n const std::unique_lock lock(mutex_);\n dns_routes_ipv4_.erase(entry);\n status = false;\n }\n } catch (const std::exception& e) {\n SPDLOG_WARN(\"Exception adding DNS IPv4 route {}: {}\", entry.destination,\n e.what());\n\n const std::unique_lock lock(mutex_);\n dns_routes_ipv4_.erase(entry);\n status = false;\n }\n }\n\n return status;\n}\n\nbool RouteManager::AddDnsRoutesIPv6(\n const std::vector& ips,\n const RoutingPolicy policy) {\n std::string interface_name;\n std::string gateway_ip;\n\n if (policy == RoutingPolicy::kExcludeFromVpn) {\n if (!detected_out_interface_name_.empty()) {\n interface_name = detected_out_interface_name_;\n } else if (!out_interface_name_.empty()) {\n interface_name = out_interface_name_;\n } else {\n interface_name = GetDefaultNetworkInterfaceName();\n }\n gateway_ip = gateway_ipv6_.ToString();\n } else {\n interface_name = tun_interface_name_;\n gateway_ip = tun_interface_address_ipv6_.ToString();\n }\n\n if (interface_name.empty()) {\n SPDLOG_WARN(\n \"Cannot add DNS IPv6 routes: interface name is empty for policy {}\",\n policy == RoutingPolicy::kExcludeFromVpn ? \"EXCLUDE\" : \"INCLUDE\");\n return false;\n }\n\n if (gateway_ip.empty()) {\n SPDLOG_WARN(\"Cannot add DNS IPv6 routes: gateway IP is empty for policy {}\",\n policy == RoutingPolicy::kExcludeFromVpn ? \"EXCLUDE\" : \"INCLUDE\");\n return false;\n }\n\n std::vector entries_to_add;\n {\n const std::unique_lock lock(mutex_);\n\n for (const auto& ip : ips) {\n std::string ip_str = ip.ToString();\n RouteEntry entry{.destination = ip_str, .policy = policy};\n\n if (!dns_routes_ipv6_.contains(entry)) {\n dns_routes_ipv6_.insert(entry);\n entries_to_add.push_back(std::move(entry));\n }\n }\n }\n\n if (entries_to_add.empty()) {\n return true;\n }\n\n bool status = true;\n for (const auto& entry : entries_to_add) {\n try {\n const bool rv =\n AddIPv6RouteToSystem(entry.destination, gateway_ip, interface_name);\n\n if (rv) {\n const std::string policy_str = (policy == RoutingPolicy::kExcludeFromVpn\n ? \"EXCLUDE (bypass VPN)\"\n : \"INCLUDE (through VPN)\");\n SPDLOG_INFO(\n \"DNS IPv6 route added: {} [{}]\", entry.destination, policy_str);\n } else {\n SPDLOG_WARN(\"Failed to add DNS IPv6 route: {}\", entry.destination);\n status = false;\n }\n } catch (const std::exception& e) {\n SPDLOG_WARN(\"Exception adding DNS IPv6 route {}: {}\", entry.destination,\n e.what());\n status = false;\n }\n }\n return status;\n}\n\nbool RouteManager::AddExcludeNetworks(\n const std::vector& networks) {\n std::vector> networks_to_add;\n {\n const std::unique_lock lock(mutex_);\n\n for (const auto& network : networks) {\n if (network.empty()) {\n continue;\n }\n\n const bool is_ipv6 = network.find(':') != std::string::npos; // NOLINT\n RouteEntry entry{\n .destination = network, .policy = RoutingPolicy::kExcludeFromVpn};\n\n if (is_ipv6) {\n if (!additional_routes_ipv6_.contains(entry)) {\n networks_to_add.emplace_back(network, true);\n additional_routes_ipv6_.insert(entry);\n }\n } else {\n if (!additional_routes_ipv4_.contains(entry)) {\n networks_to_add.emplace_back(network, false);\n additional_routes_ipv4_.insert(entry);\n }\n }\n }\n if (networks_to_add.empty()) {\n return true;\n }\n }\n\n const std::string interface_name = !detected_out_interface_name_.empty()\n ? detected_out_interface_name_\n : out_interface_name_;\n\n bool all_success = true;\n for (const auto& [network, is_ipv6] : networks_to_add) {\n try {\n bool success = false;\n\n if (is_ipv6) {\n success = AddIPv6RouteToSystem(\n network, gateway_ipv6_.ToString(), interface_name);\n } else {\n success = AddIPv4RouteToSystem(\n network, gateway_ipv4_.ToString(), interface_name);\n }\n\n if (success) {\n SPDLOG_INFO(\n \"Added {} exclude network: {}\", is_ipv6 ? \"IPv6\" : \"IPv4\", network);\n } else {\n SPDLOG_WARN(\"Failed to add route: {}\", network);\n all_success = false;\n }\n } catch (const std::exception& e) {\n SPDLOG_WARN(\"Failed to add exclude network '{}': {}\", network, e.what());\n\n const std::unique_lock lock(mutex_);\n RouteEntry entry{\n .destination = network, .policy = RoutingPolicy::kExcludeFromVpn};\n if (is_ipv6) {\n additional_routes_ipv6_.erase(entry);\n } else {\n additional_routes_ipv4_.erase(entry);\n }\n all_success = false;\n }\n }\n return all_success;\n}\n\nbool RouteManager::AddIncludeNetworks(\n const std::vector& networks) {\n std::vector> networks_to_add;\n {\n const std::unique_lock lock(mutex_);\n\n for (const auto& network : networks) {\n if (network.empty()) {\n continue;\n }\n\n const bool is_ipv6 = network.find(':') != std::string::npos; // NOLINT\n RouteEntry entry{\n .destination = network, .policy = RoutingPolicy::kIncludeInVpn};\n\n if (is_ipv6) {\n if (!additional_routes_ipv6_.contains(entry)) {\n networks_to_add.emplace_back(network, true);\n additional_routes_ipv6_.insert(entry);\n }\n } else {\n if (!additional_routes_ipv4_.contains(entry)) {\n networks_to_add.emplace_back(network, false);\n additional_routes_ipv4_.insert(entry);\n }\n }\n }\n if (networks_to_add.empty()) {\n return true;\n }\n }\n\n bool all_success = true;\n for (const auto& [network, is_ipv6] : networks_to_add) {\n try {\n bool success = false;\n\n if (is_ipv6) {\n success = AddIPv6RouteToSystem(network,\n tun_interface_address_ipv6_.ToString(), tun_interface_name_);\n } else {\n success = AddIPv4RouteToSystem(network,\n tun_interface_address_ipv4_.ToString(), tun_interface_name_);\n }\n\n if (success) {\n SPDLOG_INFO(\n \"Added {} include network: {}\", is_ipv6 ? \"IPv6\" : \"IPv4\", network);\n } else {\n SPDLOG_ERROR(\"Failed to add route: {}\", network);\n all_success = false;\n }\n } catch (const std::exception& e) {\n SPDLOG_WARN(\"Failed to add include network '{}': {}\", network, e.what());\n all_success = false;\n }\n }\n\n return all_success;\n}\n\n// NOLINT(bugprone-exception-escape)\nfptn::common::network::IPv4Address fptn::routing::ResolveDomain(\n const std::string& domain) {\n try {\n try {\n // error test\n boost::asio::ip::make_address(domain);\n return fptn::common::network::IPv4Address::Create(domain);\n } catch (const std::exception&) { // NOLINT(bugprone-empty-catch)\n // Not a valid IP address, proceed with domain name resolution\n }\n boost::asio::io_context io_context;\n boost::asio::ip::tcp::resolver resolver(io_context);\n boost::asio::ip::tcp::resolver::results_type endpoints =\n resolver.resolve(domain, \"\");\n for (const auto& endpoint : endpoints) {\n return fptn::common::network::IPv4Address(\n endpoint.endpoint().address().to_string());\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Error resolving domain: {}\", e.what());\n }\n return fptn::common::network::IPv4Address(domain);\n}\n\nfptn::common::network::IPv4Address fptn::routing::GetDefaultGatewayIPAddress() {\n try {\n#ifdef __linux__\n const std::string command = \"ip route get 8.8.8.8 | awk '{print $3; exit}'\";\n#elif __APPLE__\n const std::string command =\n \"route get 8.8.8.8 | grep gateway | awk '{print $2}' \";\n#elif _WIN32\n const std::string command =\n R\"(cmd.exe /c FOR /f \"tokens=3\" %i in ('route print ^| find \"0.0.0.0\"') do @echo %i)\";\n#else\n#error \"Unsupported system!\"\n#endif\n std::vector cmd_stdout;\n fptn::common::system::command::run(command, cmd_stdout);\n for (const auto& line : cmd_stdout) {\n std::string result = line;\n result.erase(\n // NOLINTNEXTLINE(modernize-use-ranges)\n std::remove_if(result.begin(), result.end(),\n [](char c) {\n /* Allow: a-z, A-Z, 0-9, dot, dash */\n return !std::isalnum(c) && c != '.' && c != '-' && c != '_';\n }),\n result.end());\n if (!result.empty()) {\n return ResolveDomain(result);\n }\n }\n } catch (const std::exception& ex) {\n SPDLOG_ERROR(\"Error: Failed to retrieve the default gateway IP address. {}\",\n ex.what());\n }\n return {};\n}\n\nfptn::common::network::IPv6Address\nfptn::routing::GetDefaultGatewayIPv6Address() {\n try {\n#ifdef __linux__\n const std::string command =\n \"ip -6 route | grep default | head -1 | awk '{print $3}'\";\n#elif __APPLE__\n const std::string command =\n \"route get -inet6 default | grep gateway | awk '{print $2}'\";\n#elif _WIN32\n const std::string command =\n R\"(netsh interface ipv6 show routes | find \"::/0\" | head -1 | awk \"{print $3}\")\";\n#else\n return {};\n#endif\n std::vector cmd_stdout;\n fptn::common::system::command::run(command, cmd_stdout);\n\n for (const auto& line : cmd_stdout) {\n std::string result = line;\n std::erase_if(result, [](const char c) {\n return !std::isalnum(c) && c != ':' && c != '.' && c != '-';\n });\n if (!result.empty()) {\n return fptn::common::network::IPv6Address::Create(result);\n }\n }\n } catch (const std::exception& ex) {\n SPDLOG_ERROR(\"Error getting IPv6 gateway: {}\", ex.what());\n }\n return {};\n}\n\nstd::string fptn::routing::GetDefaultNetworkInterfaceName() {\n std::string result;\n try {\n#ifdef __linux__\n const std::string command =\n \"ip route get 8.8.8.8 | awk '{print $5; exit}' \";\n#elif __APPLE__\n const std::string command =\n \"route get 8.8.8.8 | grep interface | awk '{print $2}' \";\n#elif _WIN32\n const std::string command =\n R\"(powershell -Command \"(Get-NetRoute -DestinationPrefix '0.0.0.0/0' | Where-Object {$_.NextHop -ne '0.0.0.0'} | Select-Object -First 1).InterfaceAlias\")\";\n#endif\n std::vector cmd_stdout;\n fptn::common::system::command::run(command, cmd_stdout);\n if (cmd_stdout.empty()) {\n SPDLOG_WARN(\"Warning: Default gateway IP address not found.\");\n return {};\n }\n for (const auto& line : cmd_stdout) {\n result = line;\n result.erase(result.find_last_not_of(\" \\n\\r\\t\") + 1);\n result.erase(0, result.find_first_not_of(\" \\n\\r\\t\"));\n }\n } catch (const std::exception& ex) {\n SPDLOG_ERROR(\"Error: Failed to retrieve the default gateway IP address. {}\",\n ex.what());\n }\n return result;\n}\n" }, { "path": "src/fptn-client/routing/route_manager.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \"common/network/ip_address.h\"\n\nnamespace fptn::routing {\nstd::string GetDefaultNetworkInterfaceName();\nfptn::common::network::IPv4Address GetDefaultGatewayIPAddress();\nfptn::common::network::IPv4Address ResolveDomain(const std::string& domain);\n\nfptn::common::network::IPv6Address GetDefaultGatewayIPv6Address();\n\nenum class RoutingPolicy {\n kExcludeFromVpn, // Traffic bypasses VPN\n kIncludeInVpn // Traffic goes through VPN\n};\n\nclass RouteManager final {\n protected:\n struct RouteEntry {\n std::string destination;\n RoutingPolicy policy;\n\n bool operator==(const RouteEntry& other) const {\n return destination == other.destination && policy == other.policy;\n }\n\n struct Hash {\n std::size_t operator()(const RouteEntry& entry) const {\n return std::hash{}(entry.destination) ^\n (std::hash{}(static_cast(entry.policy)) << 1);\n }\n };\n };\n\n public:\n RouteManager(std::string out_interface_name,\n std::string tun_interface_name,\n fptn::common::network::IPv4Address vpn_server_ip,\n fptn::common::network::IPv4Address dns_server_ipv4,\n fptn::common::network::IPv6Address dns_server_ipv6,\n fptn::common::network::IPv4Address gateway_ipv4,\n fptn::common::network::IPv6Address gateway_ipv6,\n fptn::common::network::IPv4Address tun_interface_address_ipv4,\n fptn::common::network::IPv6Address tun_interface_address_ipv6\n#if _WIN32\n ,\n bool enable_advanced_dns_management_\n#endif\n ); // NOLINT\n ~RouteManager();\n\n void UpdateTunInterfaceName(const std::string& name) {\n tun_interface_name_ = name;\n }\n\n bool Apply();\n bool Clean();\n\n bool AddDnsRoutesIPv4(\n const std::vector& ips,\n RoutingPolicy policy);\n\n bool AddDnsRoutesIPv6(\n const std::vector& ips,\n RoutingPolicy policy);\n\n bool AddExcludeNetworks(const std::vector& networks);\n bool AddIncludeNetworks(const std::vector& networks);\n\n private:\n mutable std::mutex mutex_;\n std::atomic running_;\n\n const std::string out_interface_name_;\n std::string tun_interface_name_;\n const fptn::common::network::IPv4Address vpn_server_ip_;\n const fptn::common::network::IPv4Address dns_server_ipv4_;\n const fptn::common::network::IPv6Address dns_server_ipv6_;\n const fptn::common::network::IPv4Address gateway_ipv4_;\n const fptn::common::network::IPv6Address gateway_ipv6_;\n const fptn::common::network::IPv4Address tun_interface_address_ipv4_;\n const fptn::common::network::IPv6Address tun_interface_address_ipv6_;\n\n#if _WIN32\n const bool enable_advanced_dns_management_;\n#endif\n\n std::unordered_set dns_routes_ipv4_;\n std::unordered_set dns_routes_ipv6_;\n\n std::unordered_set additional_routes_ipv4_;\n std::unordered_set additional_routes_ipv6_;\n\n private:\n std::string detected_out_interface_name_;\n fptn::common::network::IPv4Address detected_gateway_ipv4_;\n\n#ifdef __linux__\n std::vector original_dns_servers_;\n#endif\n};\n\nusing RouteManagerSPtr = std::shared_ptr;\n} // namespace fptn::routing\n" }, { "path": "src/fptn-client/utils/brotli/brotli.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n\n#include // NOLINT(build/include_order)\n\nnamespace fptn::utils::brotli {\ninline std::string Decompress(const std::string& compressed_data) {\n const std::size_t encoded_size = compressed_data.size();\n std::size_t decoded_size = encoded_size * 30;\n\n while (true) {\n std::vector decoded_buffer(decoded_size);\n std::size_t available_out = decoded_size;\n\n const BROTLI_BOOL result = BrotliDecoderDecompress(encoded_size,\n reinterpret_cast(compressed_data.data()),\n &available_out, decoded_buffer.data());\n if (result == BROTLI_TRUE) {\n return std::string(\n reinterpret_cast(decoded_buffer.data()), available_out);\n }\n decoded_size *= 2;\n }\n}\n} // namespace fptn::utils::brotli\n" }, { "path": "src/fptn-client/utils/macos/admin.h", "content": "#pragma once\n\n/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#ifdef __APPLE__\n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\nnamespace fptn::utils::macos {\n\n#pragma clang diagnostic push\n#pragma clang diagnostic ignored \"-Wdeprecated-declarations\"\n\nbool RestartApplicationWithAdminRights() {\n // Already running as root? No need to restart.\n if (geteuid() == 0) {\n return true;\n }\n\n // Initialize AuthorizationRef\n AuthorizationRef auth_ref = nullptr;\n OSStatus status = AuthorizationCreate(nullptr, kAuthorizationEmptyEnvironment,\n kAuthorizationFlagDefaults, &auth_ref);\n\n if (status != errAuthorizationSuccess) {\n std::cerr << \"Failed to create authorization reference.\\n\";\n return false;\n }\n\n // Request admin rights\n const char* kAdminRights[] = {kAuthorizationRightExecute,\n \"system.preferences\", \"system.preferences.network\",\n \"system.services.systemconfiguration.network\"};\n\n AuthorizationItem rights[4] = {};\n for (size_t i = 0; i < 4; ++i) {\n rights[i] = {kAdminRights[i], 0, nullptr, 0};\n }\n\n AuthorizationRights rights_set = {4, rights};\n AuthorizationFlags flags = kAuthorizationFlagDefaults |\n kAuthorizationFlagInteractionAllowed |\n kAuthorizationFlagExtendRights;\n\n status =\n AuthorizationCopyRights(auth_ref, &rights_set, nullptr, flags, nullptr);\n if (status != errAuthorizationSuccess) {\n AuthorizationFree(auth_ref, kAuthorizationFlagDefaults);\n std::cerr << \"Failed to obtain admin rights.\\n\";\n return false;\n }\n\n // Get current executable path\n char executablePath[PATH_MAX] = {};\n uint32_t pathSize = sizeof(executablePath);\n if (_NSGetExecutablePath(executablePath, &pathSize) != 0) {\n AuthorizationFree(auth_ref, kAuthorizationFlagDefaults);\n std::cerr << \"Failed to get executable path.\\n\";\n return false;\n }\n\n // Restart with privileges\n char* args[] = {const_cast(executablePath), nullptr};\n status = AuthorizationExecuteWithPrivileges(\n auth_ref, executablePath, kAuthorizationFlagDefaults, args, nullptr);\n\n AuthorizationFree(auth_ref, kAuthorizationFlagDefaults);\n\n if (status != errAuthorizationSuccess) {\n std::cerr << \"Failed to restart with admin rights.\\n\";\n return false;\n }\n // Exit the current instance (only the elevated one will continue)\n exit(EXIT_SUCCESS);\n return true;\n}\n#pragma clang diagnostic pop\n\n} // namespace fptn::utils::macos\n\n#endif\n" }, { "path": "src/fptn-client/utils/signal/main_loop.h", "content": "#pragma once\n\n/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n#include \n\n#include \"vpn/vpn_client.h\"\n\nnamespace fptn::utils {\n\nvoid WaitForSignal(fptn::vpn::VpnClient& vpn_client) {\n boost::asio::io_context io_context;\n boost::asio::signal_set signals(io_context, SIGINT, SIGTERM);\n\n boost::asio::steady_timer check_timer(io_context);\n\n std::function check_connection = [&]() {\n if (!vpn_client.IsStarted()) {\n SPDLOG_ERROR(\"VPN connection lost! Exiting...\");\n io_context.stop();\n return;\n }\n\n check_timer.expires_after(std::chrono::seconds(1));\n check_timer.async_wait([&](const boost::system::error_code& ec) {\n if (!ec) {\n check_connection();\n }\n });\n };\n\n signals.async_wait([&](auto, auto) { io_context.stop(); });\n check_timer.expires_after(std::chrono::seconds(1));\n check_timer.async_wait([&](const boost::system::error_code& ec) {\n if (!ec) {\n check_connection();\n }\n });\n io_context.run();\n}\n} // namespace fptn::utils\n" }, { "path": "src/fptn-client/utils/speed_estimator/server_info.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n\nnamespace fptn::utils::speed_estimator {\n\nstruct ServerInfo {\n std::string name;\n std::string host;\n int port;\n bool is_using;\n std::string md5_fingerprint;\n\n std::string username;\n std::string password;\n std::string service_name;\n\n ServerInfo() : port(0), is_using(false) {}\n\n ServerInfo(std::string _name,\n std::string _host,\n int _port,\n std::string _md5_fingerprint)\n : name(std::move(_name)),\n host(std::move(_host)),\n port(_port),\n is_using(false),\n md5_fingerprint(std::move(_md5_fingerprint)) {}\n};\n\n} // namespace fptn::utils::speed_estimator\n" }, { "path": "src/fptn-client/utils/speed_estimator/speed_estimator.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"fptn-client/utils/speed_estimator/speed_estimator.h\"\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"fptn-protocol-lib/https/api_client/api_client.h\"\n\nusing fptn::protocol::https::ApiClient;\nusing fptn::utils::speed_estimator::ServerInfo;\n\nconstexpr std::uint64_t kMaxTimeout = UINT64_MAX;\n\nnamespace fptn::utils::speed_estimator {\n\nstd::uint64_t GetDownloadTimeMs(const ServerInfo& server,\n const std::string& sni,\n int timeout,\n const std::string& md5_fingerprint,\n fptn::protocol::https::CensorshipStrategy censorship_strategy) {\n try {\n auto const start = std::chrono::high_resolution_clock::now();\n ApiClient cli(\n server.host, server.port, sni, md5_fingerprint, censorship_strategy);\n auto const resp = cli.Get(\"/api/v1/test/file.bin\", timeout);\n if (resp.code == 200) {\n auto const end = std::chrono::high_resolution_clock::now();\n const std::uint64_t ms =\n std::chrono::duration_cast(end - start)\n .count();\n return ms;\n }\n } catch (const std::exception& ex) {\n SPDLOG_WARN(\"Exception in GetDownloadTimeMs: {}\", ex.what());\n } catch (...) {\n SPDLOG_WARN(\"Unknown exception in GetDownloadTimeMs\");\n }\n return kMaxTimeout;\n}\n\nServerInfo FindFastestServer(const std::string& sni,\n const std::vector& servers,\n fptn::protocol::https::CensorshipStrategy censorship_strategy,\n int timeout_sec) {\n // randomly select half of the servers\n std::vector shuffled_servers = servers;\n std::random_device rd;\n std::mt19937 generator(rd());\n std::ranges::shuffle(shuffled_servers, generator);\n const std::size_t half_size =\n std::max(1, shuffled_servers.size() / 2);\n std::vector selected_servers(\n shuffled_servers.begin(), shuffled_servers.begin() + half_size);\n\n // Create promises and futures for all requests\n std::vector> promises(selected_servers.size());\n std::vector> futures;\n futures.reserve(selected_servers.size());\n\n for (auto& promise : promises) {\n // cppcheck-suppress useStlAlgorithm\n futures.push_back(promise.get_future());\n }\n\n // Launch all requests\n for (std::size_t i = 0; i < selected_servers.size(); ++i) {\n // NOLINTNEXTLINE(bugprone-exception-escape)\n std::thread([&promise = promises[i], server = selected_servers[i], sni,\n timeout_sec, censorship_strategy]() {\n try {\n const auto time_ms = GetDownloadTimeMs(server, sni, timeout_sec,\n server.md5_fingerprint, censorship_strategy);\n promise.set_value(time_ms);\n } catch (...) { // NOLINT\n // Set max timeout in case of exception\n promise.set_value(kMaxTimeout);\n }\n }).detach();\n }\n\n // Wait for all futures with timeout\n std::vector times;\n times.reserve(futures.size());\n\n const auto deadline =\n std::chrono::steady_clock::now() + std::chrono::seconds(timeout_sec + 2);\n\n for (auto& future : futures) {\n if (future.wait_until(deadline) == std::future_status::ready) {\n times.push_back(future.get());\n } else {\n // Timeout for this future\n times.push_back(kMaxTimeout);\n }\n }\n\n // Find fastest server\n const auto min_it = std::ranges::min_element(times);\n if (min_it == times.end() || *min_it == kMaxTimeout) {\n throw std::runtime_error(\"All servers unavailable!\");\n }\n\n return selected_servers[std::distance(times.begin(), min_it)];\n}\n\n} // namespace fptn::utils::speed_estimator\n" }, { "path": "src/fptn-client/utils/speed_estimator/speed_estimator.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include \"fptn-client/utils/speed_estimator/server_info.h\"\n#include \"fptn-protocol-lib/https/censorship_strategy.h\"\n#include \"fptn-protocol-lib/https/obfuscator/methods/obfuscator_interface.h\"\n\nnamespace fptn::utils::speed_estimator {\n\nstd::uint64_t GetDownloadTimeMs(const ServerInfo& server,\n const std::string& sni,\n int timeout,\n const std::string& md5_fingerprint,\n fptn::protocol::https::CensorshipStrategy censorship_strategy);\n\nServerInfo FindFastestServer(const std::string& sni,\n const std::vector& servers,\n fptn::protocol::https::CensorshipStrategy censorship_strategy,\n int timeout_sec = 15);\n\n}; // namespace fptn::utils::speed_estimator\n" }, { "path": "src/fptn-client/utils/utils.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"common/utils/utils.h\"\n\nnamespace fptn::utils {\n\ninline std::string DomainToRegex(const std::string& pattern) {\n const std::string domain_prefix = \"domain:\";\n const std::string trimmed = fptn::common::utils::Trim(pattern);\n\n if (!trimmed.starts_with(domain_prefix)) {\n return {};\n }\n\n const std::string domain = trimmed.substr(domain_prefix.length());\n if (domain.empty()) {\n return {};\n }\n\n std::string escaped;\n escaped.reserve(domain.length() * 2);\n for (const char c : fptn::common::utils::ToLowerCase(domain)) {\n if (c == '.') {\n escaped += \"\\\\.\";\n } else {\n escaped += c;\n }\n }\n // return R\"(\\.)\" + escaped + R\"($)\";\n // return R\"((?:^|\\.))\" + escaped + R\"((?:\\.|$)?)\";\n return R\"((?:^|\\.))\" + escaped + R\"($)\";\n}\n} // namespace fptn::utils\n" }, { "path": "src/fptn-client/utils/windows/vpn_conflict.h", "content": "#pragma once\n\n/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n#include \n\n#include \"common/system/command.h\"\n\nnamespace fptn::utils::windows {\n\ninline bool HasVpnConflicts(std::string& found_adapters) {\n found_adapters = \"\";\n\n // Command to list network interfaces that might indicate VPN conflicts\n constexpr char command[] =\n \"powershell.exe -Command \\\"Get-NetAdapter | Where-Object { \"\n \"$_.InterfaceDescription -match 'VPN|TAP|WireGuard|OpenVPN|Tunnel' -and \"\n \"$_.Status -eq 'Up' } | Select-Object -ExpandProperty Name\\\"\";\n\n\n std::vector adapter_names;\n fptn::common::system::command::run(command, adapter_names);\n\n // Check if any VPN-related interfaces were found\n for (const auto& name : adapter_names) {\n if (!name.empty()) {\n if (found_adapters.empty()) {\n found_adapters = name;\n } else {\n found_adapters += \", \" + name;\n }\n }\n }\n return !found_adapters.empty();\n}\n\n} // namespace fptn::utils::windows\n" }, { "path": "src/fptn-client/vpn/http/client.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"vpn/http/client.h\"\n\n#include \n#include \n#include \n\n#include \n#include // NOLINT(build/include_order)\n#include \n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_address.h\"\n\n#include \"fptn-protocol-lib/https/api_client/api_client.h\"\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls/tls_obfuscator.h\"\n#include \"routing/route_manager.h\"\n\nusing fptn::common::network::IPv4Address;\nusing fptn::common::network::IPv6Address;\nusing fptn::protocol::https::ApiClient;\nusing fptn::vpn::http::Client;\n\nClient::Client(IPv4Address server_ip,\n int server_port,\n IPv4Address tun_interface_address_ipv4,\n IPv6Address tun_interface_address_ipv6,\n std::string sni,\n std::string md5_fingerprint,\n fptn::protocol::https::CensorshipStrategy censorship_strategy,\n NewIPPacketCallback new_ip_pkt_callback)\n : running_(false),\n server_ip_(std::move(server_ip)),\n server_port_(server_port),\n tun_interface_address_ipv4_(std::move(tun_interface_address_ipv4)),\n tun_interface_address_ipv6_(std::move(tun_interface_address_ipv6)),\n sni_(std::move(sni)),\n md5_fingerprint_(std::move(md5_fingerprint)),\n censorship_strategy_(censorship_strategy),\n new_ip_pkt_callback_(std::move(new_ip_pkt_callback)),\n reconnection_attempts_(kMaxReconnectionAttempts_) {}\n\nClient::~Client() { Stop(); }\n\nbool Client::Login(\n const std::string& username, const std::string& password, int timeout_sec) {\n const std::string request = fmt::format(\n R\"({{ \"username\": \"{}\", \"password\": \"{}\" }})\", username, password);\n\n const std::string ip = server_ip_.ToString();\n ApiClient cli(ip, server_port_, sni_, md5_fingerprint_, censorship_strategy_);\n\n const auto resp =\n cli.Post(\"/api/v1/login\", request, \"application/json\", timeout_sec);\n if (resp.code == 200) {\n try {\n const auto msg = resp.Json();\n if (!msg.contains(\"access_token\")) {\n SPDLOG_ERROR(\n \"Error: Access token not found in the response. Check your \"\n \"conection\");\n } else {\n access_token_ = msg[\"access_token\"];\n SPDLOG_INFO(\"Login successful\");\n return true;\n }\n } catch (const nlohmann::json::parse_error& e) {\n latest_error_ = e.what();\n SPDLOG_ERROR(\"Error parsing JSON response: {} \", e.what());\n } catch (const std::exception& ex) {\n latest_error_ = ex.what();\n SPDLOG_ERROR(\"Exception: {}\", ex.what());\n }\n } else {\n latest_error_ = resp.errmsg;\n SPDLOG_ERROR(\n \"Error: Request failed code: {} msg: {}\", resp.code, resp.errmsg);\n }\n return false;\n}\n\nstd::pair Client::GetDns() {\n SPDLOG_INFO(\"Obtained DNS server address. Connecting to {}:{}\",\n server_ip_.ToString(), server_port_);\n\n const std::string ip = server_ip_.ToString();\n ApiClient cli(ip, server_port_, sni_, md5_fingerprint_, censorship_strategy_);\n\n const auto resp = cli.Get(\"/api/v1/dns\");\n if (resp.code == 200) {\n try {\n const auto msg = resp.Json();\n if (!msg.contains(\"dns\")) {\n SPDLOG_ERROR(\n \"Error: dns not found in the response. Check your connection\");\n } else {\n const std::string dns_ipv4 = msg[\"dns\"];\n const std::string dns_ipv6 =\n (msg.contains(\"dns_ipv6\") ? msg[\"dns_ipv6\"]\n : FPTN_SERVER_DEFAULT_ADDRESS_IP6);\n return {IPv4Address(dns_ipv4), IPv6Address(dns_ipv6)};\n }\n } catch (const nlohmann::json::parse_error& e) {\n latest_error_ = e.what();\n SPDLOG_ERROR(\"Error parsing JSON response: {}\", e.what());\n } catch (const std::exception& ex) {\n latest_error_ = ex.what();\n SPDLOG_ERROR(\"Exception: {}\", ex.what());\n }\n } else {\n latest_error_ = resp.errmsg;\n SPDLOG_ERROR(\n \"Error: Request failed code: {} msg: {}\", resp.code, resp.errmsg);\n }\n return {IPv4Address(), IPv6Address()};\n}\n\nvoid Client::SetRecvIPPacketCallback(\n const NewIPPacketCallback& callback) noexcept {\n new_ip_pkt_callback_ = callback;\n}\n\nbool Client::Send(fptn::common::network::IPPacketPtr packet) const {\n try {\n const std::unique_lock lock(mutex_); // mutex\n\n if (ws_ && running_) {\n ws_->Send(std::move(packet));\n return true;\n }\n } catch (const std::runtime_error& err) {\n SPDLOG_ERROR(\"Send error: {}\", err.what());\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Exception occurred: {}\", e.what());\n }\n return false;\n}\n\nvoid Client::Run() {\n // Time window for counting attempts (1 minute)\n constexpr auto kReconnectionWindow = std::chrono::seconds(120);\n // Delay between reconnection attempts\n constexpr auto kReconnectionDelay = std::chrono::milliseconds(300);\n\n // Current count of reconnection attempts\n reconnection_attempts_ = kMaxReconnectionAttempts_;\n auto window_start_time = std::chrono::steady_clock::now();\n\n while (running_ && reconnection_attempts_ > 0) {\n {\n const std::unique_lock lock(mutex_); // mutex\n\n // cppcheck-suppress identicalInnerCondition\n if (running_) { // Double-check after acquiring lock\n ws_ = std::make_shared(\n server_ip_, server_port_, tun_interface_address_ipv4_,\n tun_interface_address_ipv6_, new_ip_pkt_callback_, sni_,\n access_token_, md5_fingerprint_, censorship_strategy_, nullptr, 32);\n }\n }\n\n if (running_ && ws_) {\n ws_->Run(); // Start the WebSocket client\n }\n\n if (!running_) {\n break;\n }\n\n // clean\n if (ws_) {\n const std::unique_lock lock(mutex_); // mutex\n\n // cppcheck-suppress knownConditionTrueFalse\n if (ws_ && running_) {\n ws_->Stop();\n ws_.reset();\n }\n }\n\n // Calculate time since last window start\n const auto current_time = std::chrono::steady_clock::now();\n const auto elapsed = current_time - window_start_time;\n\n // Reconnection attempt counting logic\n if (elapsed >= kReconnectionWindow) {\n // Reset counter if we're past the time window\n SPDLOG_INFO(\"Reconnection window reset. New attempt window started\");\n reconnection_attempts_ = kMaxReconnectionAttempts_;\n window_start_time = current_time;\n }\n if (reconnection_attempts_ > 0) {\n --reconnection_attempts_;\n }\n // Log connection failure and wait before retrying\n SPDLOG_ERROR(\n \"Connection closed (attempt {}/{} in current window). Reconnecting in \"\n \"{}ms...\",\n kMaxReconnectionAttempts_ - reconnection_attempts_,\n kMaxReconnectionAttempts_, kReconnectionDelay.count());\n\n std::this_thread::sleep_for(kReconnectionDelay);\n }\n\n if (running_ && !reconnection_attempts_) {\n SPDLOG_ERROR(\"Connection failure: Could not establish connection\");\n }\n}\n\nbool Client::Start() {\n running_ = true;\n th_ = std::thread(&Client::Run, this);\n return th_.joinable();\n}\n\nbool Client::Stop() {\n if (!running_) {\n return false;\n }\n\n SPDLOG_INFO(\"Stopping client\");\n {\n const std::unique_lock lock(mutex_); // mutex\n\n if (!running_) { // Double-check after acquiring lock\n return false;\n }\n running_ = false;\n }\n\n if (ws_) {\n ws_->Stop();\n }\n\n if (th_.joinable()) {\n try {\n th_.join();\n } catch (...) {\n SPDLOG_WARN(\"Unexpected exception during thread join\");\n }\n }\n\n ws_.reset();\n return true;\n}\n\nbool Client::IsStarted() const {\n return running_ && reconnection_attempts_ > 0;\n}\n\nconst std::string& Client::LatestError() const { return latest_error_; }\n" }, { "path": "src/fptn-client/vpn/http/client.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \"common/network/ip_address.h\"\n#include \"common/network/ip_packet.h\"\n\n#include \"fptn-protocol-lib/https/censorship_strategy.h\"\n#include \"fptn-protocol-lib/https/websocket_client/websocket_client.h\"\n\nnamespace fptn::vpn::http {\n\nusing IPv4Address = fptn::common::network::IPv4Address;\nusing IPv6Address = fptn::common::network::IPv6Address;\n\nclass Client final {\n public:\n using NewIPPacketCallback =\n std::function;\n\n public:\n Client(IPv4Address server_ip,\n int server_port,\n IPv4Address tun_interface_address_ipv4,\n IPv6Address tun_interface_address_ipv6,\n std::string sni,\n std::string md5_fingerprint,\n fptn::protocol::https::CensorshipStrategy censorship_strategy,\n NewIPPacketCallback new_ip_pkt_callback = nullptr);\n ~Client();\n bool Login(const std::string& username,\n const std::string& password,\n int timeout_sec = 15);\n std::pair GetDns();\n bool Start();\n bool Stop();\n bool Send(fptn::common::network::IPPacketPtr packet) const;\n void SetRecvIPPacketCallback(const NewIPPacketCallback& callback) noexcept;\n bool IsStarted() const;\n\n const std::string& LatestError() const;\n\n protected:\n void Run();\n\n private:\n const int kMaxReconnectionAttempts_ = 15;\n\n std::thread th_;\n mutable std::mutex mutex_;\n std::atomic running_;\n\n const IPv4Address server_ip_;\n const int server_port_;\n\n const IPv4Address tun_interface_address_ipv4_;\n const IPv6Address tun_interface_address_ipv6_;\n const std::string sni_;\n const std::string md5_fingerprint_;\n\n fptn::protocol::https::CensorshipStrategy censorship_strategy_;\n\n NewIPPacketCallback new_ip_pkt_callback_;\n\n std::string access_token_;\n fptn::protocol::https::WebsocketClientSPtr ws_;\n\n std::string latest_error_;\n\n std::atomic reconnection_attempts_;\n};\n\nusing ClientPtr = std::unique_ptr;\n} // namespace fptn::vpn::http\n" }, { "path": "src/fptn-client/vpn/vpn_client.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"vpn/vpn_client.h\"\n\n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\nnamespace fptn::vpn {\n\nVpnClient::VpnClient(fptn::vpn::http::ClientPtr http_client,\n fptn::common::network::TunInterfacePtr virtual_net_interface,\n fptn::common::network::IPv4Address dns_server_ipv4,\n fptn::common::network::IPv6Address dns_server_ipv6,\n fptn::plugin::PluginList plugins,\n std::size_t thread_pool_size)\n : running_(false),\n http_client_(std::move(http_client)),\n virtual_net_interface_(std::move(virtual_net_interface)),\n dns_server_ipv4_(std::move(dns_server_ipv4)),\n dns_server_ipv6_(std::move(dns_server_ipv6)),\n plugins_(std::move(plugins)),\n thread_pool_size_(thread_pool_size) {} // NOLINT\n\nVpnClient::~VpnClient() { Stop(); }\n\nbool VpnClient::IsStarted() {\n if (!running_) {\n return false;\n }\n\n const std::unique_lock lock(mutex_); // mutex\n\n return running_ && http_client_ && http_client_->IsStarted();\n}\n\nbool VpnClient::Start() {\n if (running_) {\n return false;\n }\n\n {\n const std::unique_lock lock(mutex_); // mutex\n\n // cppcheck-suppress identicalConditionAfterEarlyExit\n if (running_) {\n return false;\n }\n }\n\n // NOLINTNEXTLINE(modernize-avoid-bind)\n http_client_->SetRecvIPPacketCallback(std::bind(\n &VpnClient::HandlePacketFromWebSocket, this, std::placeholders::_1));\n\n virtual_net_interface_->SetRecvIPPacketCallback(\n // NOLINTNEXTLINE(modernize-avoid-bind)\n std::bind(&VpnClient::HandlePacketFromVirtualNetworkInterface, this,\n std::placeholders::_1));\n\n http_client_->Start();\n virtual_net_interface_->Start();\n running_ = true;\n\n // Start workers\n worker_threads_.reserve(thread_pool_size_);\n for (std::size_t i = 0; i < thread_pool_size_; ++i) {\n worker_threads_.emplace_back(&VpnClient::ProcessWebSocketPackets, this);\n }\n\n return true;\n}\n\nbool VpnClient::Stop() {\n if (!running_) {\n return false;\n }\n {\n const std::unique_lock lock(mutex_); // mutex\n\n // cppcheck-suppress identicalConditionAfterEarlyExit\n if (!running_) {\n return false;\n }\n\n running_ = false;\n }\n\n ws_queue_cv_.notify_all();\n\n SPDLOG_INFO(\"Stopping VPN Websocket-workers...\");\n\n for (auto& thread : worker_threads_) {\n if (thread.joinable()) {\n thread.join();\n }\n }\n worker_threads_.clear();\n\n SPDLOG_INFO(\"Stopping VPN client...\");\n\n if (virtual_net_interface_) {\n SPDLOG_INFO(\"Stopping virtual network interface\");\n virtual_net_interface_->Stop();\n virtual_net_interface_.reset();\n SPDLOG_DEBUG(\"Virtual network interface stopped successfully\");\n }\n\n if (http_client_) {\n SPDLOG_INFO(\"Stopping HTTP client\");\n http_client_->Stop();\n http_client_.reset();\n SPDLOG_DEBUG(\"HTTP client stopped successfully\");\n }\n return true;\n}\n\nstd::size_t VpnClient::GetSendRate() {\n if (!running_) {\n return 0;\n }\n\n const std::unique_lock lock(mutex_); // mutex\n\n if (running_ && virtual_net_interface_) {\n return virtual_net_interface_->GetSendRate();\n }\n return 0;\n}\n\nstd::size_t VpnClient::GetReceiveRate() {\n if (!running_) {\n return 0;\n }\n\n const std::unique_lock lock(mutex_); // mutex\n\n if (running_ && virtual_net_interface_) {\n return virtual_net_interface_->GetReceiveRate();\n }\n return 0;\n}\n\nstd::string VpnClient::GetInterfaceName() const {\n if (virtual_net_interface_) {\n return virtual_net_interface_->Name();\n }\n return {};\n}\n\nvoid VpnClient::HandlePacketFromVirtualNetworkInterface(\n fptn::common::network::IPPacketPtr packet) {\n if (!running_) {\n return;\n }\n\n const std::unique_lock lock(mutex_); // mutex\n\n if (running_ && http_client_) {\n http_client_->Send(std::move(packet));\n }\n}\n\nvoid VpnClient::HandlePacketFromWebSocket(\n fptn::common::network::IPPacketPtr packet) {\n if (!running_ || !packet) {\n return;\n }\n\n constexpr std::size_t kMaxQueueSize = 128;\n\n std::unique_lock lock(mutex_); // mutex\n\n if (ws_packet_queue_.size() >= kMaxQueueSize) {\n SPDLOG_WARN(\"WebSocket packet queue is full, dropping packet\");\n return;\n }\n\n ws_packet_queue_.push(std::move(packet));\n lock.unlock();\n ws_queue_cv_.notify_one();\n}\n\nvoid VpnClient::ProcessWebSocketPackets() {\n fptn::common::network::IPPacketPtr packet;\n while (running_) {\n {\n std::unique_lock lock(mutex_); // mutex\n\n ws_queue_cv_.wait(\n lock, [this]() { return !ws_packet_queue_.empty() || !running_; });\n if (!running_ && ws_packet_queue_.empty()) {\n break;\n }\n if (!ws_packet_queue_.empty()) {\n packet = std::move(ws_packet_queue_.front());\n ws_packet_queue_.pop();\n }\n }\n\n if (!packet) {\n continue;\n }\n\n // Обрабатываем пакет через плагины\n if (running_ && !plugins_.empty()) {\n for (const auto& plugin : plugins_) {\n if (packet) {\n auto [processed_packet, triggered] =\n plugin->HandlePacket(std::move(packet));\n packet = std::move(processed_packet);\n if (triggered) {\n break;\n }\n }\n }\n }\n\n if (running_ && packet) {\n const std::unique_lock lock(mutex_); // mutex\n // cppcheck-suppress knownConditionTrueFalse\n if (running_ && virtual_net_interface_) {\n virtual_net_interface_->Send(std::move(packet));\n }\n }\n }\n}\n} // namespace fptn::vpn\n" }, { "path": "src/fptn-client/vpn/vpn_client.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include \"common/network/ip_address.h\"\n#include \"common/network/ip_packet.h\"\n#include \"common/network/net_interface.h\"\n\n#include \"http/client.h\"\n#include \"plugins/split/tunneling.h\"\n\nnamespace fptn::vpn {\nclass VpnClient final {\n public:\n explicit VpnClient(fptn::vpn::http::ClientPtr http_client,\n fptn::common::network::TunInterfacePtr virtual_net_interface,\n fptn::common::network::IPv4Address dns_server_ipv4,\n fptn::common::network::IPv6Address dns_server_ipv6,\n fptn::plugin::PluginList plugins,\n std::size_t thread_pool_size = 4);\n ~VpnClient();\n bool Start();\n bool Stop();\n std::size_t GetSendRate();\n std::size_t GetReceiveRate();\n bool IsStarted();\n [[nodiscard]] std::string GetInterfaceName() const;\n\n protected:\n void HandlePacketFromVirtualNetworkInterface(\n fptn::common::network::IPPacketPtr packet);\n void HandlePacketFromWebSocket(fptn::common::network::IPPacketPtr packet);\n\n void ProcessWebSocketPackets();\n\n private:\n mutable std::mutex mutex_;\n std::atomic running_;\n\n fptn::vpn::http::ClientPtr http_client_;\n fptn::common::network::TunInterfacePtr virtual_net_interface_;\n const fptn::common::network::IPv4Address dns_server_ipv4_;\n const fptn::common::network::IPv6Address dns_server_ipv6_;\n\n const fptn::plugin::PluginList plugins_;\n\n const std::size_t thread_pool_size_;\n std::vector worker_threads_;\n std::condition_variable ws_queue_cv_;\n std::queue ws_packet_queue_;\n};\n\nusing VpnClientPtr = std::unique_ptr;\n} // namespace fptn::vpn\n" }, { "path": "src/fptn-passwd/CMakeLists.txt", "content": "project(fptn-passwd)\n\ninclude_directories(${CMAKE_CURRENT_SOURCE_DIR})\n\nfind_package(Boost REQUIRED)\nfind_package(OpenSSL REQUIRED)\nfind_package(argparse REQUIRED)\n\nadd_executable(\"${PROJECT_NAME}\" fptn-passwd.cpp)\n\ntarget_link_libraries(\"${PROJECT_NAME}\" PRIVATE OpenSSL::SSL OpenSSL::Crypto argparse::argparse)\n" }, { "path": "src/fptn-passwd/fptn-passwd.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \n\n#include \"common/user/common_user_manager.h\"\n\nnamespace {\nstd::string GetPassword(const std::string& prompt) {\n std::string password;\n struct termios oldt = {};\n\n std::cout << prompt;\n tcgetattr(STDIN_FILENO, &oldt);\n struct termios newt = oldt;\n newt.c_lflag &= ~(ECHO); // Turn off echo\n tcsetattr(STDIN_FILENO, TCSANOW, &newt);\n std::getline(std::cin, password);\n tcsetattr(STDIN_FILENO, TCSANOW, &oldt);\n std::cout << std::endl;\n\n return password;\n}\n} // namespace\n\nint main(int argc, char* argv[]) {\n if (geteuid() != 0) {\n std::cerr << \"You must be root to run this program.\" << std::endl;\n return EXIT_FAILURE;\n }\n try {\n argparse::ArgumentParser parser(\"fptn-passwd\", FPTN_VERSION);\n parser.add_argument(\"--add-user\").help(\"Username to add\");\n parser.add_argument(\"--del-user\").help(\"Username to delete\");\n parser.add_argument(\"--bandwidth\")\n .help(\"Bandwidth limit for the user in Megabit (default: 100)\")\n .default_value(100)\n .scan<'i', int>();\n parser.add_argument(\"--userfile\")\n .help(\"Path to users file (default: /etc/fptn/users.list)\")\n .default_value(\"/etc/fptn/users.list\");\n parser.add_argument(\"--list\")\n .help(\"List all users\")\n .default_value(false)\n .implicit_value(true);\n parser.add_argument(\"--get-bandwidth\")\n .help(\"Get bandwidth limit for a user\");\n parser.parse_args(argc, argv);\n const auto add_user =\n parser.present(\"--add-user\").value_or(\"\");\n const auto del_user =\n parser.present(\"--del-user\").value_or(\"\");\n const auto bandwidth = parser.get(\"--bandwidth\");\n const auto file_path = parser.get(\"--userfile\");\n const bool list = parser.get(\"--list\");\n const auto get_bandwidth_user =\n parser.present(\"--get-bandwidth\").value_or(\"\");\n\n fptn::common::user::CommonUserManager user_manager(file_path);\n\n if (!add_user.empty()) {\n const std::string password = GetPassword(\"Type password: \");\n const std::string retype_password = GetPassword(\"Retype password: \");\n if (password != retype_password) {\n std::cout << \"Passwords do not match.\" << std::endl;\n return 1;\n }\n user_manager.AddUser(add_user, password, bandwidth);\n } else if (!del_user.empty()) {\n std::string confirm;\n std::cout << \"Are you sure you want to delete user \" << del_user\n << \"? (Y/N): \";\n std::cin >> confirm;\n if (confirm == \"Y\" || confirm == \"y\") {\n user_manager.DeleteUser(del_user);\n } else {\n std::cout << \"Deletion cancelled.\" << std::endl;\n }\n } else if (list) {\n user_manager.ListUsers();\n } else if (!get_bandwidth_user.empty()) {\n const int bw = user_manager.GetUserBandwidth(get_bandwidth_user);\n if (bw != -1) {\n std::cout << \"Bandwidth for user \" << get_bandwidth_user << \": \" << bw\n << \" MB\" << std::endl;\n }\n } else {\n std::cerr << \"No command specified. Use --help for usage information.\"\n << std::endl;\n return EXIT_FAILURE;\n }\n return EXIT_SUCCESS;\n } catch (const std::runtime_error& err) {\n std::cerr << \"Argument parsing error: \" << err.what() << std::endl;\n } catch (const std::exception& ex) {\n std::cerr << \"An error occurred: \" << ex.what() << \" Exiting...\"\n << std::endl;\n } catch (...) {\n std::cerr << \"An unknown error occurred. Exiting...\" << std::endl;\n }\n return EXIT_FAILURE;\n}\n" }, { "path": "src/fptn-protocol-lib/CMakeLists.txt", "content": "project(fptn-protocol-lib LANGUAGES CXX)\n\ninclude_directories(${CMAKE_CURRENT_SOURCE_DIR})\n\ninclude(../../depends/cmake/NtpClient.cmake)\ninclude(../../depends/cmake/CamouflageTLS.cmake)\nif (IOS)\n find_library(SECURITY Security)\n find_library(CFNETWORK CFNetwork)\n find_library(SYSTEMCONFIGURATION SystemConfiguration)\n\n add_compile_definitions(FPTN_USER_OS=\\\"iOS\\\")\nelseif(__ANDROID__)\n add_compile_definitions(FPTN_USER_OS=\\\"Android\\\")\nelseif(APPLE)\n add_compile_definitions(FPTN_USER_OS=\\\"MacOS\\\")\nelseif(WIN32)\n add_compile_definitions(FPTN_USER_OS=\\\"Windows\\\")\nelseif(UNIX)\n add_compile_definitions(FPTN_USER_OS=\\\"Linux\\\")\nelse()\n message(FATAL_ERROR \"Unsupported platform\")\nendif()\n\nfind_package(absl REQUIRED)\nfind_package(protobuf REQUIRED)\nfind_package(OpenSSL REQUIRED)\nfind_package(spdlog REQUIRED)\nfind_package(fmt REQUIRED)\nfind_package(re2 REQUIRED)\n\nfind_package(Boost REQUIRED COMPONENTS random filesystem nowide locale)\nfind_package(ZLIB REQUIRED)\nfind_package(nlohmann_json REQUIRED)\n\nif (FPTN_BUILD_ONLY_FPTN_LIB)\n # build fptnlib without pcappp\n set(FPTN_IP_ADDRESS_WITHOUT_PCAP ON)\nendif()\n\nif (FPTN_WITH_LIBIDN2)\n find_package(libidn2 REQUIRED)\nendif ()\n\nif(NOT FPTN_IP_ADDRESS_WITHOUT_PCAP)\n find_package(PcapPlusPlus REQUIRED)\nendif()\n\ninclude_directories(${nlohmann_json_INCLUDE_DIRS})\n\n# include\nif(ABSL_INCLUDE_DIRS)\n include_directories(${ABSL_INCLUDE_DIRS})\nendif()\nif(absl_INCLUDE_DIRS)\n include_directories(${absl_INCLUDE_DIRS})\nendif()\n\nif(PROTOBUF_INCLUDE_DIR)\n include_directories(${PROTOBUF_INCLUDE_DIR})\nendif()\nif(protobuf_INCLUDE_DIRS)\n include_directories(${protobuf_INCLUDE_DIRS})\nendif()\nif(Protobuf_INCLUDE_DIRS)\n include_directories(${Protobuf_INCLUDE_DIRS})\nendif()\nif(CONAN_INCLUDE_DIRS_PROTOBUF)\n include_directories(${CONAN_INCLUDE_DIRS_PROTOBUF})\nendif()\ninclude_directories(${SOURCE_DIR} ${INCLUDE_DIR} ${CMAKE_CURRENT_BINARY_DIR} ${CMAKE_CURRENT_BINARY_DIR}/fptn_protocol)\ninclude_directories(${CMAKE_BINARY_DIR}/src/fptn-protocol-lib/protobuf)\ninclude_directories(\"${CMAKE_CURRENT_BINARY_DIR}/protobuf\")\n\n# Generate C++ source and header files from the .proto files\nset(protobuf_files protobuf/protocol.proto)\nprotobuf_generate_cpp(PROTO_SRCS PROTO_HDRS ${protobuf_files})\n\n# --- disable clang-tidy for protobuf generated code ---\nset_source_files_properties($ PROPERTIES SKIP_CLANG_TIDY ON)\nset_source_files_properties($ PROPERTIES SKIP_CLANG_TIDY ON)\nset(DISABLE_TIDY_DIR \"${CMAKE_BINARY_DIR}/src/fptn-protocol-lib/protobuf/\")\nfile(MAKE_DIRECTORY \"${DISABLE_TIDY_DIR}\")\nfile(\n WRITE \"${DISABLE_TIDY_DIR}/.clang-tidy\"\n \"Checks: '-*,readability-inconsistent-declaration-parameter-name'\nWarningsAsErrors: ''\n \")\n\nset(FPTN_CLIENT_PROTOCOL_SOURCES\n ${PROTO_SRCS}\n ${PROTO_HDRS}\n https/api_client/api_client.h\n https/api_client/api_client.cpp\n https/obfuscator/methods/tls/tls_obfuscator.cpp\n https/obfuscator/methods/tls/tls_obfuscator.h\n https/obfuscator/methods/tls2/tls_obfuscator2.cpp\n https/obfuscator/methods/tls2/tls_obfuscator2.h\n https/obfuscator/methods/obfuscator_interface.h\n https/obfuscator/tcp_stream/tcp_stream.h\n https/utils/tls/tls.h\n https/utils/tls/tls.cpp\n https/websocket_client/websocket_client.h\n https/websocket_client/websocket_client.cpp\n protobuf/protocol.h\n protobuf/protocol.cpp\n time/time_provider.h\n time/time_provider.cpp\n https/obfuscator/methods/detector.h)\n\nadd_library(\"${PROJECT_NAME}_static\" STATIC ${FPTN_CLIENT_PROTOCOL_SOURCES})\n\nforeach(target \"${PROJECT_NAME}_static\")\n if(FPTN_IP_ADDRESS_WITHOUT_PCAP)\n set(PCAP_LIB \"\")\n else()\n set(PCAP_LIB PcapPlusPlus::PcapPlusPlus)\n endif()\n\n if(FPTN_WITH_LIBIDN2)\n set(LIBIDN2_LIB libidn2::libidn2)\n else()\n set(LIBIDN2_LIB \"\")\n endif()\n \n if(MSVC)\n target_compile_options(${target} PRIVATE /wd4100 /wd4702) # disable warning C4100\n endif()\n\n if(IOS)\n set(IOS_LIBS \"${SECURITY} ${CFNETWORK} ${SYSTEMCONFIGURATION} -framework Foundation z resolv\")\n else()\n set(IOS_LIBS \"\")\n endif()\n\n if (IOS)\n set_target_properties(${target}\n PROPERTIES\n CXX_STANDARD 17\n CXX_STANDARD_REQUIRED ON\n CXX_EXTENSIONS OFF\n XCODE_ATTRIBUTE_ENABLE_BITCODE \"NO\"\n XCODE_ATTRIBUTE_ONLY_ACTIVE_ARCH \"NO\"\n XCODE_ATTRIBUTE_CODE_SIGN_IDENTITY \"\"\n )\n endif()\n\n target_include_directories(${target} INTERFACE ${CMAKE_CURRENT_BINARY_DIR} protobuf::protobuf)\n target_link_libraries(\n ${target}\n ${Protobuf_LIBRARIES}\n ${protobuf_LIBRARIES}\n protobuf::protobuf\n ZLIB::ZLIB\n Boost::boost\n Boost::nowide\n Boost::random\n Boost::locale\n OpenSSL::SSL\n OpenSSL::Crypto\n nlohmann_json::nlohmann_json\n spdlog::spdlog\n fmt::fmt\n re2::re2\n ntp_client\n camouflage-tls\n ${PCAP_LIB}\n ${LIBIDN2_LIB}\n ${IOS_LIBS}\n )\nendforeach()\n" }, { "path": "src/fptn-protocol-lib/https/api_client/api_client.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"fptn-protocol-lib/https/api_client/api_client.h\"\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/network/utils.h\"\n\n#ifdef _WIN32\n#pragma warning(push)\n#pragma warning(disable : 4996)\n#pragma warning(disable : 4267)\n#pragma warning(disable : 4244)\n#pragma warning(disable : 4702)\n#endif\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \"common/network/resolv.h\"\n\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls2/tls_obfuscator2.h\"\n#include \"fptn-protocol-lib/https/obfuscator/tcp_stream/tcp_stream.h\"\n#include \"fptn-protocol-lib/https/utils/change_cipher_spec.h\"\n#include \"fptn-protocol-lib/https/utils/tls/tls.h\"\n\n#ifdef _WIN32\n#pragma warning(pop)\n#endif\n\nnamespace {\n\nstd::string DecompressGzip(const std::string& compressed) {\n constexpr std::size_t kChunkSize = 4096;\n\n std::vector buffer(kChunkSize);\n\n ::z_stream strm{};\n strm.next_in = reinterpret_cast(const_cast(compressed.data()));\n strm.avail_in = static_cast(compressed.size());\n\n if (::inflateInit2(&strm, 16 + MAX_WBITS) != Z_OK) {\n return {};\n }\n\n std::string decompressed;\n int ret = 0;\n do {\n strm.next_out = reinterpret_cast(buffer.data());\n strm.avail_out = static_cast(buffer.size());\n ret = inflate(&strm, Z_NO_FLUSH);\n\n if (ret == Z_STREAM_ERROR || ret == Z_DATA_ERROR || ret == Z_MEM_ERROR) {\n inflateEnd(&strm);\n return {};\n }\n decompressed.append(buffer.data(), buffer.size() - strm.avail_out);\n } while (ret != Z_STREAM_END);\n\n inflateEnd(&strm);\n return decompressed;\n}\n\nstd::string GetHttpBody(\n const boost::beast::http::response& res) {\n auto body = boost::beast::buffers_to_string(res.body().data());\n if (res[boost::beast::http::field::content_encoding] == \"gzip\") {\n return DecompressGzip(body);\n }\n return body;\n}\n\nvoid SetSocketTimeouts(\n boost::asio::ip::tcp::socket& socket, int timeout_seconds) {\n auto native_socket = socket.native_handle();\n\n#ifdef _WIN32\n DWORD timeout_ms = timeout_seconds * 1000;\n ::setsockopt(native_socket, SOL_SOCKET, SO_RCVTIMEO,\n reinterpret_cast(&timeout_ms), sizeof(timeout_ms));\n ::setsockopt(native_socket, SOL_SOCKET, SO_SNDTIMEO,\n reinterpret_cast(&timeout_ms), sizeof(timeout_ms));\n#else\n timeval tv = {};\n tv.tv_sec = timeout_seconds;\n tv.tv_usec = 0;\n ::setsockopt(native_socket, SOL_SOCKET, SO_RCVTIMEO,\n reinterpret_cast(&tv), sizeof(tv));\n ::setsockopt(native_socket, SOL_SOCKET, SO_SNDTIMEO,\n reinterpret_cast(&tv), sizeof(tv));\n#endif\n}\n\nusing Headers = std::unordered_map;\n\nHeaders RealBrowserHeaders() {\n /* Just to ensure that FPTN is as similar to a web browser as possible. */\n#ifdef __linux__ // chromium ubuntu arm\n return {{\"User-Agent\",\n \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like \"\n \"Gecko) Chrome/134.0.0.0 Safari/537.36\"},\n {\"Accept-Language\", \"en-US,en;q=0.9\"},\n {\"Accept\",\n \"text/html,application/xhtml+xml,application/xml;q=0.9,image/\"\n \"avif,image/webp,image/apng,*/*;q=0.8,application/\"\n \"signed-exchange;v=b3;q=0.7\"},\n {\"Referer\", \"https://www.google.com/\"},\n {\"Accept-Encoding\", \"gzip, deflate, br, zstd\"},\n {\"Sec-Ch-Ua\", R\"(\"Not:A-Brand\";v=\"24\", \"Chromium\";v=\"134\")\"},\n {\"Sec-Ch-Ua-Mobile\", \"?0\"}, {\"Sec-Ch-Ua-Platform\", R\"(\"Linux\")\"},\n {\"Upgrade-Insecure-Requests\", \"1\"}, {\"Sec-Fetch-Site\", \"cross-site\"},\n {\"Sec-Fetch-Mode\", \"navigate\"}, {\"Sec-Fetch-User\", \"?1\"},\n {\"Sec-Fetch-Dest\", \"document\"}, {\"Priority\", \"u=0, i\"}};\n#elif __APPLE__\n // apple silicon chrome\n return {\n {\"sec-ch-ua\",\n R\"(\"Chromium\";v=\"128\", \"Not;A=Brand\";v=\"24\", \"Google Chrome\";v=\"128\")\"},\n {\"sec-ch-ua-platform\", \"\\\"macOS\\\"\"}, {\"sec-ch-ua-mobile\", \"?0\"},\n {\"upgrade-insecure-requests\", \"1\"},\n {\"User-Agent\",\n \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) \"\n \"AppleWebKit/537.36 \"\n \"(KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"},\n {\"Accept\",\n \"text/html,application/xhtml+xml,application/xml;q=0.9,image/\"\n \"avif,image/webp,image/apng,*/*;q=0.8,application/\"\n \"signed-exchange;v=b3;q=0.7\"},\n {\"sec-fetch-site\", \"none\"}, {\"sec-fetch-mode\", \"no-cors\"},\n {\"sec-fetch-dest\", \"empty\"}, {\"Referer\", \"https://www.google.com/\"},\n {\"Accept-Encoding\", \"gzip, deflate, br\"},\n {\"Accept-Language\", \"ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7\"},\n {\"priority\", \"u=4, i\"}};\n#elif _WIN32\n // chrome windows amd64\n return {\n {\"sec-ch-ua\",\n R\"(\"Chromium\";v=\"128\", \"Not;A=Brand\";v=\"24\", \"Google Chrome\";v=\"128\")\"},\n {\"sec-ch-ua-mobile\", \"?0\"}, {\"sec-ch-ua-platform\", \"\\\"Windows\\\"\"},\n {\"upgrade-insecure-requests\", \"1\"},\n {\"User-Agent\",\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 \"\n \"(KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"},\n {\"Accept\",\n \"text/html,application/xhtml+xml,application/xml;q=0.9,image/\"\n \"avif,image/webp,image/apng,*/*;q=0.8,application/\"\n \"signed-exchange;v=b3;q=0.7\"},\n {\"sec-fetch-site\", \"cross-site\"}, {\"sec-fetch-mode\", \"navigate\"},\n {\"sec-fetch-user\", \"?1\"}, {\"sec-fetch-dest\", \"document\"},\n {\"Referer\", \"https://www.google.com/\"},\n {\"Accept-Encoding\", \"gzip, deflate, br, zstd\"},\n {\"Accept-Language\", \"en-US,en;q=0.9,ru;q=0.8\"}, {\"priority\", \"u=0, i\"}};\n#else\n#error Undefined platform\n#endif\n}\n\ntemplate \nTResult ExecuteWithTimeout(const std::function& operation,\n int timeout,\n const std::string& operation_name,\n const std::string& handle,\n const std::string& host,\n const TResult& timeout_result) {\n try {\n // Shared state\n struct SharedState {\n std::mutex mutex;\n std::condition_variable cv;\n bool ready = false;\n TResult result;\n std::atomic cancelled{false};\n };\n\n const auto start_time = std::chrono::steady_clock::now();\n\n auto state = std::make_shared();\n\n // NOLINTNEXTLINE(bugprone-exception-escape)\n std::weak_ptr weak_state = state;\n std::thread([weak_state, operation]() {\n TResult impl_result = operation();\n // check state\n if (auto state = weak_state.lock()) {\n const std::scoped_lock lock(state->mutex);\n if (!state->cancelled) {\n state->result = impl_result;\n state->ready = true;\n state->cv.notify_one();\n }\n }\n }).detach();\n\n std::unique_lock lock(state->mutex); // mutex\n if (!state->cv.wait_for(lock, std::chrono::seconds(timeout),\n [state]() { return state->ready; })) {\n const auto end_time = std::chrono::steady_clock::now();\n const auto duration =\n std::chrono::duration_cast(\n end_time - start_time);\n\n state->cancelled = true;\n\n SPDLOG_WARN(\"{} [{}] - Timeout after {} ms for server {}\", operation_name,\n handle, duration.count(), host);\n return timeout_result;\n }\n return state->result;\n } catch (...) {\n SPDLOG_ERROR(\"Undefined error: {} {}\", operation_name, handle);\n }\n return timeout_result;\n}\n\n}; // namespace\n\nnamespace fptn::protocol::https {\n\nusing tcp_stream_type = boost::beast::tcp_stream;\nusing obfuscator_socket_type = obfuscator::TcpStream;\nusing ssl_stream_type = boost::beast::ssl_stream;\n\nApiClient::ApiClient(\n const std::string& host, int port, CensorshipStrategy censorship_strategy)\n : host_(host),\n port_(port),\n sni_(host),\n censorship_strategy_(censorship_strategy) {} // NOLINT\n\nApiClient::ApiClient(std::string host,\n int port,\n std::string sni,\n CensorshipStrategy censorship_strategy)\n : host_(std::move(host)),\n port_(port),\n sni_(std::move(sni)),\n censorship_strategy_(censorship_strategy) {} // NOLINT\n\nApiClient::ApiClient(std::string host,\n int port,\n std::string sni,\n std::string md5_fingerprint,\n CensorshipStrategy censorship_strategy)\n : host_(std::move(host)),\n port_(port),\n sni_(std::move(sni)),\n expected_md5_fingerprint_(std::move(md5_fingerprint)),\n censorship_strategy_(censorship_strategy) {} // NOLINT\n\nResponse ApiClient::Get(const std::string& handle, int timeout) const {\n // NOLINTNEXTLINE(bugprone-exception-escape)\n return ExecuteWithTimeout(\n // NOLINTNEXTLINE(bugprone-exception-escape)\n [this, handle, timeout]() {\n const ApiClient cloned_client = Clone();\n return cloned_client.GetImpl(handle, timeout);\n },\n timeout, \"GET\", handle, host_, Response{\"\", 608, \"Operation timeout\"});\n}\n\nResponse ApiClient::Post(const std::string& handle,\n const std::string& request,\n const std::string& content_type,\n int timeout) const {\n // NOLINTNEXTLINE(bugprone-exception-escape)\n return ExecuteWithTimeout(\n // NOLINTNEXTLINE(bugprone-exception-escape)\n [this, handle, request, content_type, timeout]() {\n const ApiClient cloned_client = Clone();\n return cloned_client.PostImpl(handle, request, content_type, timeout);\n },\n timeout, \"POST\", handle, host_, Response{\"\", 608, \"Operation timeout\"});\n}\n\nbool ApiClient::TestHandshake(int timeout) const {\n // NOLINTNEXTLINE(bugprone-exception-escape)\n return ExecuteWithTimeout(\n // NOLINTNEXTLINE(bugprone-exception-escape)\n [this, timeout]() {\n const ApiClient cloned_client = Clone();\n return cloned_client.TestHandshakeImpl(timeout);\n },\n timeout, \"TestHandshake\", \"\", host_, false);\n}\n\nApiClient ApiClient::Clone() const {\n ApiClient temp_client(\n host_, port_, sni_, expected_md5_fingerprint_, censorship_strategy_);\n return temp_client;\n}\n\nbool ApiClient::PerformFakeHandshake2(\n boost::asio::ip::tcp::socket& socket) const {\n try {\n SPDLOG_INFO(\"Fake TLS handshake started for SNI: {}\", sni_);\n\n /* Send client hello */\n const auto client_hello = GenerateHandshakePacket();\n if (client_hello.empty()) {\n SPDLOG_WARN(\"Failed to generate ClientHello for SNI: {}\", sni_);\n return false;\n }\n const std::size_t client_hello_bytes_size =\n boost::asio::write(socket, boost::asio::buffer(client_hello));\n if (client_hello_bytes_size != client_hello.size()) {\n SPDLOG_ERROR(\"Error ClientHello sent: {} of {} bytes\",\n client_hello_bytes_size, client_hello.size());\n return false;\n }\n\n /* Wait for server answer */\n const auto server_hello = common::network::WaitForServerTlsHello(socket);\n if (!server_hello.has_value()) {\n SPDLOG_ERROR(\"Failed to receive ServerHello from {}\", sni_);\n return false;\n }\n\n // clean\n common::network::CleanSocket(socket);\n\n /* Send change cipher spec */\n const auto change_cipher_spec =\n fptn::protocol::https::utils::MakeClientChangeCipherSpec();\n const std::size_t change_cipher_spec_size =\n boost::asio::write(socket, boost::asio::buffer(change_cipher_spec));\n if (change_cipher_spec_size != change_cipher_spec.size()) {\n SPDLOG_ERROR(\"Failed to send ClientHello to {}: {}\",\n change_cipher_spec_size, change_cipher_spec.size());\n return false;\n }\n\n // timeout\n std::this_thread::sleep_for(std::chrono::milliseconds(150));\n\n SPDLOG_INFO(\n \"Fake TLS handshake completed for {}, received {} bytes from server\",\n sni_, server_hello.value().size());\n return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Fake TLS handshake exception for {}: {}\", sni_, e.what());\n }\n return false;\n}\n\nResponse ApiClient::GetImpl(const std::string& handle, int timeout) const {\n std::string body;\n std::string error;\n int respcode = 400;\n\n const auto start_time = std::chrono::steady_clock::now();\n\n SSL* ssl = nullptr;\n std::string server_ip;\n try {\n boost::asio::io_context ioc;\n\n auto* ssl_ctx = fptn::protocol::https::utils::CreateNewSslCtx();\n boost::asio::ssl::context ctx(ssl_ctx);\n\n fptn::protocol::https::obfuscator::IObfuscatorSPtr obfuscator = nullptr;\n if (censorship_strategy_ == CensorshipStrategy::kTlsObfuscator) {\n obfuscator =\n std::make_shared();\n }\n\n tcp_stream_type tcp_stream(ioc);\n obfuscator_socket_type obfuscator_stream(std::move(tcp_stream), obfuscator);\n ssl_stream_type stream(std::move(obfuscator_stream), ctx);\n\n const std::string port_str = std::to_string(port_);\n auto resolve_result = fptn::common::network::ResolveWithTimeout(\n ioc, host_, port_str, timeout);\n\n if (!resolve_result) {\n error = resolve_result.error.message();\n respcode = 603;\n SPDLOG_ERROR(\"GET [{}] - DNS resolution failed for {}:{}: {}\", handle,\n host_, port_, error);\n } else {\n SPDLOG_INFO(\n \"GET [{}] - Connecting to server: {}:{}\", handle, host_, port_);\n\n boost::beast::get_lowest_layer(stream).expires_after(\n std::chrono::seconds(timeout));\n stream.next_layer().next_layer().expires_after(\n std::chrono::seconds(timeout));\n\n auto connected_endpoint = boost::beast::get_lowest_layer(stream).connect(\n resolve_result.results);\n server_ip = connected_endpoint.address().to_string();\n\n SPDLOG_INFO(\"GET [{}] - Successfully connected to {}\", handle, host_);\n\n auto& socket = boost::beast::get_lowest_layer(stream).socket();\n SetSocketTimeouts(socket, timeout);\n\n // Perform fake handshake if enabled\n if (IsRealityModeWithFakeHandshake(censorship_strategy_)) {\n const bool perform_status = PerformFakeHandshake2(socket);\n if (!perform_status) {\n SPDLOG_WARN(\n \"GET [{}] - Fake handshake failed, continuing with real \"\n \"handshake\",\n handle);\n }\n // For Reality Mode we use TLS obfuscator after fake handshake\n // This provides additional encryption layer for the real connection\n stream.next_layer().set_obfuscator(\n std::make_shared());\n }\n\n utils::SetHandshakeSessionID(stream.native_handle());\n utils::SetHandshakeSni(stream.native_handle(), sni_);\n if (!expected_md5_fingerprint_.empty()) {\n ssl = stream.native_handle();\n utils::AttachCertificateVerificationCallback(\n ssl, [this, &error](const std::string& md5_fingerprint) {\n return onVerifyCertificate(md5_fingerprint, error);\n });\n } else {\n ctx.set_verify_mode(boost::asio::ssl::verify_none);\n }\n\n stream.handshake(boost::asio::ssl::stream_base::client);\n\n // Reset obfuscator after TLS-handshake\n stream.next_layer().set_obfuscator(nullptr);\n\n // Clean\n common::network::CleanSocket(socket);\n common::network::CleanSsl(ssl);\n // timeout\n std::this_thread::sleep_for(std::chrono::milliseconds(150));\n\n boost::beast::http::request req{\n boost::beast::http::verb::get, handle, 11};\n\n // set http headers\n const auto headers = RealBrowserHeaders();\n for (const auto& [key, value] : headers) {\n req.set(key, value);\n }\n\n boost::beast::http::write(stream, req);\n\n boost::beast::flat_buffer buffer;\n boost::beast::http::response res;\n\n boost::beast::http::read(stream, buffer, res);\n\n respcode = static_cast(res.result_int());\n body = GetHttpBody(res);\n\n boost::system::error_code ec;\n stream.shutdown(ec);\n try {\n boost::beast::get_lowest_layer(stream).close();\n } catch (boost::system::system_error const& e) {\n SPDLOG_ERROR(\n \"GET [{}] - Exception during connection close for server {}: {}\",\n handle, host_, e.what());\n }\n }\n } catch (const boost::system::system_error& err) {\n#ifdef _WIN32\n error = boost::nowide::narrow(boost::nowide::widen(err.what()));\n#else\n error = err.what();\n#endif\n respcode = 600;\n SPDLOG_ERROR(\"GET [{}] - System error for server {} (IP: {}): {}\", handle,\n host_, server_ip, error);\n } catch (const std::exception& e) {\n#ifdef _WIN32\n error = boost::nowide::narrow(boost::nowide::widen(e.what()));\n#else\n error = e.what();\n#endif\n respcode = 601;\n SPDLOG_ERROR(\"GET [{}] - Exception for server {} (IP: {}): {}\", handle,\n host_, server_ip, error);\n } catch (...) {\n error = \"Unknown exception\";\n respcode = 602;\n SPDLOG_ERROR(\"GET [{}] - Unknown exception for server {} (IP: {})\", handle,\n host_, server_ip);\n }\n if (ssl) {\n utils::AttachCertificateVerificationCallbackDelete(ssl);\n }\n\n const auto end_time = std::chrono::steady_clock::now();\n const auto duration = std::chrono::duration_cast(\n end_time - start_time);\n\n if (respcode >= 200 && respcode < 300) {\n SPDLOG_INFO(\n \"GET [{}] - Success from server {} (IP: {}) in {} ms - Status: {}, \"\n \"Body size: {} bytes\",\n handle, host_, server_ip, duration.count(), respcode, body.size());\n } else {\n SPDLOG_WARN(\n \"GET [{}] - Failed from server {} (IP: {}) in {} ms - Status: {}, \"\n \"Error: {}, Body size: {} bytes\",\n handle, host_, server_ip, duration.count(), respcode, error,\n body.size());\n }\n return {body, respcode, error};\n}\n\nResponse ApiClient::PostImpl(const std::string& handle,\n const std::string& request,\n const std::string& content_type,\n int timeout) const {\n std::string body;\n std::string error;\n int respcode = 400;\n\n const auto start_time = std::chrono::steady_clock::now();\n\n SSL* ssl = nullptr;\n std::string server_ip;\n\n try {\n boost::asio::io_context ioc;\n auto* ssl_ctx = utils::CreateNewSslCtx();\n boost::asio::ssl::context ctx(ssl_ctx);\n\n fptn::protocol::https::obfuscator::IObfuscatorSPtr obfuscator = nullptr;\n if (censorship_strategy_ == CensorshipStrategy::kTlsObfuscator) {\n obfuscator =\n std::make_shared();\n }\n\n tcp_stream_type tcp_stream(ioc);\n obfuscator_socket_type obfuscator_stream(std::move(tcp_stream), obfuscator);\n ssl_stream_type stream(std::move(obfuscator_stream), ctx);\n\n const std::string port_str = std::to_string(port_);\n auto resolve_result = fptn::common::network::ResolveWithTimeout(\n ioc, host_, port_str, timeout);\n\n if (!resolve_result) {\n error = resolve_result.error.message();\n respcode = 603;\n SPDLOG_ERROR(\"POST [{}] - DNS resolution failed for {}:{}: {}\", handle,\n host_, port_, error);\n } else {\n SPDLOG_INFO(\n \"POST [{}] - Connecting to server: {}:{}\", handle, host_, port_);\n\n boost::beast::get_lowest_layer(stream).expires_after(\n std::chrono::seconds(timeout));\n stream.next_layer().next_layer().expires_after(\n std::chrono::seconds(timeout));\n\n auto connected_endpoint = boost::beast::get_lowest_layer(stream).connect(\n resolve_result.results);\n server_ip = connected_endpoint.address().to_string();\n\n SPDLOG_INFO(\"POST [{}] - Successfully connected to {}\", handle, host_);\n\n auto& socket = boost::beast::get_lowest_layer(stream).socket();\n SetSocketTimeouts(socket, timeout);\n\n // Perform fake handshake if enabled\n if (IsRealityModeWithFakeHandshake(censorship_strategy_)) {\n const bool perform_status = PerformFakeHandshake2(socket);\n if (!perform_status) {\n SPDLOG_WARN(\n \"GET [{}] - Fake handshake failed, continuing with real \"\n \"handshake\",\n handle);\n }\n // For Reality Mode we use TLS obfuscator after fake handshake\n // This provides additional encryption layer for the real connection\n stream.next_layer().set_obfuscator(\n std::make_shared());\n }\n\n utils::SetHandshakeSessionID(stream.native_handle());\n utils::SetHandshakeSni(stream.native_handle(), sni_);\n if (!expected_md5_fingerprint_.empty()) {\n ssl = stream.native_handle();\n utils::AttachCertificateVerificationCallback(\n ssl, [this, &error](const std::string& md5_fingerprint) {\n return onVerifyCertificate(md5_fingerprint, error);\n });\n } else {\n ctx.set_verify_mode(boost::asio::ssl::verify_none);\n }\n\n stream.handshake(boost::asio::ssl::stream_base::client);\n\n // Reset obfuscator after TLS-handshake\n stream.next_layer().set_obfuscator(nullptr);\n\n // Clean\n common::network::CleanSocket(socket);\n common::network::CleanSsl(ssl);\n // timeout\n std::this_thread::sleep_for(std::chrono::milliseconds(150));\n\n boost::beast::http::request req{\n boost::beast::http::verb::post, handle, 11};\n req.set(boost::beast::http::field::host, host_);\n req.set(boost::beast::http::field::accept, \"*/*\");\n req.set(boost::beast::http::field::content_type, content_type);\n req.set(boost::beast::http::field::content_length,\n std::to_string(request.size()));\n\n // set http headers\n const auto headers = RealBrowserHeaders();\n for (const auto& [key, value] : headers) {\n req.set(key, value);\n }\n\n req.body() = request;\n req.prepare_payload();\n\n boost::beast::http::write(stream, req);\n\n boost::beast::flat_buffer buffer;\n boost::beast::http::response res;\n boost::beast::http::read(stream, buffer, res);\n\n respcode = static_cast(res.result_int());\n body = GetHttpBody(res);\n\n boost::system::error_code ec;\n stream.shutdown(ec);\n try {\n boost::beast::get_lowest_layer(stream).close();\n } catch (boost::system::system_error const& e) {\n SPDLOG_ERROR(\n \"POST [{}] - Exception during connection close for server {}: {}\",\n handle, host_, e.what());\n }\n }\n } catch (const boost::system::system_error& err) {\n#ifdef _WIN32\n error = boost::nowide::narrow(boost::nowide::widen(err.what()));\n#else\n error = err.what();\n#endif\n respcode = 600;\n SPDLOG_ERROR(\"POST [{}] - System error for server {} (IP: {}): {}\", handle,\n host_, server_ip, error);\n } catch (const std::exception& e) {\n#ifdef _WIN32\n error = boost::nowide::narrow(boost::nowide::widen(e.what()));\n#else\n error = e.what();\n#endif\n respcode = 601;\n SPDLOG_ERROR(\"POST [{}] - Exception for server {} (IP: {}): {}\", handle,\n host_, server_ip, error);\n } catch (...) {\n error = \"Unknown exception\";\n respcode = 602;\n SPDLOG_ERROR(\"POST [{}] - Unknown exception for server {} (IP: {})\", handle,\n host_, server_ip);\n }\n if (ssl) {\n utils::AttachCertificateVerificationCallbackDelete(ssl);\n }\n\n const auto end_time = std::chrono::steady_clock::now();\n const auto duration = std::chrono::duration_cast(\n end_time - start_time);\n\n if (respcode >= 200 && respcode < 300) {\n SPDLOG_INFO(\n \"POST [{}] - Success from server {} (IP: {}) in {} ms - Status: {}, \"\n \"Request: {} bytes, Response: {} bytes\",\n handle, host_, server_ip, duration.count(), respcode, request.size(),\n body.size());\n } else {\n SPDLOG_WARN(\n \"POST [{}] - Failed from server {} (IP: {}) in {} ms - Status: {}, \"\n \"Error: {}, Request: {} bytes, Response: {} bytes\",\n handle, host_, server_ip, duration.count(), respcode, error,\n request.size(), body.size());\n }\n return {body, respcode, error};\n}\n\nbool ApiClient::TestHandshakeImpl(int timeout) const {\n const auto start_time = std::chrono::steady_clock::now();\n std::string server_ip;\n SSL* ssl = nullptr;\n\n try {\n boost::asio::io_context ioc;\n auto* ssl_ctx = utils::CreateNewSslCtx();\n boost::asio::ssl::context ctx(ssl_ctx);\n\n fptn::protocol::https::obfuscator::IObfuscatorSPtr obfuscator = nullptr;\n if (censorship_strategy_ == CensorshipStrategy::kTlsObfuscator) {\n obfuscator =\n std::make_shared();\n }\n\n tcp_stream_type tcp_stream(ioc);\n obfuscator_socket_type obfuscator_stream(std::move(tcp_stream), obfuscator);\n ssl_stream_type stream(std::move(obfuscator_stream), ctx);\n\n const std::string port_str = std::to_string(port_);\n auto resolve_result = fptn::common::network::ResolveWithTimeout(\n ioc, host_, port_str, timeout);\n\n if (!resolve_result) {\n SPDLOG_WARN(\"TestHandshake - DNS resolution failed for {}:{}: {}\", host_,\n port_, resolve_result.error.message());\n\n const auto end_time = std::chrono::steady_clock::now();\n const auto duration =\n std::chrono::duration_cast(\n end_time - start_time);\n\n SPDLOG_WARN(\n \"Handshake failed for server {} in {} ms - DNS resolution error\",\n host_, duration.count());\n return false;\n }\n\n SPDLOG_INFO(\"TestHandshake - Connecting to server: {}:{}\", host_, port_);\n\n boost::beast::get_lowest_layer(stream).expires_after(\n std::chrono::seconds(timeout));\n stream.next_layer().next_layer().expires_after(\n std::chrono::seconds(timeout));\n\n auto connected_endpoint =\n boost::beast::get_lowest_layer(stream).connect(resolve_result.results);\n server_ip = connected_endpoint.address().to_string();\n\n SPDLOG_INFO(\"TestHandshake - Successfully connected to {} (IP: {})\", host_,\n server_ip);\n\n auto& socket = boost::beast::get_lowest_layer(stream).socket();\n SetSocketTimeouts(socket, timeout);\n\n // Perform fake handshake if enabled\n if (IsRealityModeWithFakeHandshake(censorship_strategy_)) {\n SPDLOG_INFO(\"TestHandshake - Performing fake handshake\");\n if (!PerformFakeHandshake2(socket)) {\n SPDLOG_WARN(\n \"TestHandshake - Fake handshake failed, continuing with real \"\n \"handshake\");\n }\n }\n utils::SetHandshakeSessionID(stream.native_handle());\n utils::SetHandshakeSni(stream.native_handle(), sni_);\n\n if (!expected_md5_fingerprint_.empty()) {\n ssl = stream.native_handle();\n std::string error;\n utils::AttachCertificateVerificationCallback(\n ssl, [this, &error](const std::string& md5_fingerprint) {\n return onVerifyCertificate(md5_fingerprint, error);\n });\n } else {\n ctx.set_verify_mode(boost::asio::ssl::verify_none);\n }\n\n // Perform TLS handshake\n stream.handshake(boost::asio::ssl::stream_base::client);\n\n // Clean shutdown\n boost::system::error_code ec;\n stream.shutdown(ec);\n\n // Close connection\n boost::beast::get_lowest_layer(stream).close();\n\n const auto end_time = std::chrono::steady_clock::now();\n const auto duration = std::chrono::duration_cast(\n end_time - start_time);\n\n SPDLOG_INFO(\"Handshake successful for server {} (IP: {}) in {} ms\", host_,\n server_ip, duration.count());\n\n if (ssl) {\n utils::AttachCertificateVerificationCallbackDelete(ssl);\n }\n return true;\n } catch (const boost::system::system_error& err) {\n std::string host_copy = host_;\n std::string server_ip_copy = server_ip;\n std::string error_msg;\n\n#ifdef _WIN32\n error_msg = boost::nowide::narrow(boost::nowide::widen(err.what()));\n#else\n error_msg = err.what();\n#endif\n\n SPDLOG_WARN(\"Handshake failed for server {} (IP: {}): {}\", host_copy,\n server_ip_copy, error_msg);\n } catch (const std::exception& e) {\n // Создаем копии строк перед использованием в логгере\n std::string host_copy = host_;\n std::string server_ip_copy = server_ip;\n std::string error_msg;\n\n#ifdef _WIN32\n error_msg = boost::nowide::narrow(boost::nowide::widen(e.what()));\n#else\n error_msg = e.what();\n#endif\n\n SPDLOG_WARN(\"Handshake failed for server {} (IP: {}): {}\", host_copy,\n server_ip_copy, error_msg);\n } catch (...) {\n // Создаем копии строк перед использованием в логгере\n std::string host_copy = host_;\n std::string server_ip_copy = server_ip;\n\n SPDLOG_WARN(\"Handshake failed for server {} (IP: {}): Unknown exception\",\n host_copy, server_ip_copy);\n }\n\n if (ssl) {\n utils::AttachCertificateVerificationCallbackDelete(ssl);\n }\n\n const auto end_time = std::chrono::steady_clock::now();\n const auto duration = std::chrono::duration_cast(\n end_time - start_time);\n\n SPDLOG_WARN(\"Handshake failed for server {} (IP: {}) in {} ms\", host_,\n server_ip, duration.count());\n\n return false;\n}\n\nbool ApiClient::onVerifyCertificate(\n const std::string& md5_fingerprint, std::string& error) const {\n if (expected_md5_fingerprint_.empty()) {\n return true;\n }\n if (md5_fingerprint == expected_md5_fingerprint_) {\n return true;\n }\n error = fmt::format(\n \"Certificate MD5 mismatch. Expected: {}, got: {}. \"\n \"Please update your token.\",\n expected_md5_fingerprint_, md5_fingerprint);\n SPDLOG_ERROR(\n \"Certificate verification failed for server {}: {}\", host_, error);\n return false;\n}\n\nstd::vector ApiClient::GenerateHandshakePacket() const {\n auto builder = camouflage::tls::Builder::Create();\n\n switch (censorship_strategy_) {\n case CensorshipStrategy::kSniRealityModeChrome147:\n builder.GoogleChrome(\n camouflage::tls::google_chrome::Version::kV_147_0_7727_56);\n break;\n\n case CensorshipStrategy::kSniRealityModeChrome146:\n builder.GoogleChrome(\n camouflage::tls::google_chrome::Version::kV_146_0_7680_178);\n break;\n case CensorshipStrategy::kSniRealityModeChrome145:\n builder.GoogleChrome(\n camouflage::tls::google_chrome::Version::kV_145_0_7632_46);\n break;\n\n case CensorshipStrategy::kSniRealityModeFirefox149:\n builder.Firefox(camouflage::tls::firefox::Version::kV_149_0);\n break;\n\n case CensorshipStrategy::kSniRealityModeSafari26:\n builder.Safari(camouflage::tls::safari::Version::kV_26_4);\n break;\n\n case CensorshipStrategy::kSniRealityModeYandex26:\n builder.YandexBrowser(\n camouflage::tls::yandex_browser::Version::kV_26_3_3_881);\n break;\n\n case CensorshipStrategy::kSniRealityModeYandex25:\n builder.YandexBrowser(\n camouflage::tls::yandex_browser::Version::kV_25_8_3_828);\n break;\n\n case CensorshipStrategy::kSniRealityModeYandex24:\n builder.YandexBrowser(\n camouflage::tls::yandex_browser::Version::kV_24_12_0_1772);\n break;\n\n default:\n SPDLOG_DEBUG(\"Using fallback handshake generator for SNI: {}\", sni_);\n return utils::GenerateDecoyTlsHandshake(sni_);\n }\n\n SPDLOG_INFO(\"Generating handshake for SNI: {}\", sni_);\n\n const auto session_id = utils::GenerateDecoyTlsSessionId2();\n if (!session_id.has_value()) {\n SPDLOG_WARN(\"Session ID generation failed for handshake, using fallback\");\n return utils::GenerateDecoyTlsHandshake(sni_);\n }\n\n const auto handshake =\n builder.SetSNI(sni_).SetSessionId(session_id.value()).Generate();\n if (!handshake.has_value()) {\n SPDLOG_WARN(\n \"Handshake generation failed for SNI: {}, using fallback\", sni_);\n return utils::GenerateDecoyTlsHandshake(sni_);\n }\n\n SPDLOG_INFO(\"Handshake generated: SNI={}, size={} bytes\", sni_,\n handshake->handshake_packet_size);\n return std::vector(handshake->handshake_packet,\n handshake->handshake_packet + handshake->handshake_packet_size);\n}\n} // namespace fptn::protocol::https\n" }, { "path": "src/fptn-protocol-lib/https/api_client/api_client.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include \n#include \n\n#include \"fptn-protocol-lib/https/censorship_strategy.h\"\n\nnamespace fptn::protocol::https {\n\nstruct Response final {\n std::string body;\n int code;\n std::string errmsg;\n\n Response() : code(600) {}\n\n Response(std::string b, int c, std::string e)\n : body(std::move(b)), code(c), errmsg(std::move(e)) {}\n\n Response(const Response& other)\n : body(other.body), code(other.code), errmsg(other.errmsg) {}\n\n Response& operator=(const Response& other) {\n if (this != &other) {\n this->~Response();\n new (this) Response(other);\n }\n return *this;\n }\n\n Response(Response&& other) = delete;\n Response& operator=(Response&& other) = delete;\n\n nlohmann::json Json() const { return nlohmann::json::parse(body); }\n};\n\nclass ApiClient {\n public:\n ApiClient(const std::string& host,\n int port,\n CensorshipStrategy censorship_strategy);\n\n ApiClient(std::string host,\n int port,\n std::string sni,\n CensorshipStrategy censorship_strategy);\n\n ApiClient(std::string host,\n int port,\n std::string sni,\n std::string md5_fingerprint,\n CensorshipStrategy censorship_strategy);\n\n Response Get(const std::string& handle, int timeout = 15) const;\n Response Post(const std::string& handle,\n const std::string& request,\n const std::string& content_type = \"application/json\",\n int timeout = 15) const;\n bool TestHandshake(int timeout = 10) const;\n\n protected:\n ApiClient Clone() const;\n\n Response GetImpl(const std::string& handle, int timeout) const;\n\n Response PostImpl(const std::string& handle,\n const std::string& request,\n const std::string& content_type,\n int timeout) const;\n\n bool TestHandshakeImpl(int timeout) const;\n\n bool PerformFakeHandshake2(boost::asio::ip::tcp::socket& socket) const;\n\n bool onVerifyCertificate(\n const std::string& md5_fingerprint, std::string& error) const;\n\n std::vector GenerateHandshakePacket() const;\n\n private:\n const std::string host_;\n const int port_;\n const std::string sni_;\n const std::string expected_md5_fingerprint_;\n const CensorshipStrategy censorship_strategy_;\n};\n\nusing HttpsClientPtr = std::unique_ptr;\n\n} // namespace fptn::protocol::https\n" }, { "path": "src/fptn-protocol-lib/https/censorship_strategy.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\nnamespace fptn::protocol::https {\nenum class CensorshipStrategy : int {\n kSni = 0,\n kTlsObfuscator = 1,\n kSniRealityMode = 2,\n /* Chrome */\n kSniRealityModeChrome147 = 20,\n kSniRealityModeChrome146 = 21,\n kSniRealityModeChrome145 = 22,\n /* Firefox */\n kSniRealityModeFirefox149 = 60,\n /* Yandex Browser */\n kSniRealityModeYandex26 = 80,\n kSniRealityModeYandex25 = 81,\n kSniRealityModeYandex24 = 82,\n /* Safari */\n kSniRealityModeSafari26 = 100,\n};\n\ninline bool IsRealityModeWithFakeHandshake(const CensorshipStrategy& strategy) {\n return strategy == CensorshipStrategy::kSniRealityMode ||\n strategy == CensorshipStrategy::kSniRealityModeChrome147 ||\n strategy == CensorshipStrategy::kSniRealityModeChrome146 ||\n strategy == CensorshipStrategy::kSniRealityModeChrome145 ||\n strategy == CensorshipStrategy::kSniRealityModeFirefox149 ||\n strategy == CensorshipStrategy::kSniRealityModeYandex26 ||\n strategy == CensorshipStrategy::kSniRealityModeYandex25 ||\n strategy == CensorshipStrategy::kSniRealityModeYandex24 ||\n strategy == CensorshipStrategy::kSniRealityModeSafari26;\n}\n\n} // namespace fptn::protocol::https\n" }, { "path": "src/fptn-protocol-lib/https/obfuscator/methods/detector.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include \"fptn-protocol-lib/https/obfuscator/methods/obfuscator_interface.h\"\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls/tls_obfuscator.h\"\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls2/tls_obfuscator2.h\"\n\nnamespace fptn::protocol::https::obfuscator {\n\ninline IObfuscatorSPtr DetectObfuscator(\n const std::uint8_t* data, std::size_t size) {\n auto tls_obfuscator2 = std::make_shared();\n if (tls_obfuscator2->CheckProtocol(data, size)) {\n return tls_obfuscator2;\n }\n\n // deprecated\n auto tls_obfuscator = std::make_shared();\n if (tls_obfuscator->CheckProtocol(data, size)) {\n return tls_obfuscator;\n }\n return nullptr;\n}\n\ninline std::vector GetObfuscatorNames() { return {\"tls\", \"none\"}; }\n\ninline std::optional GetObfuscatorByName(\n const std::string& name) {\n if (name == \"tls\") {\n return std::make_shared();\n }\n if (name == \"none\") {\n return nullptr;\n }\n return std::nullopt;\n}\n\n}; // namespace fptn::protocol::https::obfuscator\n" }, { "path": "src/fptn-protocol-lib/https/obfuscator/methods/obfuscator_interface.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\nnamespace fptn::protocol::https::obfuscator {\n\nusing PreparedData = std::optional>;\n\nclass IObfuscator {\n public:\n virtual ~IObfuscator() = default;\n\n virtual bool AddData(const std::uint8_t* data, std::size_t size) = 0;\n\n virtual PreparedData Deobfuscate() = 0;\n\n virtual PreparedData Obfuscate(\n const std::uint8_t* data, std::size_t size) = 0;\n virtual void Reset() = 0;\n\n virtual bool HasPendingData() const = 0;\n\n virtual bool CheckProtocol(const std::uint8_t* data, std::size_t size) = 0;\n\n virtual std::shared_ptr Clone() const = 0;\n};\n\nusing IObfuscatorSPtr = std::shared_ptr;\n\n}; // namespace fptn::protocol::https::obfuscator\n" }, { "path": "src/fptn-protocol-lib/https/obfuscator/methods/tls/tls_obfuscator.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls/tls_obfuscator.h\"\n\n#include \n#include \n#include \n#include \n#include \n\n#include \n\n#ifdef _WIN32\n#include \n#else\n#include \n#endif\n\nnamespace {\n\nconstexpr std::size_t kMmaxBufferSize = 65536;\n\nenum {\n kFptnTlsApplicationHeaderType = 0x17,\n kFptnTlsApplicationHeaderMajor = 0x03,\n kFptnTlsApplicationHeaderMinor = 0x03,\n\n kFptnTlsApplicationProtocolVersion = 0x01,\n kFptnTlsApplicationMagicFlag = 0x9763\n};\n\n#pragma pack(push, 1)\nstruct TLSAppDataRecordHeader {\n /* Standard TLS header */\n std::uint8_t headertype;\n std::uint8_t headermajor;\n std::uint8_t headerminor;\n std::uint16_t content_length; // Must be in network byte order!\n\n /* FPTN TLS obfuscator protocol */\n std::uint64_t random_data;\n std::uint16_t magic_flag; // Must be in network byte order!\n std::uint8_t protocol_version;\n std::uint8_t xor_key;\n std::uint16_t payload_length; // Must be in network byte order!\n std::uint8_t padding_length;\n // std::uint8_t xor_payload[payload_length];\n // std::uint8_t padding[padding_length]\n};\n\n#pragma pack(pop)\n\nstd::uint16_t HostToNetwork16(const std::uint16_t value) {\n return htons(value);\n}\n\nstd::uint16_t NetworkToHost16(const std::uint16_t value) {\n return ntohs(value);\n}\n\nstd::uint64_t GetRandomData() {\n static std::mt19937 gen{std::random_device {} ()};\n std::uniform_int_distribution dist(1024, UINT64_MAX);\n return dist(gen);\n}\n\nstd::uint8_t GetRandomByte(\n const std::uint8_t min = 0, const std::uint8_t max = UINT8_MAX) {\n static std::mt19937 gen{std::random_device {}()};\n std::uniform_int_distribution dist(min, max);\n return static_cast(dist(gen));\n}\n\nstd::vector GenerateRandomPadding(const std::size_t length) {\n std::vector padding(length);\n for (std::size_t i = 0; i < length; ++i) {\n padding[i] = GetRandomByte();\n }\n return padding;\n}\n\nvoid ApplyXorTransform(\n std::uint8_t* data, const std::size_t size, const std::uint8_t key) {\n for (std::size_t i = 0; i < size; ++i) {\n data[i] ^= key;\n }\n}\n\n} // namespace\n\nnamespace fptn::protocol::https::obfuscator {\n\nbool TlsObfuscator::AddData(const std::uint8_t* data, std::size_t size) {\n const std::scoped_lock lock(mutex_); // mutex\n\n if (data && size > 0) {\n // Limit total buffer size to 64KB to prevent memory exhaustion\n if (input_buffer_.size() + size > kMmaxBufferSize) {\n // If buffer would exceed 64KB, only add what fits\n std::size_t available_space = kMmaxBufferSize - input_buffer_.size();\n if (available_space > 0) {\n input_buffer_.insert(input_buffer_.end(), data, data + available_space);\n return true;\n }\n return false;\n }\n // Normal case - add all data\n input_buffer_.insert(input_buffer_.end(), data, data + size);\n return true;\n }\n return false;\n}\n\nPreparedData TlsObfuscator::Deobfuscate() {\n const std::scoped_lock lock(mutex_); // mutex\n\n if (input_buffer_.size() < sizeof(TLSAppDataRecordHeader)) {\n return std::nullopt;\n }\n\n std::size_t total_processed = 0;\n std::size_t search_offset = 0;\n\n std::vector output;\n\n // Search for valid TLS records in the buffer\n while (\n input_buffer_.size() - search_offset >= sizeof(TLSAppDataRecordHeader)) {\n // Read potential header at current search offset\n TLSAppDataRecordHeader header = {};\n std::memcpy(&header, input_buffer_.data() + search_offset,\n sizeof(TLSAppDataRecordHeader));\n\n const std::uint16_t total_content_length =\n NetworkToHost16(header.content_length);\n const std::uint16_t magic_flag = NetworkToHost16(header.magic_flag);\n const std::uint16_t payload_length = NetworkToHost16(header.payload_length);\n const std::uint8_t padding_length = header.padding_length;\n\n const bool is_fptn_protocol =\n (magic_flag == kFptnTlsApplicationMagicFlag) &&\n (header.protocol_version == kFptnTlsApplicationProtocolVersion) &&\n (header.headermajor == kFptnTlsApplicationHeaderMajor) &&\n (header.headerminor == kFptnTlsApplicationHeaderMinor);\n\n // Если данные не нашего протокола - возвращаем как есть\n if (!is_fptn_protocol) {\n std::vector result = std::move(input_buffer_);\n input_buffer_.clear();\n return result;\n }\n\n // Validate header fields\n const bool is_valid_header =\n is_fptn_protocol &&\n (total_content_length >= 11 + sizeof(header.xor_key) +\n sizeof(header.payload_length) +\n sizeof(header.padding_length));\n if (!is_valid_header) {\n // Invalid header - shift search position by 1 byte and continue searching\n search_offset++;\n continue;\n }\n\n // Calculate full record size including padding\n const size_t full_record_size =\n sizeof(TLSAppDataRecordHeader) + payload_length + padding_length;\n\n // Check if we have a complete record at this position\n if (input_buffer_.size() - search_offset < full_record_size) {\n // Incomplete record - wait for more data\n break;\n }\n\n // Extract and process payload data\n const std::uint8_t* encrypted_payload =\n input_buffer_.data() + search_offset + sizeof(TLSAppDataRecordHeader);\n\n // Copy encrypted payload to temporary buffer for XOR processing\n std::vector decrypted_payload(\n encrypted_payload, encrypted_payload + payload_length);\n\n // Apply XOR decryption\n ApplyXorTransform(\n decrypted_payload.data(), decrypted_payload.size(), header.xor_key);\n\n // Add decrypted payload to output\n output.insert(\n output.end(), decrypted_payload.begin(), decrypted_payload.end());\n\n // Remove the processed record from buffer starting from search_offset\n input_buffer_.erase(input_buffer_.begin() + search_offset,\n input_buffer_.begin() + search_offset + full_record_size);\n total_processed += full_record_size;\n break;\n }\n\n // If we searched through the entire buffer without finding valid headers,\n // clear the processed portion to prevent infinite growth\n if (search_offset > 0 && total_processed == 0) {\n // We found only invalid data - remove the searched portion\n input_buffer_.erase(\n input_buffer_.begin(), input_buffer_.begin() + search_offset);\n }\n if (!output.empty()) {\n return output;\n }\n return std::nullopt;\n}\n\nPreparedData TlsObfuscator::Obfuscate(\n const std::uint8_t* data, std::size_t size) {\n const std::scoped_lock lock(mutex_); // mutex\n\n // Generate random padding (0-255 bytes)\n const std::uint8_t padding_length = GetRandomByte(64, 255);\n std::vector random_padding =\n GenerateRandomPadding(padding_length);\n\n // Generate XOR key\n const std::uint8_t xor_key = GetRandomByte();\n\n // Prepare payload for XOR encryption\n std::vector encrypted_payload(data, data + size);\n ApplyXorTransform(\n encrypted_payload.data(), encrypted_payload.size(), xor_key);\n\n const std::uint16_t total_content_length =\n sizeof(TLSAppDataRecordHeader::random_data) +\n sizeof(TLSAppDataRecordHeader::magic_flag) +\n sizeof(TLSAppDataRecordHeader::protocol_version) +\n sizeof(TLSAppDataRecordHeader::xor_key) +\n sizeof(TLSAppDataRecordHeader::payload_length) +\n sizeof(TLSAppDataRecordHeader::padding_length) +\n static_cast(size) + padding_length;\n\n TLSAppDataRecordHeader header = {};\n header.headertype = kFptnTlsApplicationHeaderType;\n header.headermajor = kFptnTlsApplicationHeaderMajor;\n header.headerminor = kFptnTlsApplicationHeaderMinor;\n\n // Convert to network byte order\n header.content_length = HostToNetwork16(total_content_length);\n header.random_data = GetRandomData();\n header.magic_flag = HostToNetwork16(kFptnTlsApplicationMagicFlag);\n header.protocol_version = kFptnTlsApplicationProtocolVersion;\n header.xor_key = xor_key;\n header.payload_length = HostToNetwork16(static_cast(size));\n header.padding_length = padding_length;\n\n std::vector result;\n result.resize(sizeof(TLSAppDataRecordHeader) + size + padding_length);\n\n // Copy header\n std::memcpy(result.data(), &header, sizeof(TLSAppDataRecordHeader));\n\n // Copy encrypted payload\n if (size > 0) {\n std::memcpy(result.data() + sizeof(TLSAppDataRecordHeader),\n encrypted_payload.data(), size);\n }\n\n // Copy random padding\n if (padding_length > 0) {\n std::memcpy(result.data() + sizeof(TLSAppDataRecordHeader) + size,\n random_padding.data(), padding_length);\n }\n\n if (!result.empty()) {\n return result;\n }\n return std::nullopt;\n}\n\nvoid TlsObfuscator::Reset() { input_buffer_.clear(); }\n\nbool TlsObfuscator::CheckProtocol(const std::uint8_t* data, std::size_t size) {\n const std::scoped_lock lock(mutex_); // mutex\n\n if (data == nullptr || size < sizeof(TLSAppDataRecordHeader)) {\n return false;\n }\n\n TLSAppDataRecordHeader header = {};\n std::memcpy(&header, data, sizeof(TLSAppDataRecordHeader));\n\n const std::uint16_t magic_flag = NetworkToHost16(header.magic_flag);\n const std::uint16_t content_length = NetworkToHost16(header.content_length);\n const std::uint16_t payload_length = NetworkToHost16(header.payload_length);\n\n const bool is_valid_protocol =\n (header.headertype == kFptnTlsApplicationHeaderType) &&\n (header.headermajor == kFptnTlsApplicationHeaderMajor) &&\n (header.headerminor == kFptnTlsApplicationHeaderMinor) &&\n (header.protocol_version == kFptnTlsApplicationProtocolVersion) &&\n (magic_flag == kFptnTlsApplicationMagicFlag) &&\n (content_length >= 11 + sizeof(header.xor_key) +\n sizeof(header.payload_length) +\n sizeof(header.padding_length)) &&\n (content_length <= 16384) &&\n (payload_length <= content_length - 11 - sizeof(header.xor_key) -\n sizeof(header.payload_length) -\n sizeof(header.padding_length));\n return is_valid_protocol;\n}\n\nbool TlsObfuscator::HasPendingData() const {\n const std::scoped_lock lock(mutex_); // mutex\n\n bool result = !input_buffer_.empty();\n return result;\n}\n\nstd::shared_ptr TlsObfuscator::Clone() const {\n return std::make_shared();\n}\n\n}; // namespace fptn::protocol::https::obfuscator\n" }, { "path": "src/fptn-protocol-lib/https/obfuscator/methods/tls/tls_obfuscator.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include \"fptn-protocol-lib/https/obfuscator/methods/obfuscator_interface.h\"\n\nnamespace fptn::protocol::https::obfuscator {\n\n\n// DEPRECATED\nclass TlsObfuscator : public IObfuscator {\n public:\n TlsObfuscator() = default;\n ~TlsObfuscator() override = default;\n\n bool AddData(const std::uint8_t* data, std::size_t size) override;\n\n PreparedData Deobfuscate() override;\n PreparedData Obfuscate(const std::uint8_t* data, std::size_t size) override;\n void Reset() override;\n\n bool HasPendingData() const override;\n\n bool CheckProtocol(const std::uint8_t* data, std::size_t size) override;\n\n std::shared_ptr Clone() const override;\n\n private:\n mutable std::mutex mutex_;\n\n std::vector input_buffer_;\n};\n\n}; // namespace fptn::protocol::https::obfuscator\n" }, { "path": "src/fptn-protocol-lib/https/obfuscator/methods/tls2/tls_obfuscator2.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls2/tls_obfuscator2.h\"\n\n#include \n#include \n#include \n#include \n#include \n\n#ifdef _WIN32\n#include \n#else\n#include \n#endif\n\n#include \"fptn-protocol-lib/time/time_provider.h\"\n\nnamespace {\n\nconstexpr std::size_t kMmaxBufferSize = 65536;\n\nenum {\n kFptnTlsApplicationHeaderType = 0x17,\n kFptnTlsApplicationHeaderMajor = 0x03,\n kFptnTlsApplicationHeaderMinor = 0x03\n};\n\n#pragma pack(push, 1)\nstruct TLSAppDataRecordHeader {\n /* Standard TLS header */\n std::uint8_t headertype;\n std::uint8_t headermajor;\n std::uint8_t headerminor;\n std::uint16_t content_length; // Must be in network byte order!\n\n /* FPTN TLS obfuscator protocol */\n std::uint64_t random_data;\n std::uint32_t timestamp; // Must be in network byte order!\n std::uint8_t xor_key;\n std::uint16_t payload_length; // Must be in network byte order!\n std::uint16_t padding_length; // Must be in network byte order!\n // std::uint8_t xor_payload[payload_length];\n // std::uint8_t padding[padding_length]\n};\n#pragma pack(pop)\n\nstd::uint16_t HostToNetwork16(const std::uint16_t value) {\n return htons(value);\n}\n\nstd::uint16_t NetworkToHost16(const std::uint16_t value) {\n return ntohs(value);\n}\n\nstd::uint32_t HostToNetwork32(const std::uint32_t value) {\n return htonl(value);\n}\n\nstd::uint32_t NetworkToHost32(const std::uint32_t value) {\n return ntohl(value);\n}\n\nbool IsValidTimestamp(const std::uint32_t timestamp) {\n const auto now = fptn::time::TimeProvider::Instance()->NowTimestamp();\n constexpr std::uint32_t kTimeShiftSeconds = 10;\n\n return (timestamp <= now + kTimeShiftSeconds) &&\n (timestamp + kTimeShiftSeconds >= now);\n}\n\nstd::uint64_t GetRandomData() {\n static std::mt19937 gen{std::random_device {}()};\n std::uniform_int_distribution dist(1024, UINT64_MAX);\n return dist(gen);\n}\n\nstd::uint8_t GetRandomByte(\n const std::uint8_t min = 0, const std::uint8_t max = UINT8_MAX) {\n static std::mt19937 gen{std::random_device {}()};\n std::uniform_int_distribution dist(min, max);\n return static_cast(dist(gen));\n}\n\nstd::uint16_t GetRandomPaddingLength() {\n static std::mt19937 gen{std::random_device {}()};\n std::uniform_int_distribution dist(4095, 8192);\n return dist(gen);\n}\n\nstd::vector GenerateRandomPadding(const std::size_t length) {\n std::vector padding(length);\n for (std::size_t i = 0; i < length; ++i) {\n padding[i] = GetRandomByte();\n }\n return padding;\n}\n\nvoid ApplyXorTransform(\n std::uint8_t* data, const std::size_t size, const std::uint8_t key) {\n for (std::size_t i = 0; i < size; ++i) {\n data[i] ^= key;\n }\n}\n\n} // namespace\n\nnamespace fptn::protocol::https::obfuscator {\n\nbool TlsObfuscator2::AddData(const std::uint8_t* data, std::size_t size) {\n const std::scoped_lock lock(mutex_);\n\n if (data && size > 0) {\n if (input_buffer_.size() + size > kMmaxBufferSize) {\n std::size_t available_space = kMmaxBufferSize - input_buffer_.size();\n if (available_space > 0) {\n input_buffer_.insert(input_buffer_.end(), data, data + available_space);\n return true;\n }\n return false;\n }\n input_buffer_.insert(input_buffer_.end(), data, data + size);\n return true;\n }\n return false;\n}\n\nPreparedData TlsObfuscator2::Deobfuscate() {\n const std::scoped_lock lock(mutex_);\n\n if (input_buffer_.size() < sizeof(TLSAppDataRecordHeader)) {\n return std::nullopt;\n }\n\n std::size_t total_processed = 0;\n std::size_t search_offset = 0;\n std::vector output;\n\n while (\n input_buffer_.size() - search_offset >= sizeof(TLSAppDataRecordHeader)) {\n TLSAppDataRecordHeader header = {};\n std::memcpy(&header, input_buffer_.data() + search_offset,\n sizeof(TLSAppDataRecordHeader));\n\n const std::uint16_t total_content_length =\n NetworkToHost16(header.content_length);\n const std::uint32_t timestamp = NetworkToHost32(header.timestamp);\n const std::uint16_t payload_length = NetworkToHost16(header.payload_length);\n const std::uint16_t padding_length = NetworkToHost16(header.padding_length);\n\n const bool is_fptn_protocol =\n IsValidTimestamp(timestamp) &&\n (header.headermajor == kFptnTlsApplicationHeaderMajor) &&\n (header.headerminor == kFptnTlsApplicationHeaderMinor);\n\n if (!is_fptn_protocol) {\n search_offset++;\n continue;\n }\n\n const bool is_valid_header =\n (total_content_length >=\n sizeof(TLSAppDataRecordHeader::random_data) +\n sizeof(TLSAppDataRecordHeader::timestamp) +\n sizeof(TLSAppDataRecordHeader::xor_key) +\n sizeof(TLSAppDataRecordHeader::payload_length) +\n sizeof(TLSAppDataRecordHeader::padding_length) +\n payload_length + padding_length);\n\n if (!is_valid_header) {\n search_offset++;\n continue;\n }\n\n const size_t full_record_size =\n sizeof(TLSAppDataRecordHeader) + payload_length + padding_length;\n\n if (input_buffer_.size() - search_offset < full_record_size) {\n break;\n }\n\n const std::uint8_t* encrypted_payload =\n input_buffer_.data() + search_offset + sizeof(TLSAppDataRecordHeader);\n\n std::vector decrypted_payload(\n encrypted_payload, encrypted_payload + payload_length);\n\n ApplyXorTransform(\n decrypted_payload.data(), decrypted_payload.size(), header.xor_key);\n\n output.insert(\n output.end(), decrypted_payload.begin(), decrypted_payload.end());\n\n input_buffer_.erase(input_buffer_.begin() + search_offset,\n input_buffer_.begin() + search_offset + full_record_size);\n total_processed += full_record_size;\n break;\n }\n\n if (search_offset > 0 && total_processed == 0) {\n input_buffer_.erase(\n input_buffer_.begin(), input_buffer_.begin() + search_offset);\n }\n if (!output.empty()) {\n return output;\n }\n return std::nullopt;\n}\n\nPreparedData TlsObfuscator2::Obfuscate(\n const std::uint8_t* data, std::size_t size) {\n const std::scoped_lock lock(mutex_);\n\n const std::uint16_t padding_length = GetRandomPaddingLength();\n const std::vector random_padding =\n GenerateRandomPadding(padding_length);\n\n const std::uint8_t xor_key = GetRandomByte();\n\n std::vector encrypted_payload(data, data + size);\n ApplyXorTransform(\n encrypted_payload.data(), encrypted_payload.size(), xor_key);\n\n const std::uint16_t total_content_length =\n sizeof(TLSAppDataRecordHeader::random_data) +\n sizeof(TLSAppDataRecordHeader::timestamp) +\n sizeof(TLSAppDataRecordHeader::xor_key) +\n sizeof(TLSAppDataRecordHeader::payload_length) +\n sizeof(TLSAppDataRecordHeader::padding_length) +\n static_cast(size) + padding_length;\n\n TLSAppDataRecordHeader header = {};\n header.headertype = kFptnTlsApplicationHeaderType;\n header.headermajor = kFptnTlsApplicationHeaderMajor;\n header.headerminor = kFptnTlsApplicationHeaderMinor;\n\n header.content_length = HostToNetwork16(total_content_length);\n header.random_data = GetRandomData();\n\n const std::uint32_t current_timestamp =\n fptn::time::TimeProvider::Instance()->NowTimestamp();\n header.timestamp = HostToNetwork32(current_timestamp);\n\n header.xor_key = xor_key;\n header.payload_length = HostToNetwork16(static_cast(size));\n header.padding_length = HostToNetwork16(padding_length);\n\n std::vector result;\n result.resize(sizeof(TLSAppDataRecordHeader) + size + padding_length);\n\n std::memcpy(result.data(), &header, sizeof(TLSAppDataRecordHeader));\n\n if (size > 0) {\n std::memcpy(result.data() + sizeof(TLSAppDataRecordHeader),\n encrypted_payload.data(), size);\n }\n\n if (padding_length > 0) {\n std::memcpy(result.data() + sizeof(TLSAppDataRecordHeader) + size,\n random_padding.data(), padding_length);\n }\n\n if (!result.empty()) {\n return result;\n }\n return std::nullopt;\n}\n\nvoid TlsObfuscator2::Reset() { input_buffer_.clear(); }\n\nbool TlsObfuscator2::CheckProtocol(const std::uint8_t* data, std::size_t size) {\n const std::scoped_lock lock(mutex_);\n\n if (data == nullptr || size < sizeof(TLSAppDataRecordHeader)) {\n return false;\n }\n\n TLSAppDataRecordHeader header = {};\n std::memcpy(&header, data, sizeof(TLSAppDataRecordHeader));\n\n const std::uint32_t timestamp = NetworkToHost32(header.timestamp);\n const std::uint16_t content_length = NetworkToHost16(header.content_length);\n const std::uint16_t payload_length = NetworkToHost16(header.payload_length);\n const std::uint16_t padding_length = NetworkToHost16(header.padding_length);\n\n const bool is_valid_protocol =\n (header.headertype == kFptnTlsApplicationHeaderType) &&\n (header.headermajor == kFptnTlsApplicationHeaderMajor) &&\n (header.headerminor == kFptnTlsApplicationHeaderMinor) &&\n IsValidTimestamp(timestamp) &&\n (content_length >= sizeof(TLSAppDataRecordHeader::random_data) +\n sizeof(TLSAppDataRecordHeader::timestamp) +\n sizeof(TLSAppDataRecordHeader::xor_key) +\n sizeof(TLSAppDataRecordHeader::payload_length) +\n sizeof(TLSAppDataRecordHeader::padding_length) +\n payload_length + padding_length) &&\n (content_length <= 16384);\n\n return is_valid_protocol;\n}\n\nbool TlsObfuscator2::HasPendingData() const {\n const std::scoped_lock lock(mutex_);\n return !input_buffer_.empty();\n}\n\nstd::shared_ptr TlsObfuscator2::Clone() const {\n return std::make_shared();\n}\n\n}; // namespace fptn::protocol::https::obfuscator\n" }, { "path": "src/fptn-protocol-lib/https/obfuscator/methods/tls2/tls_obfuscator2.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include \"fptn-protocol-lib/https/obfuscator/methods/obfuscator_interface.h\"\n\nnamespace fptn::protocol::https::obfuscator {\n\nclass TlsObfuscator2 : public IObfuscator {\n public:\n TlsObfuscator2() = default;\n ~TlsObfuscator2() override = default;\n\n bool AddData(const std::uint8_t* data, std::size_t size) override;\n\n PreparedData Deobfuscate() override;\n PreparedData Obfuscate(const std::uint8_t* data, std::size_t size) override;\n void Reset() override;\n\n bool HasPendingData() const override;\n\n bool CheckProtocol(const std::uint8_t* data, std::size_t size) override;\n\n std::shared_ptr Clone() const override;\n\n private:\n mutable std::mutex mutex_;\n\n std::vector input_buffer_;\n};\n\n}; // namespace fptn::protocol::https::obfuscator\n" }, { "path": "src/fptn-protocol-lib/https/obfuscator/tcp_stream/tcp_stream.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n\n#include \"fptn-protocol-lib/https/obfuscator/methods/obfuscator_interface.h\"\n\nnamespace fptn::protocol::https::obfuscator {\n\ntemplate \nclass TcpStream {\n public:\n using executor_type = typename Stream::executor_type;\n using next_layer_type = Stream;\n using lowest_layer_type = Stream;\n\n explicit TcpStream(executor_type ex)\n : stream_(ex), strand_(ex), obfuscator_(nullptr) {}\n\n explicit TcpStream(executor_type ex, IObfuscatorSPtr obfuscator = nullptr)\n : stream_(ex), strand_(ex), obfuscator_(std::move(obfuscator)) {}\n\n explicit TcpStream(Stream&& stream, IObfuscatorSPtr obfuscator = nullptr)\n : stream_(std::move(stream)),\n strand_(stream_.get_executor()),\n obfuscator_(std::move(obfuscator)) {}\n\n TcpStream(const TcpStream&) = delete;\n TcpStream& operator=(const TcpStream&) = delete;\n\n TcpStream(TcpStream&& other) noexcept\n : stream_(std::move(other.stream_)),\n strand_(std::move(other.strand_)),\n obfuscator_(std::move(other.obfuscator_)) {}\n\n TcpStream& operator=(TcpStream&& other) noexcept {\n if (this != &other) {\n stream_ = std::move(other.stream_);\n strand_ = std::move(other.strand_);\n obfuscator_ = std::move(other.obfuscator_);\n }\n return *this;\n }\n\n executor_type get_executor() { return stream_.get_executor(); }\n\n next_layer_type& next_layer() { return stream_; }\n\n const next_layer_type& next_layer() const { return stream_; }\n\n lowest_layer_type& lowest_layer() { return stream_; }\n\n const lowest_layer_type& lowest_layer() const { return stream_; }\n\n template \n std::size_t read_some(\n const MutableBufferSequence& buffers, boost::system::error_code& ec) {\n if (!obfuscator_) {\n return stream_.read_some(buffers, ec);\n }\n\n constexpr std::size_t kTempBufferSize = 16 * 1024;\n std::array temp_buffer;\n\n while (true) {\n if (obfuscator_->HasPendingData()) {\n auto deobfuscated = obfuscator_->Deobfuscate();\n if (deobfuscated.has_value()) {\n return boost::asio::buffer_copy(buffers,\n boost::asio::buffer(deobfuscated->data(), deobfuscated->size()));\n }\n }\n\n const std::size_t bytes_read =\n stream_.read_some(boost::asio::buffer(temp_buffer), ec);\n\n if (ec) {\n return bytes_read;\n }\n\n if (bytes_read == 0) {\n return 0;\n }\n\n obfuscator_->AddData(temp_buffer.data(), bytes_read);\n\n auto deobfuscated = obfuscator_->Deobfuscate();\n if (deobfuscated.has_value()) {\n return boost::asio::buffer_copy(buffers,\n boost::asio::buffer(deobfuscated->data(), deobfuscated->size()));\n }\n }\n }\n\n template \n void async_read_some(\n const MutableBufferSequence& buffers, ReadHandler&& handler) {\n if (!obfuscator_) {\n boost::asio::dispatch(\n strand_, [this, buffers,\n handler = std::forward(handler)]() mutable {\n stream_.async_read_some(buffers, std::move(handler));\n });\n return;\n }\n\n boost::asio::dispatch(strand_, [this, buffers,\n handler = std::forward(\n handler)]() mutable {\n if (obfuscator_->HasPendingData()) {\n auto deobfuscated = obfuscator_->Deobfuscate();\n if (deobfuscated.has_value()) {\n const std::size_t bytes_copied = boost::asio::buffer_copy(\n buffers, boost::asio::buffer(deobfuscated.value()));\n handler(boost::system::error_code{}, bytes_copied);\n return;\n }\n }\n stream_.async_read_some(buffers,\n [this, buffers, handler = std::move(handler)](\n boost::system::error_code ec, std::size_t bytes_read) mutable {\n if (ec || bytes_read == 0) {\n handler(ec, bytes_read);\n return;\n }\n\n if (has_single_buffer(buffers)) {\n const auto& it = boost::asio::buffer_sequence_begin(buffers);\n const boost::asio::mutable_buffer& first_buffer = *it;\n const std::uint8_t* data_ptr =\n static_cast(first_buffer.data());\n\n obfuscator_->AddData(data_ptr, bytes_read);\n\n auto deobfuscated = obfuscator_->Deobfuscate();\n\n if (deobfuscated.has_value()) {\n const std::size_t bytes_copied = boost::asio::buffer_copy(\n buffers, boost::asio::buffer(deobfuscated.value()));\n handler(ec, bytes_copied);\n } else {\n this->async_read_some(buffers, std::move(handler));\n }\n } else {\n std::vector temp_data(bytes_read);\n boost::asio::buffer_copy(boost::asio::buffer(temp_data), buffers);\n obfuscator_->AddData(temp_data.data(), bytes_read);\n\n auto deobfuscated = obfuscator_->Deobfuscate();\n\n if (deobfuscated.has_value()) {\n const std::size_t bytes_copied = boost::asio::buffer_copy(\n buffers, boost::asio::buffer(deobfuscated.value()));\n handler(ec, bytes_copied);\n } else {\n boost::asio::dispatch(strand_,\n [this, buffers,\n handler =\n std::forward(handler)]() mutable {\n this->async_read_some(buffers, std::move(handler));\n });\n }\n }\n });\n });\n }\n\n template \n std::size_t write_some(\n const ConstBufferSequence& buffers, boost::system::error_code& ec) {\n if (!obfuscator_) {\n return stream_.write_some(buffers, ec);\n }\n\n std::vector plain_data(boost::asio::buffer_size(buffers));\n boost::asio::buffer_copy(boost::asio::buffer(plain_data), buffers);\n\n auto obfuscated =\n obfuscator_->Obfuscate(plain_data.data(), plain_data.size());\n\n if (!obfuscated.has_value()) {\n ec = boost::asio::error::eof;\n return 0;\n }\n return stream_.write_some(boost::asio::buffer(obfuscated.value()), ec);\n }\n\n template \n void async_write_some(\n const ConstBufferSequence& buffers, WriteHandler&& handler) {\n if (!obfuscator_) {\n boost::asio::dispatch(strand_,\n [this, buffers,\n handler = std::forward(handler)]() mutable {\n stream_.async_write_some(buffers, std::move(handler));\n });\n return;\n }\n\n const std::size_t total_size = boost::asio::buffer_size(buffers);\n auto plain_data = std::make_shared>(total_size);\n boost::asio::buffer_copy(boost::asio::buffer(*plain_data), buffers);\n\n boost::asio::dispatch(\n strand_, [this, plain_data,\n handler = std::forward(handler)]() mutable {\n auto obfuscated_data =\n obfuscator_->Obfuscate(plain_data->data(), plain_data->size());\n if (!obfuscated_data.has_value()) {\n handler(boost::system::error_code(boost::asio::error::eof), 0);\n return;\n }\n stream_.async_write_some(\n boost::asio::buffer(obfuscated_data.value()), std::move(handler));\n });\n }\n\n template \n auto async_connect(Args&&... args) {\n return stream_.async_connect(std::forward(args)...);\n }\n\n void close() { stream_.close(); }\n\n void close(boost::system::error_code& ec) { stream_.close(ec); }\n\n template \n void set_option(const Option& option) {\n stream_.set_option(option);\n }\n\n void expires_after(std::chrono::steady_clock::duration expiry_time) {\n stream_.expires_after(expiry_time);\n }\n\n void expires_never() { stream_.expires_never(); }\n\n bool is_open() const { return stream_.is_open(); }\n\n auto remote_endpoint() { return stream_.socket().remote_endpoint(); }\n\n auto remote_endpoint(boost::system::error_code& ec) {\n return stream_.socket().remote_endpoint(ec);\n }\n\n auto local_endpoint() { return stream_.socket().local_endpoint(); }\n\n auto local_endpoint(boost::system::error_code& ec) {\n return stream_.socket().local_endpoint(ec);\n }\n\n void set_obfuscator(IObfuscatorSPtr obfuscator) {\n obfuscator_ = std::move(obfuscator);\n }\n\n IObfuscatorSPtr get_obfuscator() const { return obfuscator_; }\n\n protected:\n template \n static bool has_single_buffer(const Sequence& buffers) {\n std::size_t count = 0;\n auto end = boost::asio::buffer_sequence_end(buffers);\n for (auto it = boost::asio::buffer_sequence_begin(buffers); it != end;\n ++it) {\n ++count;\n }\n return count == 1;\n }\n\n private:\n Stream stream_;\n boost::asio::strand strand_;\n IObfuscatorSPtr obfuscator_;\n};\n\n} // namespace fptn::protocol::https::obfuscator\n\nnamespace boost::beast {\n\ntemplate \ninline void teardown(boost::beast::role_type role,\n fptn::protocol::https::obfuscator::TcpStream& stream,\n boost::system::error_code& ec) {\n teardown(role, stream.next_layer(), ec);\n}\n\ntemplate \ninline void async_teardown(boost::beast::role_type role,\n fptn::protocol::https::obfuscator::TcpStream& stream,\n TeardownHandler&& handler) {\n async_teardown(\n role, stream.next_layer(), std::forward(handler));\n}\n\n} // namespace boost::beast\n" }, { "path": "src/fptn-protocol-lib/https/utils/change_cipher_spec.h", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n\nnamespace fptn::protocol::https::utils {\n\ninline std::vector MakeClientChangeCipherSpec() {\n return {0x14, 0x03, 0x03, 0x00, 0x01, 0x01};\n}\n\n} // namespace fptn::protocol::https::utils\n" }, { "path": "src/fptn-protocol-lib/https/utils/tls/tls.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"fptn-protocol-lib/https/utils/tls/tls.h\"\n\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"fptn-protocol-lib/time/time_provider.h\"\n\nnamespace fptn::protocol::https::utils {\n\nconstexpr int kSessionLen = 32;\nconstexpr std::size_t kFptnKeyLength = 4;\nconstexpr int kDecoyHandshakeSessionIDShift = 10;\nconstexpr int kDecoyHandshakeSessionIDShift2 = 14;\n\nstd::string GetSHA1Hash(std::uint32_t number) {\n EVP_MD_CTX* mdctx = EVP_MD_CTX_new();\n if (!mdctx) {\n return {};\n }\n\n const EVP_MD* md = EVP_get_digestbyname(\"SHA1\");\n if (!md) {\n EVP_MD_CTX_free(mdctx);\n return {};\n }\n\n if (!EVP_DigestInit_ex(mdctx, md, nullptr)) {\n EVP_MD_CTX_free(mdctx);\n return {};\n }\n\n if (!EVP_DigestUpdate(mdctx, &number, sizeof(number))) {\n EVP_MD_CTX_free(mdctx);\n return {};\n }\n\n unsigned int outlen = 0;\n unsigned char buffer[EVP_MAX_MD_SIZE] = {0};\n if (!EVP_DigestFinal_ex(mdctx, buffer, &outlen)) {\n EVP_MD_CTX_free(mdctx);\n return {};\n }\n EVP_MD_CTX_free(mdctx);\n return std::string(reinterpret_cast(buffer), outlen);\n}\n\nstd::string GenerateFptnKey(std::uint32_t timestamp) {\n std::string result = GetSHA1Hash(htonl(timestamp));\n if (result.size() > kFptnKeyLength) { // key len\n return result.substr(0, kFptnKeyLength);\n }\n throw boost::beast::system_error(\n boost::beast::error_code(static_cast(::ERR_get_error()),\n boost::asio::error::get_ssl_category()),\n \"Error generate Session ID\");\n}\n\nbool SetDecoyHandshakeSessionID(SSL* ssl) {\n // random\n std::uint8_t session_id[kSessionLen] = {0};\n if (::RAND_bytes(session_id, sizeof(session_id)) != 1) {\n return false;\n }\n\n // copy timestamp\n const auto timestamp = fptn::time::TimeProvider::Instance()->NowTimestamp();\n const std::string key = GenerateFptnKey(timestamp);\n std::memcpy(\n &session_id[kDecoyHandshakeSessionIDShift], key.c_str(), key.size());\n return 0 != ::SSL_set_tls_hello_custom_session_id(\n ssl, session_id, sizeof(session_id));\n}\n\nbool IsDecoyHandshakeSessionID(\n const std::uint8_t* session, std::size_t session_len) {\n (void)session_len;\n char data[kFptnKeyLength] = {0};\n std::memcpy(&data, &session[kDecoyHandshakeSessionIDShift], sizeof(data));\n const std::string recv_key(data, sizeof(data));\n\n const auto now_timestamp =\n fptn::time::TimeProvider::Instance()->NowTimestamp();\n\n constexpr std::uint32_t kTimeShiftSeconds = 10; // ten seconds\n\n const std::uint32_t timestamp = now_timestamp + (kTimeShiftSeconds / 2);\n\n for (std::uint32_t shift = 0; shift <= kTimeShiftSeconds; shift++) {\n const std::string key = GenerateFptnKey(timestamp - shift);\n if (recv_key == key) {\n return true;\n }\n }\n return false;\n}\n\nbool IsDecoyHandshakeSessionID2(\n const std::uint8_t* session, std::size_t session_len) {\n (void)session_len;\n char data[kFptnKeyLength] = {0};\n std::memcpy(&data, &session[kDecoyHandshakeSessionIDShift2], sizeof(data));\n const std::string recv_key(data, sizeof(data));\n\n const auto now_timestamp =\n fptn::time::TimeProvider::Instance()->NowTimestamp();\n\n constexpr std::uint32_t kTimeShiftSeconds = 10; // ten seconds\n\n const std::uint32_t timestamp = now_timestamp + (kTimeShiftSeconds / 2);\n\n for (std::uint32_t shift = 0; shift <= kTimeShiftSeconds; shift++) {\n const std::string key = GenerateFptnKey(timestamp - shift);\n if (recv_key == key) {\n return true;\n }\n }\n return false;\n}\n\nbool SetHandshakeSessionID(SSL* ssl) {\n // random\n std::uint8_t session_id[kSessionLen] = {0};\n if (::RAND_bytes(session_id, sizeof(session_id)) != 1) {\n return false;\n }\n // copy timestamp\n const auto timestamp = fptn::time::TimeProvider::Instance()->NowTimestamp();\n\n const std::string key = GenerateFptnKey(timestamp);\n std::memcpy(&session_id[kSessionLen - key.size()], key.c_str(), key.size());\n\n return 0 != ::SSL_set_tls_hello_custom_session_id(\n ssl, session_id, sizeof(session_id));\n}\n\nbool IsFptnClientSessionID(\n const std::uint8_t* session, std::size_t session_len) {\n char data[kFptnKeyLength] = {0};\n std::memcpy(&data, &session[session_len - sizeof(data)], sizeof(data));\n const std::string recv_key(data, sizeof(data));\n\n const auto now_timestamp =\n fptn::time::TimeProvider::Instance()->NowTimestamp();\n\n constexpr std::uint32_t kTimeShiftSeconds = 10; // ten seconds\n\n const std::uint32_t timestamp = now_timestamp + (kTimeShiftSeconds / 2);\n\n for (std::uint32_t shift = 0; shift <= kTimeShiftSeconds; shift++) {\n const std::string key = GenerateFptnKey(timestamp - shift);\n if (recv_key == key) {\n return true;\n }\n }\n return false;\n}\n\nbool SetHandshakeSni(SSL* ssl, const std::string& sni) {\n // Set SNI (Server Name)\n if (1 != ::SSL_set_tlsext_host_name(ssl, sni.c_str())) {\n throw boost::beast::system_error(\n boost::beast::error_code(static_cast(::ERR_get_error()),\n boost::asio::error::get_ssl_category()),\n fmt::format(R\"(Failed to set SNI \"{}\")\", sni));\n }\n // Add Chrome-like padding (to match packet size)\n SSL_set_options(ssl, SSL_OP_LEGACY_SERVER_CONNECT);\n return true;\n}\n\nSSL_CTX* CreateNewSslCtx() {\n SSL_CTX* handle = ::SSL_CTX_new(::TLS_client_method());\n if (!handle) {\n throw boost::beast::system_error(\n boost::beast::error_code(static_cast(::ERR_get_error()),\n boost::asio::error::get_ssl_category()),\n \"Failed to create SSL context\");\n }\n\n if (0 == ::SSL_CTX_set_min_proto_version(handle, TLS1_2_VERSION)) {\n ::SSL_CTX_free(handle);\n throw boost::beast::system_error(\n boost::beast::error_code(static_cast(::ERR_get_error()),\n boost::asio::error::get_ssl_category()),\n \"Failed to set min TLS version\");\n }\n\n if (0 == ::SSL_CTX_set_max_proto_version(handle, TLS1_3_VERSION)) {\n ::SSL_CTX_free(handle);\n throw boost::beast::system_error(\n boost::beast::error_code(static_cast(::ERR_get_error()),\n boost::asio::error::get_ssl_category()),\n \"Failed to set max TLS version\");\n }\n\n SSL_CTX_set_grease_enabled(handle, 1);\n SSL_CTX_enable_ocsp_stapling(handle);\n SSL_CTX_enable_signed_cert_timestamps(handle);\n\n // Set ciphers ТОЧНО КАК В RUST КОДЕ\n const std::string ciphers_list = ChromeCiphers();\n if (0 == ::SSL_CTX_set_cipher_list(handle, ciphers_list.c_str())) {\n ::SSL_CTX_free(handle);\n throw boost::beast::system_error(\n boost::beast::error_code(static_cast(::ERR_get_error()),\n boost::asio::error::get_ssl_category()),\n \"Failed to set ciphers\");\n }\n\n const char* groups = \"X25519MLKEM768:X25519:secp256r1:secp384r1\";\n SSL_CTX_set1_groups_list(handle, groups);\n\n static unsigned char alpn[] = {\n 0x02, 'h', '2', 0x08, 'h', 't', 't', 'p', '/', '1', '.', '1'};\n if (0 != ::SSL_CTX_set_alpn_protos(handle, alpn, sizeof(alpn))) {\n ::SSL_CTX_free(handle);\n throw boost::beast::system_error(\n boost::beast::error_code(static_cast(::ERR_get_error()),\n boost::asio::error::get_ssl_category()),\n \"Failed to set ALPN\");\n }\n\n const std::string sigalgs_list =\n \"ecdsa_secp256r1_sha256:\"\n \"rsa_pss_rsae_sha256:\"\n \"rsa_pkcs1_sha256:\"\n \"ecdsa_secp384r1_sha384:\"\n \"rsa_pss_rsae_sha384:\"\n \"rsa_pkcs1_sha384:\"\n \"rsa_pss_rsae_sha512:\"\n \"rsa_pkcs1_sha512\";\n\n if (1 != SSL_CTX_set1_sigalgs_list(handle, sigalgs_list.c_str())) {\n ::SSL_CTX_free(handle);\n throw boost::beast::system_error(\n boost::beast::error_code(static_cast(::ERR_get_error()),\n boost::asio::error::get_ssl_category()),\n \"Failed to set signature algorithms\");\n }\n\n SSL_CTX_set_mode(handle, SSL_MODE_RELEASE_BUFFERS);\n return handle;\n}\n\nstd::string ChromeCiphers() {\n return \"TLS_AES_128_GCM_SHA256:\"\n \"TLS_AES_256_GCM_SHA384:\"\n \"TLS_CHACHA20_POLY1305_SHA256:\"\n \"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:\"\n \"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256:\"\n \"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:\"\n \"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:\"\n \"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:\"\n \"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256:\"\n \"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA:\"\n \"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA:\"\n \"TLS_RSA_WITH_AES_128_GCM_SHA256:\"\n \"TLS_RSA_WITH_AES_256_GCM_SHA384:\"\n \"TLS_RSA_WITH_AES_128_CBC_SHA:\"\n \"TLS_RSA_WITH_AES_256_CBC_SHA\";\n}\n\nstd::string GetCertificateMD5Fingerprint(const X509* cert) {\n unsigned char md[MD5_DIGEST_LENGTH] = {};\n if (X509_digest(cert, EVP_md5(), md, nullptr) != 1) {\n SPDLOG_ERROR(\"Failed to compute MD5 digest\");\n return {};\n }\n\n std::stringstream ss;\n // NOLINTNEXTLINE(modernize-loop-convert)\n for (int i = 0; i < MD5_DIGEST_LENGTH; i++) {\n ss << std::hex << std::setw(2) << std::setfill('0')\n << static_cast(md[i]);\n }\n return ss.str();\n}\n\nstd::vector GenerateDecoyTlsHandshake(const std::string& sni) {\n std::vector handshake_data;\n try {\n SSL_CTX* ssl_ctx = CreateNewSslCtx();\n SSL* ssl = ::SSL_new(ssl_ctx);\n\n BIO* bio_out = ::BIO_new(BIO_s_mem());\n BIO* bio_in = ::BIO_new(BIO_s_mem());\n ::SSL_set_bio(ssl, bio_in, bio_out);\n\n SetHandshakeSni(ssl, sni);\n SetDecoyHandshakeSessionID(ssl);\n\n ::SSL_set_connect_state(ssl);\n\n int handshake_result;\n int retry_count = 0;\n constexpr int kMaxRetries = 10;\n\n do {\n handshake_result = ::SSL_do_handshake(ssl);\n\n char* bio_data = nullptr;\n auto bio_length = ::BIO_get_mem_data(bio_out, &bio_data);\n\n if (bio_data && bio_length > 0) {\n handshake_data.insert(\n handshake_data.end(), bio_data, bio_data + bio_length);\n BIO_reset(bio_out);\n }\n retry_count++;\n } while (handshake_result <= 0 &&\n SSL_get_error(ssl, handshake_result) == SSL_ERROR_WANT_WRITE &&\n retry_count < kMaxRetries);\n\n if (handshake_data.empty()) {\n SPDLOG_WARN(\"No handshake data was generated for SNI: {}\", sni);\n } else {\n SPDLOG_INFO(\n \"Successfully generated {} bytes of TLS handshake for SNI: {}\",\n handshake_data.size(), sni);\n }\n ::SSL_free(ssl);\n ::SSL_CTX_free(ssl_ctx);\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\n \"GenerateTlsHandshake exception for SNI {}: {}\", sni, e.what());\n }\n return handshake_data;\n}\n\nstd::optional> GenerateDecoyTlsSessionId() {\n std::array session_id{};\n if (::RAND_bytes(session_id.data(), session_id.size()) != 1) {\n return std::nullopt;\n }\n\n // Get timestamp and generate key\n const auto timestamp = fptn::time::TimeProvider::Instance()->NowTimestamp();\n const std::string key = GenerateFptnKey(timestamp);\n const std::size_t copy_size =\n std::min(key.size(), session_id.size() - kDecoyHandshakeSessionIDShift);\n std::memcpy(session_id.data() + kDecoyHandshakeSessionIDShift, key.c_str(),\n copy_size);\n return session_id;\n}\n\nstd::optional> GenerateDecoyTlsSessionId2() {\n std::array session_id{};\n if (::RAND_bytes(session_id.data(), session_id.size()) != 1) {\n return std::nullopt;\n }\n\n // Get timestamp and generate key\n const auto timestamp = fptn::time::TimeProvider::Instance()->NowTimestamp();\n const std::string key = GenerateFptnKey(timestamp);\n const std::size_t copy_size =\n std::min(key.size(), session_id.size() - kDecoyHandshakeSessionIDShift2);\n std::memcpy(session_id.data() + kDecoyHandshakeSessionIDShift2, key.c_str(),\n copy_size);\n return session_id;\n}\n\n// MAYBE IT WILL REFACTOR\nnamespace {\nstd::unordered_map attach_callbacks;\nstd::mutex attach_callback_mutex;\n} // namespace\n\nvoid AttachCertificateVerificationCallback(\n SSL* ssl, const CertificateVerificationCallback& callback) {\n auto* func_ptr = new CertificateVerificationCallback(callback);\n {\n const std::scoped_lock lock(attach_callback_mutex); // mutex\n attach_callbacks[ssl] = func_ptr;\n }\n\n ::SSL_set_verify(\n ssl, SSL_VERIFY_PEER, [](int preverified, X509_STORE_CTX* ctx) -> int {\n (void)preverified;\n\n const X509* cert = ::X509_STORE_CTX_get_current_cert(ctx);\n if (!cert) {\n return 0;\n }\n\n SSL* ssl = static_cast(::X509_STORE_CTX_get_ex_data(\n ctx, ::SSL_get_ex_data_X509_STORE_CTX_idx()));\n if (!ssl) {\n return 0;\n }\n\n const std::string md5_fingerprint = GetCertificateMD5Fingerprint(cert);\n if (md5_fingerprint.empty()) {\n return 0;\n }\n\n const std::scoped_lock lock(attach_callback_mutex); // mutex\n {\n const auto it = attach_callbacks.find(ssl);\n if (it == attach_callbacks.end()) {\n return 0;\n }\n return (it->second && (*it->second)(md5_fingerprint) ? 1 : 0);\n }\n });\n}\n\nvoid AttachCertificateVerificationCallbackDelete(SSL* ssl) {\n const std::scoped_lock lock(attach_callback_mutex); // mutex\n\n auto it = attach_callbacks.find(ssl);\n if (it != attach_callbacks.end()) {\n delete it->second; // Clean up the allocated callback\n attach_callbacks.erase(it);\n }\n}\n\n} // namespace fptn::protocol::https::utils\n" }, { "path": "src/fptn-protocol-lib/https/utils/tls/tls.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\nnamespace fptn::protocol::https::utils {\n\nstd::string GetSHA1Hash(std::uint32_t number);\nstd::string GenerateFptnKey(std::uint32_t timestamp);\n\nbool SetDecoyHandshakeSessionID(SSL* ssl);\n\n// DEPRECATED\nbool IsDecoyHandshakeSessionID(\n const std::uint8_t* session, std::size_t session_len);\n\n\nbool IsDecoyHandshakeSessionID2(\n const std::uint8_t* session, std::size_t session_len);\n\nbool SetHandshakeSessionID(SSL* ssl);\n\nbool IsFptnClientSessionID(\n const std::uint8_t* session, std::size_t session_len);\n\nbool SetHandshakeSni(SSL* ssl, const std::string& sni);\n\nSSL_CTX* CreateNewSslCtx();\n\nstd::string ChromeCiphers();\n\nstd::string GetCertificateMD5Fingerprint(const X509* cert);\n\nstd::vector GenerateDecoyTlsHandshake(const std::string& sni);\n\n// DEPRECATED\nstd::optional> GenerateDecoyTlsSessionId();\n\nstd::optional> GenerateDecoyTlsSessionId2();\n\n// Callbacks\nusing CertificateVerificationCallback = std::function;\nvoid AttachCertificateVerificationCallback(\n SSL* ssl, const CertificateVerificationCallback& callback);\n\nvoid AttachCertificateVerificationCallbackDelete(SSL* ssl);\n\n} // namespace fptn::protocol::https::utils\n" }, { "path": "src/fptn-protocol-lib/https/websocket_client/websocket_client.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"fptn-protocol-lib/https/websocket_client/websocket_client.h\"\n\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include // NOLINT(build/include_order)\n\n#include \"common/network/utils.h\" // NOLINT(build/include_order)\n\n#include \"fptn-protocol-lib/https/api_client/api_client.h\"\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls2/tls_obfuscator2.h\"\n\nnamespace fptn::protocol::https {\n\nWebsocketClient::WebsocketClient(fptn::common::network::IPv4Address server_ip,\n int server_port,\n fptn::common::network::IPv4Address tun_interface_address_ipv4,\n fptn::common::network::IPv6Address tun_interface_address_ipv6,\n NewIPPacketCallback new_ip_pkt_callback,\n std::string sni,\n std::string access_token,\n std::string expected_md5_fingerprint,\n CensorshipStrategy censorship_strategy,\n OnConnectedCallback on_connected_callback,\n int thread_number)\n : ioc_(thread_number),\n ctx_(https::utils::CreateNewSslCtx()),\n resolver_(boost::asio::make_strand(ioc_)),\n censorship_strategy_(censorship_strategy),\n ws_(ssl_stream_type(\n obfuscator_socket_type(boost::asio::make_strand(ioc_), nullptr),\n ctx_)),\n strand_(boost::asio::make_strand(ioc_)),\n watchdog_timer_(strand_),\n write_channel_(strand_, kMaxSizeOutQueue_),\n server_ip_(std::move(server_ip)),\n server_port_str_(std::to_string(server_port)),\n tun_interface_address_ipv4_(std::move(tun_interface_address_ipv4)),\n tun_interface_address_ipv6_(std::move(tun_interface_address_ipv6)),\n new_ip_pkt_callback_(std::move(new_ip_pkt_callback)),\n sni_(std::move(sni)),\n access_token_(std::move(access_token)),\n expected_md5_fingerprint_(std::move(expected_md5_fingerprint)),\n on_connected_callback_(std::move(on_connected_callback)) {\n auto* ssl = ws_.next_layer().native_handle();\n https::utils::SetHandshakeSni(ssl, sni_);\n https::utils::SetHandshakeSessionID(ssl);\n\n // Set SSL buffer sizes\n SSL_set_mode(ssl, SSL_MODE_RELEASE_BUFFERS);\n\n if (censorship_strategy_ == CensorshipStrategy::kSni) {\n obfuscator_ = nullptr;\n }\n if (censorship_strategy_ == CensorshipStrategy::kTlsObfuscator) {\n obfuscator_ =\n std::make_shared();\n ws_.next_layer().next_layer().set_obfuscator(obfuscator_);\n }\n\n if (censorship_strategy_ == CensorshipStrategy::kSniRealityMode) {\n obfuscator_ = nullptr;\n }\n\n https::utils::AttachCertificateVerificationCallback(\n ssl, [this](const std::string& md5_fingerprint) mutable {\n if (expected_md5_fingerprint_.empty()) {\n return true;\n }\n if (md5_fingerprint == expected_md5_fingerprint_) {\n return true;\n }\n SPDLOG_ERROR(\"Certificate MD5 mismatch. Expected: {}, got: {}.\",\n expected_md5_fingerprint_, md5_fingerprint);\n return false;\n });\n\n ws_.text(false);\n ws_.binary(true);\n ws_.auto_fragment(true);\n ws_.read_message_max(256 * 1024);\n ws_.set_option(boost::beast::websocket::stream_base::timeout::suggested(\n boost::beast::role_type::client));\n}\n\nWebsocketClient::~WebsocketClient() {\n try {\n Stop();\n } catch (...) {\n SPDLOG_WARN(\"Unknown error in ~WebsocketClient\");\n }\n\n // Stop io_context\n try {\n if (!ioc_.stopped()) {\n SPDLOG_INFO(\"Stopping io_context...\");\n ioc_.stop();\n }\n } catch (const boost::system::system_error& err) {\n SPDLOG_ERROR(\"Exception while stopping io_context: {}\", err.what());\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception while stopping io_context\");\n }\n SPDLOG_INFO(\"WebsocketClient removed\");\n}\n\nvoid WebsocketClient::Run() {\n if (running_.exchange(true)) {\n SPDLOG_WARN(\"WebsocketClient is already running\");\n return;\n }\n\n SPDLOG_INFO(\"Connecting to {}:{}\", server_ip_.ToString(), server_port_str_);\n\n auto self = weak_from_this();\n boost::asio::co_spawn(\n ioc_,\n [self]() -> boost::asio::awaitable {\n if (auto shared_self = self.lock()) {\n const bool status = co_await shared_self->RunInternal();\n if (!status) {\n shared_self->Stop();\n }\n }\n },\n boost::asio::detached);\n try {\n ioc_.restart();\n while (running_) {\n ioc_.run_one();\n }\n } catch (...) {\n SPDLOG_WARN(\"Exception while running\");\n }\n}\n\nbool WebsocketClient::Stop() {\n if (!running_) {\n return false;\n }\n\n const std::unique_lock lock(mutex_); // mutex\n\n // cppcheck-suppress identicalConditionAfterEarlyExit\n if (!running_) { // Double-check after acquiring lock\n return false;\n }\n\n SPDLOG_INFO(\"Marked client as stopped and disconnected\");\n\n running_ = false;\n was_connected_ = false;\n\n new_ip_pkt_callback_ = nullptr;\n on_connected_callback_ = nullptr;\n\n boost::system::error_code ec;\n\n try {\n watchdog_timer_.cancel();\n } catch (const boost::system::system_error&) {\n SPDLOG_WARN(\"Cancellation timer error\");\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception while stopping timer\");\n }\n\n try {\n SPDLOG_INFO(\"Emit cancel signal\");\n if (was_inited_) {\n cancel_signal_.emit(boost::asio::cancellation_type::all);\n }\n } catch (const std::exception&) {\n SPDLOG_DEBUG(\"Exception during cancellation\");\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception during cancellation\");\n }\n\n try {\n SPDLOG_INFO(\"Closing write_channel\");\n if (was_inited_) {\n write_channel_.close();\n }\n } catch (const std::exception&) {\n SPDLOG_DEBUG(\"Exception closing write channel\");\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception during closing write channel\");\n }\n\n try {\n SPDLOG_INFO(\"Closing resolver\");\n if (was_inited_) {\n resolver_.cancel();\n }\n } catch (const std::exception&) {\n SPDLOG_DEBUG(\"Exception cancelling resolver\");\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception during closing resolver\");\n }\n\n // Close TCP connection\n try {\n if (was_inited_) {\n SPDLOG_INFO(\"Shutting down TCP socket...\");\n\n auto& tcp = boost::beast::get_lowest_layer(ws_);\n\n boost::asio::socket_base::linger linger(true, 0);\n tcp.socket().set_option(linger);\n\n if (tcp.socket().is_open()) {\n tcp.socket().shutdown(boost::asio::ip::tcp::socket::shutdown_both, ec);\n if (ec && ec != boost::asio::error::not_connected) {\n SPDLOG_WARN(\"TCP socket shutdown error: {}\", ec.message());\n } else {\n SPDLOG_INFO(\"TCP socket shutdown successfully\");\n }\n\n tcp.socket().close(ec);\n if (ec) {\n SPDLOG_WARN(\"TCP socket close error: {}\", ec.message());\n } else {\n SPDLOG_INFO(\"TCP socket closed successfully\");\n }\n }\n }\n } catch (const boost::system::system_error& err) {\n SPDLOG_ERROR(\"Exception during TCP shutdown: {}\", err.what());\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception during TCP shutdown\");\n }\n\n // Close SSL\n try {\n if (was_inited_) {\n SPDLOG_INFO(\"Shutting down SSL layer...\");\n auto& ssl = ws_.next_layer();\n if (ssl.native_handle()) {\n // More robust SSL shutdown\n ::SSL_set_quiet_shutdown(ssl.native_handle(), 1);\n ::SSL_shutdown(ssl.native_handle());\n }\n ssl.shutdown(ec);\n }\n } catch (const boost::system::system_error& err) {\n SPDLOG_ERROR(\"Exception during SSL shutdown: {}\", err.what());\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Unexpected exception during SSL shutdown: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception occurred during SSL shutdown\");\n }\n\n if (auto* ssl = ws_.next_layer().native_handle()) {\n https::utils::AttachCertificateVerificationCallbackDelete(ssl);\n }\n\n was_stopped_ = true;\n SPDLOG_INFO(\"WebSocket client stopped successfully\");\n\n return true;\n}\n\nbool WebsocketClient::Send(fptn::common::network::IPPacketPtr packet) {\n if (!running_ || !was_connected_) {\n return false;\n }\n try {\n return write_channel_.try_send(\n boost::system::error_code(), std::move(packet));\n } catch (...) {\n return false;\n }\n}\n\nbool WebsocketClient::IsStarted() const { return running_ && was_connected_; }\n\nboost::asio::awaitable WebsocketClient::RunInternal() {\n try {\n const bool connected = co_await Connect();\n if (!connected) {\n co_return false;\n }\n\n // Optimize socket buffer sizes\n try {\n boost::beast::get_lowest_layer(ws_).socket().set_option(\n boost::asio::socket_base::receive_buffer_size(1 * 1024 * 1024));\n boost::beast::get_lowest_layer(ws_).socket().set_option(\n boost::asio::socket_base::send_buffer_size(1 * 1024 * 1024));\n } catch (const boost::system::system_error& e) {\n SPDLOG_WARN(\"Failed to set socket options: {}\", e.what());\n }\n\n boost::beast::get_lowest_layer(ws_).expires_after(std::chrono::hours(24));\n\n // Start timer\n StartWatchdog();\n\n // Start reader and sender\n was_inited_ = true;\n auto self = shared_from_this();\n boost::asio::co_spawn(\n strand_, [self]() { return self->RunReader(); }, boost::asio::detached);\n boost::asio::co_spawn(\n strand_, [self]() { return self->RunSender(); }, boost::asio::detached);\n co_return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"RunInternal exception: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception while running\");\n }\n co_return false;\n}\n\nboost::asio::awaitable WebsocketClient::Connect() {\n try {\n boost::system::error_code ec;\n\n // DNS resolution\n boost::beast::get_lowest_layer(ws_).expires_after(std::chrono::seconds(30));\n const auto results = co_await resolver_.async_resolve(server_ip_.ToString(),\n server_port_str_,\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n if (ec) {\n SPDLOG_ERROR(\"Resolve error: {}\", ec.message());\n co_return false;\n }\n\n // TCP connect\n co_await boost::beast::get_lowest_layer(ws_).async_connect(\n results, boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n if (ec) {\n SPDLOG_ERROR(\"Connect error: {}\", ec.message());\n co_return false;\n }\n\n auto& socket = boost::beast::get_lowest_layer(ws_).socket();\n if (!socket.is_open()) {\n SPDLOG_ERROR(\"Socket not open after connect\");\n co_return false;\n }\n\n const auto remote_ep = socket.remote_endpoint(ec);\n if (ec) {\n SPDLOG_ERROR(\"Socket reported connected but remote_endpoint() failed: {}\",\n ec.message());\n co_return false;\n }\n\n SPDLOG_INFO(\"Successfully connected to {}:{}\",\n remote_ep.address().to_string(), remote_ep.port());\n\n // TCP options\n socket.set_option(boost::asio::ip::tcp::no_delay(true));\n socket.set_option(boost::asio::socket_base::reuse_address(true));\n\n // Optimize socket buffers\n try {\n constexpr int kBufferSize = 4 * 1024 * 1024;\n socket.set_option(\n boost::asio::socket_base::receive_buffer_size(kBufferSize));\n socket.set_option(\n boost::asio::socket_base::send_buffer_size(kBufferSize));\n } catch (...) {\n SPDLOG_WARN(\"Failed to set socket buffer sizes in Connect()\");\n }\n\n // Reality Mode: Enhanced stealth connection protocol\n // First, establishes a genuine TLS handshake as a decoy to bypass deep\n // packet inspection Then resets the connection state and activates\n // obfuscation for the real encrypted tunnel This dual-handshake approach\n // makes traffic analysis significantly more difficult\n if (IsRealityModeWithFakeHandshake(censorship_strategy_)) {\n const bool status = co_await PerformFakeHandshake2();\n if (!status) {\n co_return false;\n }\n // For Reality Mode we use TLS obfuscator after fake handshake\n // This provides additional encryption layer for the real connection\n ws_.next_layer().next_layer().set_obfuscator(\n std::make_shared());\n } else if (obfuscator_ != nullptr) { // Set obfuscator\n ws_.next_layer().next_layer().set_obfuscator(obfuscator_);\n }\n\n // SSL handshake\n boost::beast::get_lowest_layer(ws_).expires_after(std::chrono::seconds(10));\n\n // timeout\n co_await boost::asio::steady_timer{\n co_await boost::asio::this_coro::executor,\n std::chrono::milliseconds(150)}\n .async_wait(boost::asio::use_awaitable);\n\n co_await ws_.next_layer().async_handshake(\n boost::asio::ssl::stream_base::client,\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n\n if (ec) {\n SPDLOG_ERROR(\"SSL handshake error: {}\", ec.message());\n co_return false;\n }\n\n // CLEAN WEBSOCKET\n common::network::CleanSocket(socket);\n common::network::CleanSsl(ws_.next_layer().native_handle());\n\n // Reset obfuscator after TLS-handshake\n ws_.next_layer().next_layer().set_obfuscator(nullptr);\n\n // timeout\n co_await boost::asio::steady_timer{\n co_await boost::asio::this_coro::executor,\n std::chrono::milliseconds(150)}\n .async_wait(boost::asio::use_awaitable);\n\n SPDLOG_INFO(\"SSL handshake completed\");\n\n // WebSocket connection options\n try {\n boost::beast::websocket::stream_base::timeout timeout_option;\n timeout_option.handshake_timeout = std::chrono::seconds(10);\n timeout_option.idle_timeout = std::chrono::seconds(10);\n timeout_option.keep_alive_pings = true;\n ws_.set_option(timeout_option);\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Failed to set timeout: {}\", e.what());\n }\n // WebSocket handshake\n ws_.set_option(boost::beast::websocket::stream_base::decorator(\n [this](boost::beast::websocket::request_type& req) {\n req.set(\"Authorization\", \"Bearer \" + access_token_);\n req.set(\"ClientIP\", tun_interface_address_ipv4_.ToString());\n req.set(\"ClientIPv6\", tun_interface_address_ipv6_.ToString());\n req.set(\"Client-Agent\",\n fmt::format(\"FptnClient({}/{})\", FPTN_USER_OS, FPTN_VERSION));\n }));\n // Websocket handshake\n co_await ws_.async_handshake(server_ip_.ToString(), kUrlWebSocket_,\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n if (ec) {\n SPDLOG_ERROR(\"WebSocket handshake error: {}\", ec.message());\n co_return false;\n }\n\n was_connected_ = true;\n SPDLOG_INFO(\"WebSocket connection established successfully\");\n\n if (on_connected_callback_) {\n on_connected_callback_();\n }\n\n // WebSocket options\n try {\n boost::beast::websocket::stream_base::timeout timeout_option;\n timeout_option.handshake_timeout = std::chrono::seconds(10);\n timeout_option.idle_timeout = std::chrono::seconds(4);\n timeout_option.keep_alive_pings = true;\n ws_.set_option(timeout_option);\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Failed to set timeout: {}\", e.what());\n }\n\n // timeout\n co_await boost::asio::steady_timer{\n co_await boost::asio::this_coro::executor,\n std::chrono::milliseconds(10)}\n .async_wait(boost::asio::use_awaitable);\n\n co_return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Connect exception: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception\");\n }\n co_return false;\n}\n\nboost::asio::awaitable WebsocketClient::RunReader() {\n boost::beast::flat_buffer buffer;\n buffer.reserve(4 * 1024 * 1024);\n try {\n boost::system::error_code ec;\n while (running_ && was_connected_ && ws_.is_open()) {\n co_await ws_.async_read(\n buffer, boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n\n if (ec) {\n if (ec != boost::beast::websocket::error::closed) {\n SPDLOG_DEBUG(\"WebSocket read error: {}\", ec.message());\n }\n break;\n }\n if (!buffer.size()) {\n continue;\n }\n try {\n auto raw_ip = protobuf::GetProtoPayload(buffer);\n if (raw_ip.has_value()) {\n auto packet =\n fptn::common::network::IPPacket::Parse(std::move(raw_ip.value()));\n if (running_ && packet && new_ip_pkt_callback_) {\n new_ip_pkt_callback_(std::move(packet));\n }\n }\n } catch (const std::exception& e) {\n SPDLOG_WARN(\"IP packet error: {}\", e.what());\n }\n buffer.consume(buffer.size());\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"RunReader exception: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"RunReader unknown exception\");\n }\n was_connected_ = false;\n co_return;\n}\n\nboost::asio::awaitable WebsocketClient::RunSender() {\n try {\n while (running_ && was_connected_ && ws_.is_open()) {\n auto [ec, packet] = co_await write_channel_.async_receive(\n boost::asio::bind_cancellation_slot(cancel_signal_.slot(),\n boost::asio::as_tuple(boost::asio::use_awaitable)));\n\n if (packet != nullptr && running_ && ws_.is_open() && !ec) {\n auto msg =\n fptn::protocol::protobuf::CreateProtoPayload(std::move(packet));\n if (msg.has_value()) {\n co_await ws_.async_write(boost::asio::buffer(std::move(msg.value())),\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n }\n }\n\n if (ec) {\n SPDLOG_ERROR(\"WebSocket error: {}\", ec.message());\n break;\n }\n }\n } catch (const boost::system::system_error& err) {\n if (err.code() != boost::asio::error::operation_aborted) {\n SPDLOG_ERROR(\"RunSender error: {}\", err.what());\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"RunSender exception: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"RunSender unknown exception\");\n }\n was_connected_ = false;\n co_return;\n}\n\nboost::asio::awaitable WebsocketClient::PerformFakeHandshake2() {\n try {\n boost::system::error_code ec;\n auto& tcp_layer = boost::beast::get_lowest_layer(ws_);\n auto& tcp_socket = tcp_layer.socket();\n\n SPDLOG_INFO(\"Fake TLS handshake started for SNI: {}\", sni_);\n\n /* Send client hello */\n const auto client_hello = GenerateHandshakePacket();\n if (client_hello.empty()) {\n SPDLOG_WARN(\"Failed to generate ClientHello for SNI: {}\", sni_);\n co_return false;\n }\n const std::size_t client_hello_bytes_size =\n co_await boost::asio::async_write(tcp_socket,\n boost::asio::buffer(client_hello),\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n if (ec) {\n SPDLOG_ERROR(\"Failed to send ClientHello to {}: {}\", sni_, ec.message());\n co_return false;\n }\n if (client_hello_bytes_size != client_hello.size()) {\n SPDLOG_ERROR(\"Error ClientHello sent: {} of {} bytes\",\n client_hello_bytes_size, client_hello.size());\n co_return false;\n }\n\n /* Wait for server answer */\n const auto server_hello =\n co_await common::network::WaitForServerTlsHelloAsync(tcp_socket);\n if (!server_hello.has_value()) {\n SPDLOG_ERROR(\"Failed to receive ServerHello from {}\", sni_);\n co_return false;\n }\n\n /* Send change cipher spec */\n const auto change_cipher_spec =\n fptn::protocol::https::utils::MakeClientChangeCipherSpec();\n const std::size_t change_cipher_spec_size =\n co_await boost::asio::async_write(tcp_socket,\n boost::asio::buffer(change_cipher_spec),\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n if (ec) {\n SPDLOG_ERROR(\"Failed to send ClientHello to {}: {}\", sni_, ec.message());\n co_return false;\n }\n if (change_cipher_spec_size != change_cipher_spec.size()) {\n SPDLOG_ERROR(\"Failed to send ClientHello to {}: {}\",\n change_cipher_spec_size, change_cipher_spec.size());\n co_return false;\n }\n\n // timeout\n boost::asio::steady_timer timer(co_await boost::asio::this_coro::executor,\n std::chrono::milliseconds(150));\n co_await timer.async_wait(boost::asio::use_awaitable);\n\n SPDLOG_INFO(\n \"Fake TLS handshake completed for {}, received {} bytes from server\",\n sni_, server_hello.value().size());\n co_return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Fake TLS handshake exception for {}: {}\", sni_, e.what());\n }\n co_return false;\n}\n\nvoid WebsocketClient::StartWatchdog() {\n if (!running_) {\n return;\n }\n\n constexpr std::chrono::milliseconds kTimeout(300);\n watchdog_timer_.expires_after(kTimeout);\n watchdog_timer_.async_wait([self = weak_from_this()](\n const boost::system::error_code& ec) {\n if (auto shared_self = self.lock()) {\n if (!ec && shared_self->running_) {\n // cppcheck-suppress knownConditionTrueFalse\n if (!shared_self->was_connected_.load() && shared_self->running_) {\n SPDLOG_INFO(\"Watchdog detected disconnected state, calling Stop()\");\n shared_self->Stop();\n } else {\n shared_self->StartWatchdog();\n }\n }\n }\n });\n}\n\nstd::vector WebsocketClient::GenerateHandshakePacket() const {\n auto builder = camouflage::tls::Builder::Create();\n switch (censorship_strategy_) {\n /* Chrome */\n case CensorshipStrategy::kSniRealityModeChrome147:\n builder.GoogleChrome(\n camouflage::tls::google_chrome::Version::kV_147_0_7727_56);\n break;\n case CensorshipStrategy::kSniRealityModeChrome146:\n builder.GoogleChrome(\n camouflage::tls::google_chrome::Version::kV_146_0_7680_178);\n break;\n case CensorshipStrategy::kSniRealityModeChrome145:\n builder.GoogleChrome(\n camouflage::tls::google_chrome::Version::kV_145_0_7632_46);\n break;\n /* Firefox */\n case CensorshipStrategy::kSniRealityModeFirefox149:\n builder.Firefox(camouflage::tls::firefox::Version::kV_149_0);\n break;\n /* Yandex */\n case CensorshipStrategy::kSniRealityModeYandex26:\n builder.YandexBrowser(\n camouflage::tls::yandex_browser::Version::kV_26_3_3_881);\n break;\n case CensorshipStrategy::kSniRealityModeYandex25:\n builder.YandexBrowser(\n camouflage::tls::yandex_browser::Version::kV_25_8_3_828);\n break;\n case CensorshipStrategy::kSniRealityModeYandex24:\n builder.YandexBrowser(\n camouflage::tls::yandex_browser::Version::kV_24_12_0_1772);\n break;\n /* Safari */\n case CensorshipStrategy::kSniRealityModeSafari26:\n builder.Safari(camouflage::tls::safari::Version::kV_26_4);\n break;\n /* Default */\n default:\n SPDLOG_DEBUG(\"Using fallback handshake generator for SNI: {}\", sni_);\n return utils::GenerateDecoyTlsHandshake(sni_);\n }\n\n const auto session_id = utils::GenerateDecoyTlsSessionId2();\n if (!session_id.has_value()) {\n SPDLOG_WARN(\"Session ID generation failed\");\n return utils::GenerateDecoyTlsHandshake(sni_);\n }\n\n const auto handshake =\n builder.SetSNI(sni_).SetSessionId(session_id.value()).Generate();\n if (!handshake.has_value()) {\n SPDLOG_WARN(\n \"Handshake generation failed for SNI: {}, using fallback\", sni_);\n return utils::GenerateDecoyTlsHandshake(sni_);\n }\n\n SPDLOG_INFO(\"Handshake generated: SNI={}, size={} bytes\", sni_,\n handshake->handshake_packet_size);\n\n return std::vector(handshake->handshake_packet,\n handshake->handshake_packet + handshake->handshake_packet_size);\n}\n\n} // namespace fptn::protocol::https\n" }, { "path": "src/fptn-protocol-lib/https/websocket_client/websocket_client.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \"common/network/ip_address.h\"\n#include \"common/network/ip_packet.h\"\n\n#include \"fptn-protocol-lib/https/censorship_strategy.h\"\n#include \"fptn-protocol-lib/https/obfuscator/tcp_stream/tcp_stream.h\"\n#include \"fptn-protocol-lib/https/utils/tls/tls.h\"\n#include \"fptn-protocol-lib/protobuf/protocol.h\"\n\nnamespace fptn::protocol::https {\n\nclass WebsocketClient : public std::enable_shared_from_this {\n public:\n using NewIPPacketCallback =\n std::function;\n using OnConnectedCallback = std::function;\n\n explicit WebsocketClient(fptn::common::network::IPv4Address server_ip,\n int server_port,\n fptn::common::network::IPv4Address tun_interface_address_ipv4,\n fptn::common::network::IPv6Address tun_interface_address_ipv6,\n NewIPPacketCallback new_ip_pkt_callback,\n std::string sni,\n std::string access_token,\n std::string expected_md5_fingerprint,\n CensorshipStrategy censorship_strategy,\n OnConnectedCallback on_connected_callback = nullptr,\n int thread_number = 4);\n\n virtual ~WebsocketClient();\n\n WebsocketClient(const WebsocketClient&) = delete;\n WebsocketClient& operator=(const WebsocketClient&) = delete;\n WebsocketClient(WebsocketClient&&) = delete;\n WebsocketClient& operator=(WebsocketClient&&) = delete;\n\n void Run();\n bool Stop();\n bool Send(fptn::common::network::IPPacketPtr packet);\n bool IsStarted() const;\n\n protected:\n boost::asio::awaitable RunInternal();\n boost::asio::awaitable RunReader();\n boost::asio::awaitable RunSender();\n boost::asio::awaitable Connect();\n\n boost::asio::awaitable PerformFakeHandshake2();\n\n void StartWatchdog();\n\n std::vector GenerateHandshakePacket() const;\n\n private:\n const std::string kUrlWebSocket_ = \"/fptn\";\n const std::size_t kMaxSizeOutQueue_ = 128;\n\n mutable std::mutex mutex_;\n std::atomic running_{false};\n std::atomic was_stopped_{false};\n std::atomic was_inited_{false};\n std::atomic was_connected_{false};\n\n boost::asio::io_context ioc_;\n boost::asio::ssl::context ctx_;\n boost::asio::ip::tcp::resolver resolver_;\n\n const CensorshipStrategy censorship_strategy_;\n\n // TCP -> obfuscator -> SSL -> WebSocket\n using tcp_stream_type = boost::beast::tcp_stream;\n using obfuscator_socket_type = obfuscator::TcpStream;\n using ssl_stream_type = boost::beast::ssl_stream;\n using websocket_type = boost::beast::websocket::stream;\n\n websocket_type ws_;\n\n boost::asio::strand strand_;\n\n boost::asio::steady_timer watchdog_timer_;\n\n boost::asio::experimental::concurrent_channel\n write_channel_;\n\n const fptn::common::network::IPv4Address server_ip_;\n const std::string server_port_str_;\n\n const fptn::common::network::IPv4Address tun_interface_address_ipv4_;\n const fptn::common::network::IPv6Address tun_interface_address_ipv6_;\n\n NewIPPacketCallback new_ip_pkt_callback_;\n\n const std::string sni_;\n const std::string access_token_;\n const std::string expected_md5_fingerprint_;\n\n OnConnectedCallback on_connected_callback_;\n\n boost::asio::cancellation_signal cancel_signal_;\n\n obfuscator::IObfuscatorSPtr obfuscator_;\n};\n\nusing WebsocketClientSPtr = std::shared_ptr;\n\n} // namespace fptn::protocol::https\n" }, { "path": "src/fptn-protocol-lib/protobuf/protocol.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"fptn-protocol-lib/protobuf/protocol.h\"\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_packet.h\"\n#include \"common/utils/utils.h\"\n\nnamespace fptn::protocol::protobuf {\nProtoPayloadOpt GetProtoPayload(const boost::beast::flat_buffer& buffer) {\n const std::size_t total_size = buffer.size();\n if (total_size == 0) {\n SPDLOG_ERROR(\"Failed to parse Protobuf message: empty buffer\");\n return std::nullopt;\n }\n\n const void* data_ptr = static_cast(buffer.cdata().data());\n\n fptn::protocol::Message message;\n if (!message.ParseFromArray(data_ptr, static_cast(total_size))) {\n SPDLOG_ERROR(\"Failed to parse Protobuf message: parse error\");\n return std::nullopt;\n }\n\n if (message.protocol_version() != FPTN_PROTOBUF_PROTOCOL_VERSION) {\n SPDLOG_ERROR(\n \"Unsupported protocol version: {}\", message.protocol_version());\n return std::nullopt;\n }\n\n switch (message.msg_type()) {\n case fptn::protocol::MSG_IP_PACKET:\n if (message.has_packet()) {\n const auto& payload = message.packet().payload();\n std::vector result;\n result.reserve(payload.size());\n result.assign(payload.begin(), payload.end());\n return result;\n }\n SPDLOG_ERROR(\"Malformed IP packet: no packet field\");\n break;\n case fptn::protocol::MSG_ERROR:\n if (message.has_error()) {\n SPDLOG_ERROR(\"Message error: {}\", message.error().error_msg());\n } else {\n SPDLOG_ERROR(\"Malformed error message: no error field\");\n }\n break;\n default:\n SPDLOG_ERROR(\"Unknown message type\");\n }\n return std::nullopt;\n}\n\nProtoPayloadOpt CreateProtoPayload(fptn::common::network::IPPacketPtr packet) {\n if (!packet) {\n SPDLOG_ERROR(\"Cannot create proto payload: packet is null\");\n return std::nullopt;\n }\n\n fptn::protocol::Message message;\n message.set_protocol_version(FPTN_PROTOBUF_PROTOCOL_VERSION);\n message.set_msg_type(fptn::protocol::MSG_IP_PACKET);\n\n const auto* raw_packet = packet->GetRawPacket();\n if (!raw_packet) {\n SPDLOG_ERROR(\"Cannot create proto payload: raw packet is null\");\n return std::nullopt;\n }\n\n const void* data = raw_packet->getRawData();\n const auto current_size =\n static_cast(raw_packet->getRawDataLen());\n\n if (!data || current_size == 0) {\n SPDLOG_ERROR(\"Cannot create proto payload: invalid packet data\");\n return std::nullopt;\n }\n\n message.mutable_packet()->set_payload(data, current_size);\n\n#ifdef FPTN_ENABLE_PACKET_PADDING\n /**\n * Fill with random data to prevent issues related to TLS-inside-TLS.\n */\n if (current_size < FPTN_IP_PACKET_MAX_SIZE) {\n constexpr std::size_t kMaxPaddingBytes = FPTN_IP_PACKET_MAX_SIZE;\n const std::size_t available_space = FPTN_IP_PACKET_MAX_SIZE - current_size;\n const std::size_t max_padding = std::min(kMaxPaddingBytes, available_space);\n\n if (max_padding > 0) {\n static thread_local std::mt19937 gen{std::random_device {}()};\n std::uniform_int_distribution dist(0, max_padding);\n\n const std::size_t padding_size = dist(gen);\n if (padding_size > 0) {\n std::string padding_buffer;\n padding_buffer.resize(padding_size);\n\n fptn::common::utils::GenerateRandomBytes(\n reinterpret_cast(padding_buffer.data()),\n padding_size);\n\n message.mutable_packet()->set_padding_data(\n padding_buffer.data(), padding_size);\n }\n }\n }\n#endif\n\n const std::size_t estimated_size = message.ByteSizeLong();\n if (estimated_size == 0) {\n SPDLOG_ERROR(\"Failed to serialize Message: estimated size is 0\");\n return std::nullopt;\n }\n\n std::vector serialized_data(estimated_size);\n if (!message.SerializeToArray(\n serialized_data.data(), static_cast(estimated_size))) {\n SPDLOG_ERROR(\"Failed to serialize Message.\");\n return std::nullopt;\n }\n return serialized_data;\n}\n\n} // namespace fptn::protocol::protobuf\n" }, { "path": "src/fptn-protocol-lib/protobuf/protocol.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n\n#include \n\n#include \"common/network/ip_packet.h\"\n#include \"common/utils/utils.h\"\n\nnamespace fptn::protocol::protobuf {\n\nusing ProtoPayloadOpt = std::optional>;\n\nProtoPayloadOpt GetProtoPayload(const boost::beast::flat_buffer& buffer);\nProtoPayloadOpt CreateProtoPayload(fptn::common::network::IPPacketPtr packet);\n} // namespace fptn::protocol::protobuf\n" }, { "path": "src/fptn-protocol-lib/protobuf/protocol.proto", "content": "syntax = \"proto3\";\n\npackage fptn.protocol;\noption java_package = \"org.fptn.protocol\";\n\n\nenum MessageType {\n MSG_ERROR = 0;\n MSG_IP_PACKET = 1;\n}\n\nenum ErrorType {\n ERROR_DEFAULT = 0;\n ERROR_WRONG_VERSION = 1;\n ERROR_SESSION_EXPIRED = 2;\n}\n\nmessage ErrorMessage {\n ErrorType error_type = 1;\n string error_msg = 2;\n}\n\nmessage IPPacket {\n bytes payload = 1;\n bytes padding_data = 2;\n}\n\nmessage Message {\n int32 protocol_version = 1;\n MessageType msg_type = 2;\n\n oneof message_content {\n ErrorMessage error = 3;\n IPPacket packet = 4;\n }\n}\n" }, { "path": "src/fptn-protocol-lib/time/time_provider.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"fptn-protocol-lib/time/time_provider.h\"\n\n#include \n#include \n\n#include \n#include // NOLINT(build/include_order)\n\nnamespace fptn::time {\n\nTimeProvider::TimeProvider(NtpServers servers)\n : servers_(std::move(servers)), offset_seconds_(0) {\n SyncWithNtp();\n}\n\nstd::string TimeProvider::Rfc7231Date() {\n const std::uint32_t timestamp = NowTimestamp();\n const auto now = static_cast(timestamp);\n char buf[128] = {0};\n#ifdef _WIN32\n std::tm tm{};\n if (gmtime_s(&tm, &now) == 0) {\n if (std::strftime(buf, sizeof(buf), \"%a, %d %b %Y %H:%M:%S GMT\", &tm)) {\n return std::string(buf);\n }\n }\n#else\n std::tm tm{};\n if (gmtime_r(&now, &tm)) {\n if (std::strftime(buf, sizeof(buf), \"%a, %d %b %Y %H:%M:%S GMT\", &tm)) {\n return std::string(buf);\n }\n }\n#endif\n return {};\n}\n\nstd::int32_t TimeProvider::OffsetSeconds() const {\n return offset_seconds_.load();\n}\n\nstd::uint32_t TimeProvider::NowTimestamp() {\n const std::scoped_lock lock(mutex_); // mutex\n\n const auto now = std::chrono::steady_clock::now();\n if (now - last_sync_time_.load() > kSyncInterval_) {\n Refresh();\n }\n\n return static_cast(\n std::time(nullptr) + offset_seconds_.load());\n}\n\nbool TimeProvider::SyncWithNtp() {\n const std::scoped_lock lock(mutex_); // mutex\n\n return Refresh();\n}\n\nbool TimeProvider::Refresh() {\n for (const auto& [server, port] : servers_) {\n try {\n ntp::NTPClient ntp_client(server, port);\n if (const auto epoch_server_ms = ntp_client.request_time()) {\n const auto server_timestamp =\n static_cast(epoch_server_ms / 1000);\n const auto client_timestamp =\n static_cast(std::time(nullptr));\n offset_seconds_ =\n static_cast(server_timestamp - client_timestamp);\n last_sync_time_ = std::chrono::steady_clock::now();\n SPDLOG_INFO(\n \"Successfully synchronized with NTP server '{}'. \"\n \"Server timestamp: {}, \"\n \"local timestamp: {}, \"\n \"calculated offset: {} seconds\",\n server, server_timestamp, client_timestamp, offset_seconds_.load());\n return true;\n }\n } catch (...) {\n SPDLOG_WARN(\"Unknown error during NTP request to {}:{}\", server, port);\n }\n }\n SPDLOG_ERROR(\n \"Failed to get time from NTP server. \"\n \"Using local system time without synchronization\");\n return false;\n}\n\n} // namespace fptn::time\n" }, { "path": "src/fptn-protocol-lib/time/time_provider.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\nnamespace fptn::time {\n\nusing NtpServers = std::vector>;\n\nclass TimeProvider final {\n public:\n static TimeProvider* Instance() {\n static TimeProvider provider;\n return &provider;\n }\n\n std::string Rfc7231Date();\n std::int32_t OffsetSeconds() const;\n std::uint32_t NowTimestamp();\n bool SyncWithNtp();\n\n protected:\n explicit TimeProvider(\n NtpServers servers = {\n {\"pool.ntp.org\", 123},\n {\"ru.pool.ntp.org\", 123},\n {\"ntp.ix.ru\", 123}\n });\n bool Refresh();\n\n private:\n const std::chrono::hours kSyncInterval_{1};\n\n mutable std::mutex mutex_;\n const NtpServers servers_;\n\n std::atomic offset_seconds_;\n std::atomic last_sync_time_;\n};\n\n} // namespace fptn::time\n" }, { "path": "src/fptn-server/.gitignore", "content": "keys/\ntmp/" }, { "path": "src/fptn-server/CMakeLists.txt", "content": "project(fptn-server)\n\ninclude_directories(${CMAKE_CURRENT_SOURCE_DIR})\ninclude_directories(\"${CMAKE_CURRENT_BINARY_DIR}/depends/protobuf/fptn_protocol/\")\n\nif(APPLE)\n set(CMAKE_CXX_STANDARD 20)\nelse()\n add_definitions(-DBOOST_ASIO_HAS_CO_AWAIT)\n add_definitions(-DBOOST_ASIO_HAS_CO_SPAWN)\n add_definitions(-DBOOST_ASIO_HAS_COROUTINES)\n set(CMAKE_INCLUDE_CURRENT_DIR ON)\n set(CMAKE_CXX_STANDARD 20)\n set(CMAKE_CXX_STANDARD_REQUIRED ON)\n if(CMAKE_CXX_COMPILER_ID STREQUAL \"Clang\")\n set(CMAKE_CXX_FLAGS \"${CMAKE_CXX_FLAGS} -Wno-unused-command-line-argumen\")\n endif()\nendif()\n\nfind_package(Boost REQUIRED COMPONENTS asio coroutines future process locale)\nfind_package(ZLIB REQUIRED)\nfind_package(OpenSSL REQUIRED)\nfind_package(argparse REQUIRED)\nfind_package(spdlog REQUIRED)\nfind_package(fmt REQUIRED)\nfind_package(PcapPlusPlus REQUIRED)\nfind_package(nlohmann_json REQUIRED)\nfind_package(jwt-cpp REQUIRED)\nfind_package(prometheus-cpp REQUIRED)\n\n\n# Include Boost directory\ninclude_directories(${Boost_INCLUDE_DIRS})\n\nadd_executable(\n \"${PROJECT_NAME}\"\n fptn-server.cpp\n nat/table.h\n nat/table.cpp\n client/session.h\n client/session.cpp\n network/virtual_interface.h\n network/virtual_interface.cpp\n traffic_shaper/leaky_bucket.h\n traffic_shaper/leaky_bucket.cpp\n routing/iptables.h\n routing/iptables.cpp\n web/listener/listener.h\n web/listener/listener.cpp\n web/session/session.h\n web/session/session.cpp\n web/server.h\n web/server.cpp\n web/handshake/handshake_cache_manager.h\n web/handshake/handshake_cache_manager.cpp\n filter/manager.h\n filter/manager.cpp\n filter/filters/base_filter.h\n filter/filters/antiscan/antiscan.h\n filter/filters/antiscan/antiscan.cpp\n filter/filters/bittorrent/bittorrent.h\n filter/filters/bittorrent/bittorrent.cpp\n vpn/manager.h\n vpn/manager.cpp\n statistic/metrics.h\n statistic/metrics.cpp\n config/command_line_config.cpp\n config/command_line_config.h\n user/user_manager.cpp\n user/user_manager.h)\n\ntarget_link_libraries(\n \"${PROJECT_NAME}\"\n PRIVATE ZLIB::ZLIB\n Boost::boost\n Boost::random\n Boost::filesystem\n Boost::process\n Boost::locale\n OpenSSL::SSL\n OpenSSL::Crypto\n argparse::argparse\n nlohmann_json::nlohmann_json\n jwt-cpp::jwt-cpp\n spdlog::spdlog\n fmt::fmt\n PcapPlusPlus::PcapPlusPlus\n tuntap++\n fptn-protocol-lib_static\n prometheus-cpp::prometheus-cpp)\n" }, { "path": "src/fptn-server/client/session.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"client/session.h\"\n\n#include \n#include \n\nusing fptn::client::Session;\nusing fptn::common::network::IPv4Address;\nusing fptn::common::network::IPv6Address;\n\nSession::Session(ClientID client_id,\n std::string user_name,\n IPv4Address client_ipv4,\n IPv4Address fake_client_ipv4,\n IPv6Address client_ipv6,\n IPv6Address fake_client_ipv6,\n fptn::traffic_shaper::LeakyBucketSPtr to_client,\n fptn::traffic_shaper::LeakyBucketSPtr from_client)\n : client_id_(client_id),\n user_name_(std::move(user_name)),\n client_ipv4_(std::move(client_ipv4)),\n fake_client_ipv4_(std::move(fake_client_ipv4)),\n client_ipv6_(std::move(client_ipv6)),\n fake_client_ipv6_(std::move(fake_client_ipv6)),\n to_client_(std::move(to_client)),\n from_client_(std::move(from_client)) {}\n\nconst fptn::ClientID& Session::ClientId() const noexcept { return client_id_; }\n\nconst std::string& Session::UserName() const noexcept { return user_name_; }\n\nconst IPv4Address& Session::ClientIPv4() const noexcept { return client_ipv4_; }\n\nconst IPv4Address& Session::FakeClientIPv4() const noexcept {\n return fake_client_ipv4_;\n}\n\nconst IPv6Address& Session::ClientIPv6() const noexcept { return client_ipv6_; }\n\nconst IPv6Address& Session::FakeClientIPv6() const noexcept {\n return fake_client_ipv6_;\n}\n\nfptn::traffic_shaper::LeakyBucketSPtr&\nSession::TrafficShaperToClient() noexcept {\n return to_client_;\n}\n\nfptn::traffic_shaper::LeakyBucketSPtr&\nSession::TrafficShaperFromClient() noexcept {\n return from_client_;\n}\n\nfptn::common::network::IPPacketPtr Session::ChangeIPAddressToClientIP(\n fptn::common::network::IPPacketPtr packet) noexcept {\n packet->SetClientId(client_id_);\n\n#ifdef FPTN_IP_ADDRESS_WITHOUT_PCAP\n if (packet->IsIPv4()) {\n packet->SetDstIPv4Address(client_ipv4_.ToString());\n } else if (packet->IsIPv6()) {\n packet->SetDstIPv6Address(client_ipv6_.ToString());\n }\n#else\n if (packet->IsIPv4()) {\n packet->SetDstIPv4Address(client_ipv4_.Get());\n } else if (packet->IsIPv6()) {\n packet->SetDstIPv6Address(client_ipv6_.Get());\n }\n#endif\n packet->ComputeCalculateFields();\n return packet;\n}\n\nfptn::common::network::IPPacketPtr Session::ChangeIPAddressToFakeIP(\n fptn::common::network::IPPacketPtr packet) noexcept {\n packet->SetClientId(client_id_);\n#ifdef FPTN_IP_ADDRESS_WITHOUT_PCAP\n if (packet->IsIPv4()) {\n packet->SetSrcIPv4Address(fake_client_ipv4_.ToString());\n } else if (packet->IsIPv6()) {\n packet->SetSrcIPv6Address(fake_client_ipv6_.ToString());\n }\n#else\n if (packet->IsIPv4()) {\n packet->SetSrcIPv4Address(fake_client_ipv4_.Get());\n } else if (packet->IsIPv6()) {\n packet->SetSrcIPv6Address(fake_client_ipv6_.Get());\n }\n#endif\n packet->ComputeCalculateFields();\n return packet;\n}\n" }, { "path": "src/fptn-server/client/session.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n#pragma once\n\n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/client_id.h\"\n#include \"common/network/ip_address.h\"\n\n#include \"traffic_shaper/leaky_bucket.h\"\n\nnamespace fptn::client {\n\nusing fptn::common::network::IPv4Address;\nusing fptn::common::network::IPv6Address;\n\nclass Session final {\n public:\n Session(ClientID client_id,\n std::string user_name,\n IPv4Address client_ipv4,\n IPv4Address fake_client_ipv4,\n IPv6Address client_ipv6,\n IPv6Address fake_client_ipv6,\n fptn::traffic_shaper::LeakyBucketSPtr to_client,\n fptn::traffic_shaper::LeakyBucketSPtr from_client);\n [[nodiscard]] const ClientID& ClientId() const noexcept;\n\n [[nodiscard]] const std::string& UserName() const noexcept;\n\n [[nodiscard]] const IPv4Address& ClientIPv4() const noexcept;\n [[nodiscard]] const IPv4Address& FakeClientIPv4() const noexcept;\n\n [[nodiscard]] const IPv6Address& ClientIPv6() const noexcept;\n [[nodiscard]] const IPv6Address& FakeClientIPv6() const noexcept;\n\n fptn::traffic_shaper::LeakyBucketSPtr& TrafficShaperToClient() noexcept;\n fptn::traffic_shaper::LeakyBucketSPtr& TrafficShaperFromClient() noexcept;\n\n fptn::common::network::IPPacketPtr ChangeIPAddressToClientIP(\n fptn::common::network::IPPacketPtr packet) noexcept;\n fptn::common::network::IPPacketPtr ChangeIPAddressToFakeIP(\n fptn::common::network::IPPacketPtr packet) noexcept;\n\n private:\n const ClientID client_id_;\n const std::string user_name_;\n const IPv4Address client_ipv4_;\n const IPv4Address fake_client_ipv4_;\n const IPv6Address client_ipv6_;\n const IPv6Address fake_client_ipv6_;\n\n fptn::traffic_shaper::LeakyBucketSPtr to_client_;\n fptn::traffic_shaper::LeakyBucketSPtr from_client_;\n};\n\nusing SessionSPtr = std::shared_ptr;\n\n} // namespace fptn::client\n" }, { "path": "src/fptn-server/config/command_line_config.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"config/command_line_config.h\"\n\n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"common/utils/utils.h\"\n\nnamespace {\nbool ParseBoolean(std::string value) noexcept {\n try {\n // С++17\n // NOLINTNEXTLINE(modernize-use-ranges)\n std::transform(value.begin(), value.end(), value.begin(),\n [](unsigned char c) { return std::tolower(c); });\n return value == \"true\";\n } catch (...) {\n return false;\n }\n}\n} // namespace\n\nnamespace fptn::config {\n\nusing fptn::common::network::IPv4Address;\nusing fptn::common::network::IPv6Address;\n\nCommandLineConfig::CommandLineConfig(int argc, char* argv[])\n : argc_(argc), argv_(argv), args_(\"fptn-server\", FPTN_VERSION) {\n // Required arguments\n args_.add_argument(\"--server-crt\").required().help(\"Path to server.crt file\");\n args_.add_argument(\"--server-key\").required().help(\"Path to server.key file\");\n args_.add_argument(\"--out-network-interface\")\n .required()\n .help(\"Network out interface\");\n // Optional arguments\n args_.add_argument(\"--server-port\")\n .default_value(443)\n .help(\"Port number\")\n .scan<'i', int>();\n args_.add_argument(\"--tun-interface-name\")\n .default_value(\"tun0\")\n .help(\"Network interface name\");\n /* IPv4 */\n args_.add_argument(\"--tun-interface-ip\")\n .default_value(FPTN_SERVER_DEFAULT_ADDRESS_IP4)\n .help(\"IP address of the virtual interface\");\n args_.add_argument(\"--tun-interface-network-address\")\n .default_value(FPTN_SERVER_DEFAULT_NET_ADDRESS_IP4)\n .help(\"IP network of the virtual interface\");\n args_.add_argument(\"--tun-interface-network-mask\")\n .default_value(16)\n .help(\"Network mask\")\n .scan<'i', int>();\n /* IPv6 */\n args_.add_argument(\"--tun-interface-ipv6\")\n .default_value(FPTN_SERVER_DEFAULT_ADDRESS_IP6)\n .help(\"IPv6 address of the virtual interface\");\n args_.add_argument(\"--tun-interface-network-ipv6-address\")\n .default_value(FPTN_SERVER_DEFAULT_NET_ADDRESS_IP6)\n .help(\"IPv6 network address of the virtual interface\");\n args_.add_argument(\"--tun-interface-network-ipv6-mask\")\n .default_value(64)\n .help(\"IPv6 network mask\")\n .scan<'i', int>();\n args_.add_argument(\"--userfile\")\n .help(\"Path to users file (default: /etc/fptn/users.list)\")\n .default_value(\"/etc/fptn/users.list\");\n // Packet filters\n args_.add_argument(\"--disable-bittorrent\")\n .help(\n \"Disable BitTorrent traffic filtering. Use this flag to disable \"\n \"filtering.\")\n .default_value(\"false\");\n // Allow prometheus metric\n args_.add_argument(\"--prometheus-access-key\")\n .help(\n \"Secret key required for accessing Prometheus metrics. Set this to a \"\n \"secret value if metrics is needed.\")\n .default_value(\"\");\n // Remote server auth\n args_.add_argument(\"--use-remote-server-auth\")\n .help(\n \"Enable remote server authentication. Set to 'true' to use a remote \"\n \"server for authentication.\")\n .default_value(\"false\");\n args_.add_argument(\"--remote-server-auth-host\")\n .help(\n \"Specify the remote server's IP address or hostname for \"\n \"authentication.\")\n .default_value(\"1.1.1.1\");\n args_.add_argument(\"--remote-server-auth-port\")\n .help(\n \"Specify the port number for the remote server authentication. Set \"\n \"to 0 to use the default port.\")\n .default_value(443)\n .scan<'i', int>();\n args_.add_argument(\"--max-active-sessions-per-user\")\n .help(\"Maximum number of active sessions allowed per VPN user\")\n .default_value(3)\n .scan<'i', int>();\n // Probing\n args_.add_argument(\"--enable-detect-probing\")\n .help(\n \"Enable detection of non-FPTN clients or probing attempts during SSL \"\n \"handshake. \")\n .default_value(\"false\");\n args_.add_argument(\"--default-proxy-domain\")\n .help(\"Default domain for proxying non-VPN clients.\")\n .default_value(FPTN_DEFAULT_SNI);\n args_.add_argument(\"--allowed-sni-list\")\n .help(\n \"Comma-separated list of allowed SNI hostnames for non-VPN clients.\\n\"\n \"Behavior logic:\\n\"\n \" - List is empty (default): proxy all non-VPN traffic to \"\n \"--default-proxy-domain\\n\"\n \" - List is NOT empty: use as whitelist:\\n\"\n \" - Client SNI in list -> proxy to client's SNI\\n\"\n \" - Client SNI not in list -> proxy to --default-proxy-domain\")\n .default_value(\"\");\n // Prevent self-proxy\n args_.add_argument(\"--server-external-ips\")\n .help(\n \"Public IPv4 address of this VPN server. \"\n \"Prevents proxy loops when clients connect via IP. \"\n \"Example: --server-external-ip 1.2.3.4,5.6.7.8\")\n .default_value(\"\");\n}\n\nbool CommandLineConfig::Parse() noexcept { // NOLINT(bugprone-exception-escape)\n try {\n args_.parse_args(argc_, argv_);\n return true;\n } catch (const std::runtime_error& err) {\n const std::string help = args_.help().str();\n SPDLOG_ERROR(\"Argument parsing error: {}\\n{}\", err.what(), help);\n } catch (...) {\n SPDLOG_ERROR(\"Undefined parser error\");\n }\n return false;\n}\n\nstd::string CommandLineConfig::ServerCrt() const {\n return args_.get(\"--server-crt\");\n}\n\nstd::string CommandLineConfig::ServerKey() const {\n return args_.get(\"--server-key\");\n}\n\nstd::string CommandLineConfig::OutNetworkInterface() const {\n return args_.get(\"--out-network-interface\");\n}\n\nint CommandLineConfig::ServerPort() const {\n return args_.get(\"--server-port\");\n}\n\nstd::string CommandLineConfig::TunInterfaceName() const {\n return args_.get(\"--tun-interface-name\");\n}\n\nIPv4Address CommandLineConfig::TunInterfaceIPv4() const {\n return IPv4Address(args_.get(\"--tun-interface-ip\"));\n}\n\nIPv4Address CommandLineConfig::TunInterfaceNetworkIPv4Address() const {\n return IPv4Address(args_.get(\"--tun-interface-network-address\"));\n}\n\nint CommandLineConfig::TunInterfaceNetworkIPv4Mask() const {\n return args_.get(\"--tun-interface-network-mask\");\n}\n\nIPv6Address CommandLineConfig::TunInterfaceIPv6() const {\n return IPv6Address(args_.get(\"--tun-interface-ipv6\"));\n}\n\nIPv6Address CommandLineConfig::TunInterfaceNetworkIPv6Address() const {\n return IPv6Address(\n args_.get(\"--tun-interface-network-ipv6-address\"));\n}\n\nint CommandLineConfig::TunInterfaceNetworkIPv6Mask() const {\n return args_.get(\"--tun-interface-network-ipv6-mask\");\n}\n\nstd::string CommandLineConfig::UserFile() const {\n return args_.get(\"--userfile\");\n}\n\nbool CommandLineConfig::DisableBittorrent() const {\n return ParseBoolean(args_.get(\"--disable-bittorrent\"));\n}\n\nstd::string CommandLineConfig::PrometheusAccessKey() const {\n return args_.get(\"--prometheus-access-key\");\n}\n\nbool CommandLineConfig::UseRemoteServerAuth() const {\n return ParseBoolean(args_.get(\"--use-remote-server-auth\"));\n}\n\nstd::string CommandLineConfig::RemoteServerAuthHost() const {\n return args_.get(\"--remote-server-auth-host\");\n}\n\nint CommandLineConfig::RemoteServerAuthPort() const {\n return args_.get(\"--remote-server-auth-port\");\n}\n\nbool CommandLineConfig::EnableDetectProbing() const {\n return ParseBoolean(args_.get(\"--enable-detect-probing\"));\n}\n\n[[nodiscard]]\nstd::string CommandLineConfig::DefaultProxyDomain() const {\n auto default_domain = args_.get(\"--default-proxy-domain\");\n if (default_domain.empty()) {\n return FPTN_DEFAULT_SNI;\n }\n return default_domain;\n}\n\n[[nodiscard]]\nstd::vector CommandLineConfig::AllowedSniList() const {\n const auto allowed_sni = args_.get(\"--allowed-sni-list\");\n if (!allowed_sni.empty()) {\n return common::utils::SplitCommaSeparated(\n allowed_sni + \",\" + DefaultProxyDomain());\n }\n return {};\n}\n\nstd::size_t CommandLineConfig::MaxActiveSessionsPerUser() const {\n return static_cast(\n args_.get(\"--max-active-sessions-per-user\"));\n}\n\n[[nodiscard]]\nstd::string CommandLineConfig::ServerExternalIPs() const {\n return args_.get(\"--server-external-ips\");\n}\n\n} // namespace fptn::config\n" }, { "path": "src/fptn-server/config/command_line_config.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_address.h\"\n\nnamespace fptn::config {\n\nusing fptn::common::network::IPv4Address;\nusing fptn::common::network::IPv6Address;\n\nclass CommandLineConfig {\n public:\n explicit CommandLineConfig(int argc, char* argv[]);\n bool Parse() noexcept;\n\n public:\n /* options */\n [[nodiscard]] std::string ServerCrt() const;\n [[nodiscard]] std::string ServerKey() const;\n [[nodiscard]] std::string OutNetworkInterface() const;\n [[nodiscard]] int ServerPort() const;\n\n [[nodiscard]] std::string TunInterfaceName() const;\n /* IPv4 */\n [[nodiscard]] IPv4Address TunInterfaceIPv4() const;\n [[nodiscard]] IPv4Address TunInterfaceNetworkIPv4Address() const;\n [[nodiscard]] int TunInterfaceNetworkIPv4Mask() const;\n /* IPv6 */\n [[nodiscard]] IPv6Address TunInterfaceIPv6() const;\n [[nodiscard]] IPv6Address TunInterfaceNetworkIPv6Address() const;\n [[nodiscard]] int TunInterfaceNetworkIPv6Mask() const;\n\n [[nodiscard]] std::string UserFile() const;\n [[nodiscard]] bool DisableBittorrent() const;\n [[nodiscard]] std::string PrometheusAccessKey() const;\n\n [[nodiscard]] bool UseRemoteServerAuth() const;\n [[nodiscard]] std::string RemoteServerAuthHost() const;\n [[nodiscard]] int RemoteServerAuthPort() const;\n\n [[nodiscard]] bool EnableDetectProbing() const;\n\n [[nodiscard]] std::string DefaultProxyDomain() const;\n [[nodiscard]] std::vector AllowedSniList() const;\n\n [[nodiscard]] std::size_t MaxActiveSessionsPerUser() const;\n\n [[nodiscard]] std::string ServerExternalIPs() const;\n\n private:\n int argc_;\n char** argv_;\n argparse::ArgumentParser args_;\n};\n\n} // namespace fptn::config\n" }, { "path": "src/fptn-server/filter/filters/antiscan/antiscan.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"filter/filters/antiscan/antiscan.h\"\n\n#if defined(__APPLE__) || defined(__linux__)\n#include \n#elif _WIN32\n#pragma warning(disable : 4996)\n#include \n#pragma warning(default : 4996)\n#endif\n\n#include \n\nusing fptn::common::network::IPPacketPtr;\nusing fptn::filter::AntiScan;\n\nAntiScan::AntiScan(\n /* IPv4 */\n const fptn::common::network::IPv4Address& server_ipv4,\n const fptn::common::network::IPv4Address& server_ipv4_net,\n const int serverIPv4Mask,\n /* IPv6 */\n const fptn::common::network::IPv6Address& server_ipv6,\n const fptn::common::network::IPv6Address& server_ipv6_net,\n const int serverIPv6Mask)\n : server_ipv4_(ntohl(server_ipv4.ToInt())),\n server_ipv4_net_(ntohl(server_ipv4_net.ToInt())),\n server_ipv4_mask_((0xFFFFFFFF << (32 - serverIPv4Mask))),\n server_ipv6_(\n fptn::common::network::ipv6::toUInt128(server_ipv6.ToString())),\n server_ipv6_net_(\n fptn::common::network::ipv6::toUInt128(server_ipv6_net.ToString())),\n server_ipv6_mask_(\n (boost::multiprecision::uint128_t(1) << (128 - serverIPv6Mask)) - 1) {\n}\n\nIPPacketPtr AntiScan::apply(IPPacketPtr packet) const {\n // Prevent sending requests to the VPN virtual network from the client\n static fptn::common::network::IPv4Address ipv4_broadcast(\"255.255.255.255\");\n static std::uint32_t ipv4_broadcast_int = ntohl(ipv4_broadcast.ToInt());\n\n if (packet->IsIPv4()) {\n const std::uint32_t dst =\n ntohl(packet->IPv4Layer()->getDstIPv4Address().toInt());\n const bool is_in_network =\n (dst & server_ipv4_mask_) == (server_ipv4_net_ & server_ipv4_mask_);\n if (server_ipv4_ == dst || (!is_in_network && ipv4_broadcast_int != dst)) {\n return packet;\n }\n } else if (packet->IsIPv6()) {\n const auto dst = fptn::common::network::ipv6::toUInt128(\n packet->IPv6Layer()->getDstIPv6Address());\n const auto max_addr = server_ipv6_net_ | server_ipv6_mask_;\n const bool is_in_network = (server_ipv6_net_ <= dst && dst <= max_addr);\n if (server_ipv6_ == dst || !is_in_network) {\n return packet;\n }\n }\n return nullptr;\n}\n" }, { "path": "src/fptn-server/filter/filters/antiscan/antiscan.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n\n#include \n\n#include \"common/network/ip_address.h\"\n\nnamespace fptn::filter {\n\n/**\n * @class AntiScanFilter\n * @brief A filter class that blocks packets from IP addresses belonging to a\n * specific network.\n *\n * This class is used to block IP packets that match a given network address and\n * subnet mask. It compares the destination IP address of the packet against the\n * specified network and mask. If the packet belongs to the network, it is\n * blocked.\n *\n * @note This filter does not modify the packets that are not blocked. It simply\n * returns `nullptr` for blocked packets.\n */\nclass AntiScan : public BaseFilter {\n public:\n AntiScan(\n /* IPv4 */\n const fptn::common::network::IPv4Address& server_ipv4,\n const fptn::common::network::IPv4Address& server_ipv4_net,\n const int serverIPv4Mask,\n /* IPv6 */\n const fptn::common::network::IPv6Address& server_ipv6,\n const fptn::common::network::IPv6Address& server_ipv6_net,\n const int serverIPv6Mask);\n fptn::common::network::IPPacketPtr apply(\n fptn::common::network::IPPacketPtr packet) const override;\n ~AntiScan() override = default;\n\n private:\n /* IPv4 */\n const std::uint32_t server_ipv4_;\n const std::uint32_t server_ipv4_net_;\n const int server_ipv4_mask_;\n\n /* IPv6 */\n const boost::multiprecision::uint128_t server_ipv6_;\n const boost::multiprecision::uint128_t server_ipv6_net_;\n const boost::multiprecision::uint128_t server_ipv6_mask_;\n};\n} // namespace fptn::filter\n" }, { "path": "src/fptn-server/filter/filters/base_filter.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n\n#include \"common/network/ip_packet.h\"\n\nnamespace fptn::filter {\n\nclass BaseFilter {\n public:\n virtual fptn::common::network::IPPacketPtr apply(\n fptn::common::network::IPPacketPtr packet) const = 0;\n virtual ~BaseFilter() = default;\n};\n\nusing BaseFilterSPtr = std::shared_ptr;\n} // namespace fptn::filter\n" }, { "path": "src/fptn-server/filter/filters/bittorrent/bittorrent.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"filter/filters/bittorrent/bittorrent.h\"\n\n#include \n#include \n\nusing fptn::common::network::IPPacketPtr;\nusing fptn::filter::BitTorrent;\n\nstatic constexpr std::uint8_t kClassic[] = {0x13, 'B', 'i', 't', 'T', 'o', 'r',\n 'r', 'e', 'n', 't', ' ', 'p', 'r', 'o', 't', 'o', 'c', 'o', 'l'};\n\nstatic constexpr std::uint8_t kExtensionProtocol[] = {\n 0x14, 'e', 'x', 't', 'e', 'n', 's', 'i', 'o', 'n'};\n\nstatic constexpr std::uint8_t kDht[] = {\n 'd', '1', ':', 'a', 'd', '2', ':', 'i', 'd', '2'};\n\nnamespace {\n\nbool DetectBitTorrent(const std::uint8_t* payload, std::size_t payload_size) {\n if (!payload_size) {\n return false;\n }\n const std::uint8_t first_byte = payload[0];\n // Classic Protocol\n if (first_byte == kClassic[0]) {\n constexpr std::size_t kClassicSignatureSize = sizeof(kClassic);\n return payload_size >= kClassicSignatureSize &&\n std::memcmp(payload, kClassic, kClassicSignatureSize) == 0;\n }\n\n // Extension Protocol\n if (first_byte == kExtensionProtocol[0]) {\n constexpr std::size_t kExtProtocolSignSize = sizeof(kExtensionProtocol);\n return payload_size >= kExtProtocolSignSize &&\n std::memcmp(payload, kExtensionProtocol, kExtProtocolSignSize) == 0;\n }\n\n // BT-DHT\n if (first_byte == kDht[0]) {\n constexpr std::size_t kDhtSignatureSize = sizeof(kDht);\n return payload_size >= kDhtSignatureSize &&\n std::memcmp(payload, kDht, kDhtSignatureSize) == 0;\n }\n return false;\n}\n\n} // namespace\n\nIPPacketPtr BitTorrent::apply(IPPacketPtr packet) const {\n if (const auto* tcp = packet->Pkt().getLayerOfType()) {\n if (DetectBitTorrent(tcp->getLayerPayload(), tcp->getLayerPayloadSize())) {\n return nullptr;\n }\n } else if (const auto* udp = packet->Pkt().getLayerOfType()) {\n if (DetectBitTorrent(udp->getLayerPayload(), udp->getLayerPayloadSize())) {\n return nullptr;\n }\n }\n return packet;\n}\n" }, { "path": "src/fptn-server/filter/filters/bittorrent/bittorrent.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \"filter/filters/base_filter.h\"\n\nnamespace fptn::filter {\nclass BitTorrent : public BaseFilter {\n public:\n BitTorrent() = default;\n ~BitTorrent() override = default;\n fptn::common::network::IPPacketPtr apply(\n fptn::common::network::IPPacketPtr packet) const override;\n};\n} // namespace fptn::filter\n" }, { "path": "src/fptn-server/filter/manager.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"filter/manager.h\"\n\n#include \n\nusing fptn::common::network::IPPacketPtr;\nusing fptn::filter::Manager;\n\nvoid Manager::Add(BaseFilterSPtr filter) noexcept {\n try {\n filters_.push_back(std::move(filter));\n } catch (const std::bad_alloc& err) {\n SPDLOG_ERROR(\n \"Memory allocation failed while adding filter: {}\", err.what());\n } catch (...) {\n SPDLOG_ERROR(\"An unknown exception occurred while adding a filter.\");\n }\n}\n\nIPPacketPtr Manager::Apply(IPPacketPtr packet) const noexcept {\n for (const auto& filter : filters_) {\n packet = filter->apply(std::move(packet));\n if (!packet) {\n return nullptr; // packet was filtered\n }\n }\n return packet;\n}\n" }, { "path": "src/fptn-server/filter/manager.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n\n#include \"common/network/ip_packet.h\"\n\n#include \"filters/base_filter.h\"\n\nnamespace fptn::filter {\n\nclass Manager {\n public:\n Manager() = default;\n void Add(BaseFilterSPtr filter) noexcept;\n\n [[nodiscard]] fptn::common::network::IPPacketPtr Apply(\n fptn::common::network::IPPacketPtr packet) const noexcept;\n\n private:\n std::vector filters_;\n};\n\nusing ManagerSPtr = std::shared_ptr;\n} // namespace fptn::filter\n" }, { "path": "src/fptn-server/fptn-server.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n#include \n#include \n#include \n\n#include \n#include // NOLINT(build/include_order)\n\n#include \"common/jwt_token/token_manager.h\"\n#include \"common/logger/logger.h\"\n#include \"common/network/ip_address.h\"\n\n#include \"config/command_line_config.h\"\n#include \"filter/filters/antiscan/antiscan.h\"\n#include \"filter/filters/bittorrent/bittorrent.h\"\n#include \"filter/manager.h\"\n#include \"nat/table.h\"\n#include \"network/virtual_interface.h\"\n#include \"routing/iptables.h\"\n#include \"statistic/metrics.h\"\n#include \"user/user_manager.h\"\n#include \"vpn/manager.h\"\n#include \"web/server.h\"\n\nnamespace {\n\nvoid WaitForSignal() {\n boost::asio::io_context io_context;\n boost::asio::signal_set signals(io_context, SIGINT, SIGTERM /*,SIGQUIT*/);\n signals.async_wait([&](auto, auto) { io_context.stop(); });\n io_context.run();\n}\n} // namespace\n\nint main(int argc, char* argv[]) {\n#if defined(__linux__) || defined(__APPLE__)\n if (geteuid() != 0) {\n std::cerr << \"You must be root to run this program.\" << std::endl;\n return EXIT_FAILURE;\n }\n#endif\n try {\n /* Check options */\n fptn::config::CommandLineConfig config(argc, argv);\n if (!config.Parse()) {\n return EXIT_FAILURE;\n }\n if (!std::filesystem::exists(config.ServerCrt()) ||\n !std::filesystem::exists(config.ServerKey())) {\n SPDLOG_ERROR(\"SSL certificate or key file does not exist!\");\n return EXIT_FAILURE;\n }\n\n /* Init logger */\n if (fptn::logger::init(\"fptn-server\")) {\n SPDLOG_INFO(\"Application started successfully.\");\n } else {\n std::cerr << \"Logger initialization failed. Exiting application.\"\n << std::endl;\n return EXIT_FAILURE;\n }\n\n /* Init iptables */\n auto iptables = std::make_unique(\n config.OutNetworkInterface(), config.TunInterfaceName());\n /* Init virtual network interface */\n\n auto virtual_network_interface =\n std::make_unique(\n fptn::common::network::TunInterface::Config{\n .name = config.TunInterfaceName(),\n .ipv4_addr = config.TunInterfaceIPv4(),\n .ipv4_netmask = config.TunInterfaceNetworkIPv4Mask(),\n .ipv6_addr = config.TunInterfaceIPv6(),\n .ipv6_netmask = config.TunInterfaceNetworkIPv6Mask(),\n },\n std::move(iptables));\n\n /* Init web server */\n auto token_manager =\n std::make_shared(\n config.ServerCrt(), config.ServerKey());\n /* Init user manager */\n auto user_manager = std::make_shared(\n config.UserFile(), config.UseRemoteServerAuth(),\n config.RemoteServerAuthHost(), config.RemoteServerAuthPort());\n /* Init NAT */\n auto nat_table = std::make_shared(\n /* IPv4 */\n config.TunInterfaceIPv4(), config.TunInterfaceNetworkIPv4Address(),\n config.TunInterfaceNetworkIPv4Mask(),\n /* IPv6 */\n config.TunInterfaceIPv6(), config.TunInterfaceNetworkIPv6Address(),\n config.TunInterfaceNetworkIPv6Mask());\n /* Init prometheus */\n auto prometheus = std::make_shared();\n /* Init webserver */\n auto web_server = std::make_unique(config.ServerPort(),\n nat_table, user_manager, token_manager, prometheus,\n config.PrometheusAccessKey(), config.TunInterfaceIPv4(),\n config.TunInterfaceIPv6(),\n /* probing */\n config.EnableDetectProbing(), config.DefaultProxyDomain(),\n config.AllowedSniList(),\n /* sessions */\n config.MaxActiveSessionsPerUser(),\n /* External IPs */\n config.ServerExternalIPs());\n\n /* init packet filter */\n auto filter_manager = std::make_shared();\n if (config.DisableBittorrent()) { // block bittorrent traffic\n filter_manager->Add(std::make_shared());\n }\n // Prevent sending requests to the VPN virtual network from the client\n filter_manager->Add(std::make_shared(\n /* IPv4 */\n config.TunInterfaceIPv4(), config.TunInterfaceNetworkIPv4Address(),\n config.TunInterfaceNetworkIPv4Mask(),\n /* IPv6 */\n config.TunInterfaceIPv6(), config.TunInterfaceNetworkIPv6Address(),\n config.TunInterfaceNetworkIPv6Mask()));\n\n SPDLOG_INFO(\n \"\\n--- Starting server---\\n\"\n \"VERSION: {}\\n\"\n \"NETWORK INTERFACE: {}\\n\"\n \"VPN NETWORK IPv4: {}\\n\"\n \"VPN NETWORK IPv6: {}\\n\"\n \"VPN SERVER PORT: {}\\n\"\n \"DETECT_PROBING: {}\\n\"\n \"DEFAULT_PROXY_DOMAIN: {}\\n\"\n \"ALLOWED_SNI_LIST: {}\\n\"\n \"MAX_ACTIVE_SESSIONS_PER_USER: {}\\n\",\n FPTN_VERSION,\n // Network settings\n config.OutNetworkInterface(),\n config.TunInterfaceNetworkIPv4Address().ToString(),\n config.TunInterfaceNetworkIPv6Address().ToString(), config.ServerPort(),\n // Probing settings\n config.EnableDetectProbing() ? \"YES\" : \"NO\",\n config.DefaultProxyDomain(),\n fmt::format(\"[{}]\", fmt::join(config.AllowedSniList(), \", \")),\n // max session\n config.MaxActiveSessionsPerUser());\n\n // Init vpn manager\n fptn::vpn::Manager manager(std::move(web_server),\n std::move(virtual_network_interface), nat_table, filter_manager,\n prometheus);\n\n /* start/wait/stop */\n manager.Start();\n WaitForSignal();\n manager.Stop();\n\n return EXIT_SUCCESS;\n } catch (const std::exception& ex) {\n SPDLOG_ERROR(\"An error occurred: {}. Exiting...\", ex.what());\n } catch (...) {\n SPDLOG_ERROR(\"An unknown error occurred. Exiting...\");\n }\n return EXIT_FAILURE;\n}\n" }, { "path": "src/fptn-server/nat/table.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"nat/table.h\"\n\n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\nusing fptn::nat::Table;\n\nTable::Table(fptn::common::network::IPv4Address tun_ipv4,\n fptn::common::network::IPv4Address tun_ipv4_network_address,\n std::uint32_t tun_network_ipv4_mask,\n fptn::common::network::IPv6Address tun_ipv6,\n fptn::common::network::IPv6Address tun_ipv6_network_address,\n std::uint32_t tun_network_ipv6_mask)\n : client_number_(0),\n tun_ipv4_(std::move(tun_ipv4)),\n tun_ipv4_network_address_(std::move(tun_ipv4_network_address)),\n tun_network_ipv4_mask_(tun_network_ipv4_mask),\n tun_ipv6_(std::move(tun_ipv6)),\n tun_ipv6_network_address_(std::move(tun_ipv6_network_address)),\n tun_network_ipv6_mask_(tun_network_ipv6_mask),\n ipv4_generator_(tun_ipv4_network_address_, tun_network_ipv4_mask_),\n ipv6_generator_(tun_ipv6_network_address_, tun_network_ipv6_mask_) {}\n\nfptn::client::SessionSPtr Table::CreateClientSession(ClientID client_id,\n const std::string& user_name,\n const fptn::common::network::IPv4Address& client_ipv4,\n const fptn::common::network::IPv6Address& client_ipv6,\n const fptn::traffic_shaper::LeakyBucketSPtr& to_client,\n const fptn::traffic_shaper::LeakyBucketSPtr& from_client) {\n const std::unique_lock lock(mutex_); // mutex\n\n if (!client_id_to_sessions_.contains(client_id)) {\n if (client_number_ >= ipv4_generator_.NumAvailableAddresses()) {\n /* || client_number_ >= client_ipv6.NumAvailableAddresses() */\n SPDLOG_INFO(\"Client limit was exceeded\");\n return nullptr;\n }\n client_number_ += 1;\n try {\n const auto fake_ipv4 = GetUniqueIPv4Address();\n const auto fake_ipv6 = GetUniqueIPv6Address();\n auto session = std::make_shared(client_id,\n user_name, client_ipv4, fake_ipv4, client_ipv6, fake_ipv6, to_client,\n from_client);\n client_id_to_sessions_.insert({client_id, session});\n ipv4_to_sessions_.insert(\n {fake_ipv4.ToInt(), session}); // ipv4 -> session\n ipv6_to_sessions_.insert(\n {fake_ipv6.ToString(), session}); // ipv6 -> session\n return session;\n } catch (const std::runtime_error& err) {\n SPDLOG_INFO(\"Client error: {}\", err.what());\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\n \"Standard exception while creating client session: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"An unknown error occurred while creating client session.\");\n }\n }\n return nullptr;\n}\n\nbool Table::DelClientSession(ClientID client_id) {\n fptn::client::SessionSPtr ipv4_session;\n fptn::client::SessionSPtr ipv6_session;\n {\n const std::unique_lock lock(mutex_); // mutex\n\n auto it = client_id_to_sessions_.find(client_id);\n if (it != client_id_to_sessions_.end()) {\n const IPv4INT ipv4_int = it->second->FakeClientIPv4().ToInt();\n const std::string ipv6_str = it->second->FakeClientIPv6().ToString();\n client_id_to_sessions_.erase(it);\n\n // delete ipv4 -> session\n {\n auto it_ipv4 = ipv4_to_sessions_.find(ipv4_int);\n if (it_ipv4 != ipv4_to_sessions_.end()) {\n ipv4_session = std::move(it_ipv4->second);\n ipv4_to_sessions_.erase(it_ipv4);\n }\n }\n // delete ipv6 -> session\n {\n auto it_ipv6 = ipv6_to_sessions_.find(ipv6_str);\n if (it_ipv6 != ipv6_to_sessions_.end()) {\n ipv6_session = std::move(it_ipv6->second);\n ipv6_to_sessions_.erase(it_ipv6);\n }\n }\n }\n }\n return ipv4_session != nullptr && ipv6_session != nullptr;\n}\n\nfptn::client::SessionSPtr Table::GetSessionByFakeIPv4(\n const fptn::common::network::IPv4Address& ip) noexcept {\n const std::unique_lock lock(mutex_); // mutex\n\n const auto it = ipv4_to_sessions_.find(ip.ToInt());\n if (it != ipv4_to_sessions_.end()) {\n return it->second;\n }\n return nullptr;\n}\n\nfptn::client::SessionSPtr Table::GetSessionByFakeIPv6(\n const fptn::common::network::IPv6Address& ip) noexcept {\n const std::unique_lock lock(mutex_); // mutex\n\n auto it = ipv6_to_sessions_.find(ip.ToString());\n if (it != ipv6_to_sessions_.end()) {\n return it->second;\n }\n return nullptr;\n}\n\nfptn::client::SessionSPtr Table::GetSessionByClientId(\n ClientID clientId) noexcept {\n const std::unique_lock lock(mutex_); // mutex\n\n auto it = client_id_to_sessions_.find(clientId);\n if (it != client_id_to_sessions_.end()) {\n return it->second;\n }\n return nullptr;\n}\n\nstd::size_t Table::GetNumberActiveSessionByUsername(\n const std::string& username) {\n const std::unique_lock lock(mutex_); // mutex\n\n return std::count_if(ipv4_to_sessions_.begin(), ipv4_to_sessions_.end(),\n [&username](\n const auto& pair) { return pair.second->UserName() == username; });\n}\n\nfptn::common::network::IPv4Address Table::GetUniqueIPv4Address() {\n for (std::uint32_t i = 0; i < ipv4_generator_.NumAvailableAddresses(); i++) {\n const auto ip = ipv4_generator_.GetNextAddress();\n if (ip != tun_ipv4_ && !ipv4_to_sessions_.contains(ip.ToInt())) {\n return ip;\n }\n }\n throw std::runtime_error(\"No available address\");\n}\n\nfptn::common::network::IPv6Address Table::GetUniqueIPv6Address() {\n for (int i = 0; i < ipv6_generator_.NumAvailableAddresses(); i++) {\n const auto ip = ipv6_generator_.GetNextAddress();\n if (ip != tun_ipv6_ && !ipv6_to_sessions_.contains(ip.ToString())) {\n return ip;\n }\n }\n throw std::runtime_error(\"No available address\");\n}\n\nvoid Table::UpdateStatistic(const fptn::statistic::MetricsSPtr& prometheus) {\n const std::unique_lock lock(mutex_); // mutex\n\n prometheus->UpdateActiveSessions(client_id_to_sessions_.size());\n for (const auto& client : client_id_to_sessions_) {\n auto client_id = client.first;\n const auto& session = client.second;\n prometheus->UpdateStatistics(client_id, session->UserName(),\n session->TrafficShaperToClient()->FullDataAmount(),\n session->TrafficShaperFromClient()->FullDataAmount());\n }\n}\n" }, { "path": "src/fptn-server/nat/table.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_address.h\"\n#include \"common/network/ipv4_generator.h\"\n#include \"common/network/ipv6_generator.h\"\n\n#include \"client/session.h\"\n#include \"statistic/metrics.h\"\n#include \"traffic_shaper/leaky_bucket.h\"\n\nnamespace fptn::nat {\n\nclass Table final {\n using IPv4INT = std::uint32_t;\n\n public:\n Table(fptn::common::network::IPv4Address tun_ipv4,\n fptn::common::network::IPv4Address tun_ipv4_network_address,\n std::uint32_t tun_network_ipv4_mask,\n fptn::common::network::IPv6Address tun_ipv6,\n fptn::common::network::IPv6Address tun_ipv6_network_address,\n std::uint32_t tun_network_ipv6_mask);\n\n fptn::client::SessionSPtr CreateClientSession(ClientID client_id,\n const std::string& user_name,\n const fptn::common::network::IPv4Address& client_ipv4,\n const fptn::common::network::IPv6Address& client_ipv6,\n const fptn::traffic_shaper::LeakyBucketSPtr& to_client,\n const fptn::traffic_shaper::LeakyBucketSPtr& from_client);\n bool DelClientSession(ClientID client_id);\n void UpdateStatistic(const fptn::statistic::MetricsSPtr& prometheus);\n\n public:\n fptn::client::SessionSPtr GetSessionByFakeIPv4(\n const fptn::common::network::IPv4Address& ip) noexcept;\n fptn::client::SessionSPtr GetSessionByFakeIPv6(\n const fptn::common::network::IPv6Address& ip) noexcept;\n fptn::client::SessionSPtr GetSessionByClientId(ClientID clientId) noexcept;\n\n std::size_t GetNumberActiveSessionByUsername(const std::string& username);\n\n protected:\n fptn::common::network::IPv4Address GetUniqueIPv4Address();\n fptn::common::network::IPv6Address GetUniqueIPv6Address();\n\n private:\n mutable std::mutex mutex_;\n std::uint32_t client_number_;\n\n const fptn::common::network::IPv4Address tun_ipv4_;\n const fptn::common::network::IPv4Address tun_ipv4_network_address_;\n const std::uint32_t tun_network_ipv4_mask_;\n\n const fptn::common::network::IPv6Address tun_ipv6_;\n const fptn::common::network::IPv6Address tun_ipv6_network_address_;\n\n const std::uint32_t tun_network_ipv6_mask_;\n\n fptn::common::network::IPv4AddressGenerator ipv4_generator_;\n fptn::common::network::IPv6AddressGenerator ipv6_generator_;\n\n\n std::unordered_map\n ipv4_to_sessions_; // ipv4\n std::unordered_map\n ipv6_to_sessions_; // ipv6\n std::unordered_map\n client_id_to_sessions_;\n};\n\ntypedef std::shared_ptr TableSPtr;\n\n} // namespace fptn::nat\n" }, { "path": "src/fptn-server/network/virtual_interface.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"network/virtual_interface.h\"\n\n#include \n#include \n#include \n\nusing fptn::common::network::TunInterface;\nusing fptn::network::VirtualInterface;\n\nVirtualInterface::VirtualInterface(\n fptn::common::network::TunInterface::Config config,\n fptn::routing::RouteManagerPtr iptables)\n : running_(false), iptables_(std::move(iptables)) {\n // NOLINTNEXTLINE(modernize-avoid-bind)\n auto callback = std::bind(\n &VirtualInterface::IPPacketFromNetwork, this, std::placeholders::_1);\n virtual_network_interface_ =\n std::make_unique(std::move(config));\n virtual_network_interface_->SetRecvIPPacketCallback(callback);\n}\n\nVirtualInterface::~VirtualInterface() { Stop(); }\n\nbool VirtualInterface::Check() noexcept { return thread_.joinable(); }\n\nbool VirtualInterface::Start() noexcept {\n running_ = true;\n virtual_network_interface_->Start();\n thread_ = std::thread(&VirtualInterface::Run, this);\n return thread_.joinable();\n}\n\nbool VirtualInterface::Stop() noexcept {\n running_ = false;\n virtual_network_interface_->Stop();\n if (thread_.joinable()) {\n iptables_->Clean();\n thread_.join();\n return true;\n }\n return false;\n}\n\nvoid VirtualInterface::Send(\n fptn::common::network::IPPacketPtr packet) noexcept {\n try {\n to_network_.Push(std::move(packet));\n } catch (const std::bad_alloc& err) {\n SPDLOG_ERROR(\n \"Memory allocation failed while sending packet: {}\", err.what());\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception occurred while sending packet.\");\n }\n}\n\nfptn::common::network::IPPacketPtr VirtualInterface::WaitForPacket(\n const std::chrono::milliseconds& duration) noexcept {\n return from_network_.WaitForPacket(duration);\n}\n\nvoid VirtualInterface::Run() noexcept {\n const auto timeout = std::chrono::milliseconds(300);\n\n iptables_->Apply(); // activate route\n while (running_) {\n auto packet = to_network_.WaitForPacket(timeout);\n if (packet != nullptr) {\n virtual_network_interface_->Send(std::move(packet));\n }\n }\n}\n\nvoid VirtualInterface::IPPacketFromNetwork(\n fptn::common::network::IPPacketPtr packet) noexcept {\n from_network_.Push(std::move(packet));\n}\n" }, { "path": "src/fptn-server/network/virtual_interface.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include \"common/data/channel.h\"\n#include \"common/network/ip_packet.h\"\n#include \"common/network/net_interface.h\"\n\n#include \"routing/iptables.h\"\n\nnamespace fptn::network {\n\nclass VirtualInterface final {\n public:\n VirtualInterface(fptn::common::network::TunInterface::Config config,\n fptn::routing::RouteManagerPtr iptables);\n ~VirtualInterface();\n\n bool Check() noexcept;\n bool Start() noexcept;\n bool Stop() noexcept;\n void Send(fptn::common::network::IPPacketPtr packet) noexcept;\n fptn::common::network::IPPacketPtr WaitForPacket(\n const std::chrono::milliseconds& duration) noexcept;\n\n protected:\n void Run() noexcept;\n void IPPacketFromNetwork(fptn::common::network::IPPacketPtr packet) noexcept;\n\n private:\n std::thread thread_;\n std::atomic running_;\n\n const fptn::routing::RouteManagerPtr iptables_;\n\n fptn::common::data::Channel to_network_;\n fptn::common::data::Channel from_network_;\n fptn::common::network::TunInterfacePtr virtual_network_interface_;\n};\n\nusing VirtualInterfacePtr = std::unique_ptr;\n} // namespace fptn::network\n" }, { "path": "src/fptn-server/routing/iptables.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"routing/iptables.h\"\n\n#ifdef __linux__\n#include \n#include \n#include // NOLINT(build/include_order)\n#endif\n\n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\nusing fptn::routing::RouteManager;\n\nnamespace {\nbool RunCommand(const std::string& command) noexcept {\n try {\n boost::process::v1::child child(command,\n boost::process::v1::std_out > stdout,\n boost::process::v1::std_err > stderr);\n child.wait();\n if (child.exit_code() == 0) {\n return true;\n }\n } catch (const std::exception& e) {\n SPDLOG_WARN(\"IPTables warning: {}\", e.what());\n } catch (...) {\n SPDLOG_WARN(\"Undefined warning\");\n }\n return false;\n}\n\n#ifdef __linux__\nbool SetMaxFileDescriptors() {\n struct rlimit current_limits = {};\n if (getrlimit(RLIMIT_NOFILE, ¤t_limits) != 0) {\n SPDLOG_WARN(\n \"Failed to get current file descriptor limits: {}\", strerror(errno));\n return false;\n }\n\n SPDLOG_INFO(\"Current file descriptor limits: soft={}, hard={}\",\n current_limits.rlim_cur, current_limits.rlim_max);\n\n struct rlimit new_limits = {};\n new_limits.rlim_cur = current_limits.rlim_max;\n new_limits.rlim_max = current_limits.rlim_max;\n\n // Try to set the new limits\n if (setrlimit(RLIMIT_NOFILE, &new_limits) != 0) {\n SPDLOG_WARN(\"Failed to set file descriptor limits: {}\", strerror(errno));\n return false;\n }\n\n // Verify the changes were applied\n struct rlimit verified_limits;\n if (getrlimit(RLIMIT_NOFILE, &verified_limits) != 0) {\n SPDLOG_WARN(\n \"Failed to verify new file descriptor limits: {}\", strerror(errno));\n return false;\n }\n\n SPDLOG_INFO(\"New file descriptor limits: soft={}, hard={}\",\n verified_limits.rlim_cur, verified_limits.rlim_max);\n return true;\n}\n#endif\n\n} // namespace\n\nRouteManager::RouteManager(\n std::string out_net_interface_name, std::string tun_net_interface_name)\n : out_net_interface_name_(std::move(out_net_interface_name)),\n tun_net_interface_name_(std::move(tun_net_interface_name)),\n running_(false) {}\n\nRouteManager::~RouteManager() {\n try {\n Clean();\n } catch (const std::exception& ex) {\n SPDLOG_ERROR(\"Exception in IPTables destructor: {}\", ex.what());\n } catch (...) {\n SPDLOG_ERROR(\"Unknown error in IPTables destructor\");\n }\n}\n\nbool RouteManager::Apply() { // NOLINT(bugprone-exception-escape)\n const std::unique_lock lock(mutex_); // mutex\n\n#ifdef __linux__\n SetMaxFileDescriptors();\n#endif\n\n running_ = true;\n#ifdef __linux__\n const std::vector commands = {\"systemctl start sysctl\",\n \"sysctl -w net.ipv4.ip_forward=1\",\n \"sysctl -w net.ipv4.conf.all.rp_filter=0\",\n \"sysctl -w net.ipv4.conf.default.rp_filter=0\",\n \"sysctl -w net.ipv6.conf.default.disable_ipv6=0\",\n \"sysctl -w net.ipv6.conf.all.disable_ipv6=0\",\n \"sysctl -w net.ipv6.conf.lo.disable_ipv6=0\",\n \"sysctl -w net.ipv6.conf.all.forwarding=1\", \"sysctl -p\",\n /* IPv4 */\n \"iptables -P INPUT ACCEPT\", \"iptables -P FORWARD ACCEPT\",\n \"iptables -P OUTPUT ACCEPT\",\n fmt::format(\"iptables -A FORWARD -i {} -o {} -j ACCEPT\",\n tun_net_interface_name_, out_net_interface_name_),\n fmt::format(\"iptables -A FORWARD -i {} -o {} -j ACCEPT\",\n out_net_interface_name_, tun_net_interface_name_),\n fmt::format(\"iptables -t nat -A POSTROUTING -o {} -j MASQUERADE\",\n out_net_interface_name_),\n /* IPv6 */\n \"ip6tables -P INPUT ACCEPT\", \"ip6tables -P FORWARD ACCEPT\",\n \"ip6tables -P OUTPUT ACCEPT\",\n fmt::format(\"ip6tables -A FORWARD -i {} -o {} -j ACCEPT\",\n tun_net_interface_name_, out_net_interface_name_),\n fmt::format(\"ip6tables -A FORWARD -i {} -o {} -j ACCEPT\",\n out_net_interface_name_, tun_net_interface_name_),\n fmt::format(\"ip6tables -t nat -A POSTROUTING -o {} -j MASQUERADE\",\n out_net_interface_name_)};\n#elif __APPLE__\n // NEED CHECK\n const std::vector commands = {\n fmt::format(\"echo 'set skip on lo0' > /tmp/pf.conf\"),\n fmt::format(\"echo 'block in all' >> /tmp/pf.conf\"),\n fmt::format(\"echo 'pass out all' >> /tmp/pf.conf\"),\n fmt::format(\"echo 'block in on {} from any to any' >> /tmp/pf.conf\",\n out_net_interface_name_),\n \"pfctl -ef /tmp/pf.conf\",\n };\n#else\n#error \"Unsupported system!\"\n#endif\n SPDLOG_INFO(\"=== Setting up routing ===\");\n try {\n for (const auto& cmd : commands) {\n if (!RunCommand(cmd)) {\n SPDLOG_ERROR(\"COMMAND ERROR: {}\", cmd);\n }\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Exception occurred while applying routing: {}\", e.what());\n return false;\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception occurred while applying routing.\");\n return false;\n }\n SPDLOG_INFO(\"=== Routing setup completed successfully ===\");\n return true;\n}\n\n// NOLINT(bugprone-exception-escape)\nbool RouteManager::Clean() {\n const std::unique_lock lock(mutex_); // mutex\n\n if (!running_) {\n return true;\n }\n#ifdef __linux__\n const std::vector commands = {\n fmt::format(\"iptables -D FORWARD -i {} -o {} -j ACCEPT\",\n tun_net_interface_name_, out_net_interface_name_),\n fmt::format(\"iptables -D FORWARD -i {} -o {} -j ACCEPT\",\n out_net_interface_name_, tun_net_interface_name_),\n fmt::format(\"iptables -t nat -D POSTROUTING -o {} -j MASQUERADE\",\n out_net_interface_name_)};\n#elif __APPLE__\n const std::vector commands = {\n \"echo 'set skip on lo0' > /tmp/pf.conf\",\n \"echo 'block in all' >> /tmp/pf.conf\",\n \"echo 'pass out all' >> /tmp/pf.conf\",\n fmt::format(\"echo 'pass in on {} from any to any' >> /tmp/pf.conf\",\n out_net_interface_name_),\n fmt::format(\"echo 'pass in on {} from {} to any' >> /tmp/pf.conf\",\n tun_net_interface_name_, tun_net_interface_name_),\n \"pfctl -f /tmp/pf.conf\", \"pfctl -e\"};\n#else\n#error \"Unsupported system!\"\n#endif\n try {\n for (const auto& cmd : commands) {\n RunCommand(cmd);\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"IPTables error: {}\", e.what());\n } catch (...) {\n SPDLOG_ERROR(\"Undefined error\");\n }\n running_ = false;\n return true;\n}\n" }, { "path": "src/fptn-server/routing/iptables.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\nnamespace fptn::routing {\nclass RouteManager final {\n public:\n RouteManager(\n std::string out_net_interface_name, std::string tun_net_interface_name);\n ~RouteManager();\n bool Apply();\n bool Clean();\n\n private:\n mutable std::mutex mutex_;\n\n const std::string out_net_interface_name_;\n const std::string tun_net_interface_name_;\n\n bool running_;\n};\n\nusing RouteManagerPtr = std::unique_ptr;\n} // namespace fptn::routing\n" }, { "path": "src/fptn-server/statistic/metrics.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"statistic/metrics.h\"\n\n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\nusing fptn::statistic::Metrics;\n\nMetrics::Metrics() : registry_(std::make_shared()) {\n active_sessions_ = &prometheus::BuildGauge()\n .Name(\"fptn_active_sessions\")\n .Help(\"Number of active VPN sessions\")\n .Register(*registry_)\n .Add({});\n incoming_bytes_counter_ =\n &prometheus::BuildCounter()\n .Name(\"fptn_user_incoming_traffic_bytes\")\n .Help(\"Incoming traffic for each user session in bytes\")\n .Register(*registry_);\n outgoing_bytes_counter_ =\n &prometheus::BuildCounter()\n .Name(\"fptn_user_outgoing_traffic_bytes\")\n .Help(\"Outgoing traffic for each user session in bytes\")\n .Register(*registry_);\n}\n\nvoid Metrics::UpdateStatistics(fptn::ClientID session_id,\n const std::string& username,\n std::size_t incoming_bytes,\n std::size_t outgoing_bytes) noexcept {\n const std::scoped_lock lock(mutex_); // mutex\n\n auto& incoming_metric = incoming_bytes_counter_->Add(\n {{\"username\", username}, {\"session_id\", std::to_string(session_id)}});\n auto& outgoing_metric = outgoing_bytes_counter_->Add(\n {{\"username\", username}, {\"session_id\", std::to_string(session_id)}});\n incoming_metric.Increment(\n static_cast(incoming_bytes) - incoming_metric.Value());\n outgoing_metric.Increment(\n static_cast(outgoing_bytes) - outgoing_metric.Value());\n}\n\nvoid Metrics::UpdateActiveSessions(std::size_t count) noexcept {\n const std::scoped_lock lock(mutex_); // mutex\n\n active_sessions_->Set(static_cast(count));\n}\n\nstd::string Metrics::Collect() noexcept {\n const std::scoped_lock lock(mutex_); // mutex\n\n try {\n std::ostringstream result;\n prometheus::TextSerializer serializer;\n serializer.Serialize(result, registry_->Collect());\n return result.str();\n } catch (const std::exception& e) {\n return \"Error collecting metrics: \" + std::string(e.what());\n }\n}\n" }, { "path": "src/fptn-server/statistic/metrics.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/client_id.h\"\n\nnamespace fptn::statistic {\nclass Metrics {\n public:\n Metrics();\n void UpdateStatistics(fptn::ClientID session_id,\n const std::string& username,\n std::size_t incoming_bytes,\n std::size_t outgoing_bytes) noexcept;\n void UpdateActiveSessions(std::size_t count) noexcept;\n std::string Collect() noexcept;\n\n public:\n Metrics(const Metrics&) = delete;\n Metrics& operator=(const Metrics&) = delete;\n\n private:\n mutable std::mutex mutex_;\n\n std::unique_ptr exposer_;\n std::shared_ptr registry_;\n\n prometheus::Gauge* active_sessions_;\n\n prometheus::Family* incoming_bytes_counter_;\n prometheus::Family* outgoing_bytes_counter_;\n};\n\nusing MetricsSPtr = std::shared_ptr;\n\n} // namespace fptn::statistic\n" }, { "path": "src/fptn-server/traffic_shaper/leaky_bucket.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"traffic_shaper/leaky_bucket.h\"\n\nusing fptn::traffic_shaper::LeakyBucket;\n\nLeakyBucket::LeakyBucket(std::size_t max_bites_per_second)\n : current_amount_(0),\n max_bytes_per_second_(max_bites_per_second / 8),\n last_leak_time_(std::chrono::steady_clock::now()),\n full_data_amount_(0) {}\n\nstd::size_t LeakyBucket::FullDataAmount() const noexcept {\n return full_data_amount_;\n}\n\nbool LeakyBucket::CheckSpeedLimit(std::size_t packet_size) noexcept {\n const std::unique_lock lock(mutex_); // mutex\n\n const auto now = std::chrono::steady_clock::now();\n const auto elapsed = std::chrono::duration_cast(\n now - last_leak_time_).count();\n if (elapsed < 1000) {\n if (current_amount_ + packet_size < max_bytes_per_second_) {\n current_amount_ += packet_size;\n full_data_amount_ += packet_size;\n return true;\n }\n return false;\n }\n last_leak_time_ = now;\n current_amount_ = packet_size;\n return true;\n}\n" }, { "path": "src/fptn-server/traffic_shaper/leaky_bucket.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include \"common/network/ip_packet.h\"\n\nnamespace fptn::traffic_shaper {\nclass LeakyBucket final {\n public:\n explicit LeakyBucket(std::size_t max_bites_per_second);\n bool CheckSpeedLimit(std::size_t packet_size) noexcept;\n std::size_t FullDataAmount() const noexcept;\n\n private:\n mutable std::mutex mutex_;\n std::size_t current_amount_;\n std::size_t max_bytes_per_second_;\n std::chrono::steady_clock::time_point last_leak_time_;\n\n std::size_t full_data_amount_;\n};\n\nusing LeakyBucketSPtr = std::shared_ptr;\n} // namespace fptn::traffic_shaper\n" }, { "path": "src/fptn-server/user/user_manager.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"user/user_manager.h\"\n\n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\nusing fptn::user::UserManager;\n\nUserManager::UserManager(const std::string& userfile,\n bool use_remote_server,\n std::string remote_server_ip,\n int remote_server_port)\n : use_remote_server_(use_remote_server),\n remote_server_ip_(std::move(remote_server_ip)),\n remote_server_port_(remote_server_port) {\n if (use_remote_server_) {\n // remote user list\n http_api_client_ =\n std::make_unique(remote_server_ip_,\n remote_server_port, protocol::https::CensorshipStrategy::kSni);\n } else {\n // local user list\n common_manager_ =\n std::make_unique(userfile);\n }\n}\n\nbool UserManager::Login(const std::string& username,\n const std::string& password,\n int& bandwidth_bit) const {\n bandwidth_bit = 0; // reset\n if (use_remote_server_) {\n SPDLOG_INFO(\n \"Login request to {}:{}\", remote_server_ip_, remote_server_port_);\n\n const std::string request = fmt::format(\n R\"({{ \"username\": \"{}\", \"password\": \"{}\" }})\", username, password);\n const auto resp =\n http_api_client_->Post(\"/api/v1/login\", request, \"application/json\");\n\n if (resp.code == 200) {\n try {\n const auto msg = resp.Json();\n if (msg.contains(\"access_token\") && msg.contains(\"bandwidth_bit\")) {\n bandwidth_bit = msg[\"bandwidth_bit\"].get();\n return true;\n }\n SPDLOG_INFO(\n \"User manager error: Access token not found in the response. \"\n \"Check your connection\");\n } catch (const nlohmann::json::parse_error& e) {\n SPDLOG_INFO(\"User manager: Error parsing JSON response: {}\\n{}\",\n e.what(), resp.body);\n }\n } else {\n SPDLOG_INFO(\n \"User manager: request failed or response is null. Code: {} Msg: {}\",\n resp.code, resp.errmsg);\n }\n } else if (common_manager_->Authenticate(username, password)) {\n bandwidth_bit = common_manager_->GetUserBandwidthBit(username);\n return true;\n }\n return false;\n}\n" }, { "path": "src/fptn-server/user/user_manager.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n\n#include \"common/user/common_user_manager.h\"\n\n#include \"fptn-protocol-lib/https/api_client/api_client.h\"\n\nnamespace fptn::user {\n\n/**\n * @class Manager\n * @brief Handles user authentication and bandwidth retrieval for both local and\n * remote servers.\n */\nclass UserManager {\n public:\n /**\n * @brief Constructs a Manager object.\n *\n * @param userfile Path to the local user file for authentication.\n * @param use_remote_server Flag indicating whether to use remote server\n * authentication.\n * @param remote_server_ip IP address of the remote authentication server.\n * @param remote_server_port Port number of the remote authentication server.\n */\n explicit UserManager(const std::string& userfile,\n bool use_remote_server,\n std::string remote_server_ip,\n int remote_server_port);\n\n /**\n * @brief Authenticates the user and retrieves the bandwidth limit.\n *\n * If the remote server is enabled, the credentials will be checked against\n * the remote server. Otherwise, local authentication will be used.\n *\n * @param username The username of the user.\n * @param password The password of the user.\n * @param bandwidth_bit The bandwidth limit in bits for the user. Set upon\n * successful login.\n *\n * @return `true` if the login is successful, `false` otherwise.\n */\n bool Login(const std::string& username,\n const std::string& password,\n int& bandwidth_bit) const;\n\n private:\n /// Indicates whether to use remote server authentication.\n const bool use_remote_server_;\n\n /// IP address of the remote authentication server.\n const std::string remote_server_ip_;\n\n /// Port number of the remote authentication server.\n const int remote_server_port_;\n\n /// HTTP client for sending requests to the remote authentication server.\n fptn::protocol::https::HttpsClientPtr http_api_client_;\n\n /// Local user manager for handling authentication using a local user file.\n fptn::common::user::CommonUserManagerPtr common_manager_;\n};\n\nusing UserManagerSPtr = std::shared_ptr;\n} // namespace fptn::user\n" }, { "path": "src/fptn-server/vpn/manager.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"vpn/manager.h\"\n\n#include \n\nusing fptn::vpn::Manager;\n\nManager::Manager(fptn::web::ServerPtr web_server,\n fptn::network::VirtualInterfacePtr network_interface,\n fptn::nat::TableSPtr nat,\n fptn::filter::ManagerSPtr filter,\n fptn::statistic::MetricsSPtr prometheus,\n std::size_t thread_pool_size)\n : web_server_(std::move(web_server)),\n network_interface_(std::move(network_interface)),\n nat_(std::move(nat)),\n filter_(std::move(filter)),\n prometheus_(std::move(prometheus)),\n thread_pool_size_(thread_pool_size > 0 ? thread_pool_size : 1) {\n read_to_client_threads_.reserve(thread_pool_size_);\n read_from_client_threads_.reserve(thread_pool_size_);\n}\n\nManager::~Manager() { Stop(); }\n\nbool Manager::Stop() {\n running_ = false;\n\n network_interface_->Stop();\n web_server_->Stop();\n\n for (auto& thread : read_to_client_threads_) {\n if (thread.joinable()) {\n thread.join();\n }\n }\n read_to_client_threads_.clear();\n\n for (auto& thread : read_from_client_threads_) {\n if (thread.joinable()) {\n thread.join();\n }\n }\n read_from_client_threads_.clear();\n\n if (collect_statistics_.joinable()) {\n collect_statistics_.join();\n }\n return true;\n}\n\nbool Manager::Start() {\n running_ = true;\n web_server_->Start();\n network_interface_->Start();\n\n for (size_t i = 0; i < thread_pool_size_; ++i) {\n read_to_client_threads_.emplace_back(&Manager::RunToClient, this);\n }\n\n for (size_t i = 0; i < thread_pool_size_; ++i) {\n read_from_client_threads_.emplace_back(&Manager::RunFromClient, this);\n }\n\n collect_statistics_ = std::thread(&Manager::RunCollectStatistics, this);\n const bool collect_statistic_status = collect_statistics_.joinable();\n return collect_statistic_status;\n}\n\nvoid Manager::RunToClient() const noexcept {\n constexpr std::chrono::milliseconds kTimeout{100};\n\n while (running_) {\n auto packet = network_interface_->WaitForPacket(kTimeout);\n if (!packet || !running_) {\n continue;\n }\n if (!packet->IsIPv4() && !packet->IsIPv6()) {\n continue;\n }\n // get session using \"fake\" client address\n fptn::client::SessionSPtr session = nullptr;\n if (packet->IsIPv4()) {\n session = nat_->GetSessionByFakeIPv4(fptn::common::network::IPv4Address(\n packet->IPv4Layer()->getDstIPv4Address()));\n } else if (packet->IsIPv6()) {\n session = nat_->GetSessionByFakeIPv6(fptn::common::network::IPv6Address(\n packet->IPv6Layer()->getDstIPv6Address()));\n }\n if (!session || !running_) {\n continue;\n }\n // check shaper\n auto& shaper = session->TrafficShaperToClient();\n if (shaper && !shaper->CheckSpeedLimit(packet->Size())) {\n continue;\n }\n // send\n if (running_) {\n web_server_->Send(session->ChangeIPAddressToClientIP(std::move(packet)));\n }\n }\n}\n\nvoid Manager::RunFromClient() const noexcept {\n constexpr std::chrono::milliseconds kTimeout{100};\n\n while (running_) {\n auto packet = web_server_->WaitForPacket(kTimeout);\n if (!packet || !running_) {\n continue;\n }\n if (!packet->IsIPv4() && !packet->IsIPv6()) {\n continue;\n }\n // get session\n const auto session = nat_->GetSessionByClientId(packet->ClientId());\n if (!session || !running_) {\n continue;\n }\n // check shaper\n auto shaper = session->TrafficShaperFromClient();\n if (shaper && !shaper->CheckSpeedLimit(packet->Size())) {\n continue;\n }\n // filter\n packet = filter_->Apply(std::move(packet));\n if (!packet || !running_) {\n continue;\n }\n // send\n if (running_) {\n network_interface_->Send(\n session->ChangeIPAddressToFakeIP(std::move(packet)));\n }\n }\n}\n\nvoid Manager::RunCollectStatistics() noexcept {\n const std::chrono::milliseconds timeout{300};\n const std::chrono::seconds collect_interval{2};\n\n std::chrono::steady_clock::time_point last_collection_time;\n while (running_) {\n auto now = std::chrono::steady_clock::now();\n if (now - last_collection_time > collect_interval) {\n nat_->UpdateStatistic(prometheus_);\n last_collection_time = now;\n }\n std::this_thread::sleep_for(timeout);\n }\n}\n" }, { "path": "src/fptn-server/vpn/manager.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include \"filter/manager.h\"\n#include \"nat/table.h\"\n#include \"network/virtual_interface.h\"\n#include \"web/server.h\"\n\nnamespace fptn::vpn {\nclass Manager final {\n public:\n Manager(fptn::web::ServerPtr web_server,\n fptn::network::VirtualInterfacePtr network_interface,\n fptn::nat::TableSPtr nat,\n fptn::filter::ManagerSPtr filter,\n fptn::statistic::MetricsSPtr prometheus,\n std::size_t thread_pool_size = 4);\n ~Manager();\n bool Stop();\n bool Start();\n\n protected:\n void RunToClient() const noexcept;\n void RunFromClient() const noexcept;\n void RunCollectStatistics() noexcept;\n\n private:\n std::atomic running_ = false;\n\n const fptn::web::ServerPtr web_server_;\n const fptn::network::VirtualInterfacePtr network_interface_;\n const fptn::nat::TableSPtr nat_;\n const fptn::filter::ManagerSPtr filter_;\n const fptn::statistic::MetricsSPtr prometheus_;\n const std::size_t thread_pool_size_;\n\n std::vector read_to_client_threads_;\n std::vector read_from_client_threads_;\n std::thread collect_statistics_;\n};\n\nusing UserManagerSPtr = std::shared_ptr;\n} // namespace fptn::vpn\n" }, { "path": "src/fptn-server/web/api/handle.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n\n#include \"common/client_id.h\"\n#include \"common/network/ip_address.h\"\n#include \"common/network/ip_packet.h\"\n\nnamespace fptn::web {\nnamespace http {\nusing request = boost::beast::http::request;\nusing response = boost::beast::http::response;\n} // namespace http\n\nusing ApiHandle = std::function;\n\nusing ApiHandleMap = std::unordered_map;\n\ninline std::string GetApiKey(\n const std::string& url, const std::string& method) {\n return method + \" \" + url;\n}\n\ninline void AddApiHandle(ApiHandleMap& m,\n const std::string& url,\n const std::string& method,\n const ApiHandle& handle) noexcept {\n const std::string key = GetApiKey(url, method);\n m[key] = handle;\n}\n\ninline ApiHandle GetApiHandle(const ApiHandleMap& m,\n const std::string& url,\n const std::string& method) noexcept {\n const std::string key = GetApiKey(url, method);\n const auto& it = m.find(key);\n if (it != m.end()) {\n return it->second;\n }\n return nullptr;\n}\n\nclass Session;\n\nusing WebSocketOpenConnectionCallback = std::function& session,\n const std::string& url,\n const std::string& access_token)>;\n\nusing WebSocketNewIPPacketCallback = std::function;\n\nusing WebSocketCloseConnectionCallback = std::function;\n} // namespace fptn::web\n" }, { "path": "src/fptn-server/web/handshake/handshake_cache_manager.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"web/handshake/handshake_cache_manager.h\"\n\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/network/resolv.h\"\n#include \"common/network/utils.h\"\n\nnamespace fptn::web {\n\nHandshakeCacheManager::HandshakeCacheManager(boost::asio::io_context& ioc,\n std::string default_domain,\n std::chrono::seconds cache_ttl)\n : ioc_(ioc),\n cache_ttl_(cache_ttl),\n default_domain_(std::move(default_domain)) {} // NOLINT\n\nHandshakeResponse HandshakeCacheManager::CheckCache(\n const std::string& cache_key) {\n const std::unique_lock lock(mutex_); // mutex\n\n const auto it = cache_.find(cache_key);\n if (it != cache_.end()) {\n const auto& entry = it->second;\n const auto now = std::chrono::steady_clock::now();\n if (now - entry.timestamp < cache_ttl_) {\n return it->second.data;\n }\n cache_.erase(it);\n }\n return nullptr;\n}\n\nboost::asio::awaitable HandshakeCacheManager::GetHandshake(\n const std::string& sni,\n const std::uint8_t* buffer_ptr,\n std::size_t size,\n const std::chrono::seconds& timeout) {\n std::vector client_handshake_data(\n buffer_ptr, buffer_ptr + size);\n\n const auto cached_response = CheckCache(sni);\n if (cached_response) {\n SPDLOG_INFO(\"Cache hit for SNI: {} (TLS fingerprint size: {})\", sni,\n cached_response->size());\n co_return cached_response;\n }\n\n HandshakeResponse response =\n co_await FetchRealHandshake(sni, client_handshake_data, timeout);\n if (!response) {\n SPDLOG_WARN(\n \"Failed to fetch handshake from original SNI: {}, trying default \"\n \"domain: {}\",\n sni, default_domain_);\n\n // RET\n const auto default_cached_response = CheckCache(default_domain_);\n if (default_cached_response) {\n SPDLOG_INFO(\"Returning cached handshake for SNI: {} (using cache)\",\n default_domain_);\n co_return default_cached_response;\n }\n\n // Get new\n response = co_await FetchRealHandshake(\n default_domain_, client_handshake_data, timeout);\n if (response) {\n const std::unique_lock lock(mutex_); // mutex\n cache_[default_domain_] = CacheEntry{\n .data = response, .timestamp = std::chrono::steady_clock::now()};\n SPDLOG_INFO(\"Successfully fetched handshake from default domain: {}\",\n default_domain_);\n }\n }\n\n if (response) {\n const std::unique_lock lock(mutex_); // mutex\n cache_[sni] = CacheEntry{\n .data = response, .timestamp = std::chrono::steady_clock::now()};\n SPDLOG_INFO(\n \"Cached handshake response for SNI: {}, \"\n \"size: {} bytes\",\n sni, response->size());\n co_return response;\n }\n SPDLOG_WARN(\"Failed to fetch handshake from real server for SNI: {}\", sni);\n co_return HandshakeResponse();\n}\n\nboost::asio::awaitable\nHandshakeCacheManager::FetchRealHandshake(const std::string& sni,\n const std::vector& client_handshake_data,\n const std::chrono::seconds& timeout) const {\n boost::asio::ip::tcp::socket target_socket(ioc_);\n\n constexpr std::size_t kMaxTotalSize = 65536;\n auto full_response = std::make_shared>();\n full_response->reserve(kMaxTotalSize);\n try {\n // DNS resolution\n boost::asio::io_context resolve_ioc;\n const auto resolve_result = fptn::common::network::ResolveWithTimeout(\n resolve_ioc, sni, \"443\", timeout.count());\n\n if (!resolve_result.success()) {\n SPDLOG_WARN(\"DNS failed for {}: {}\", sni, resolve_result.error.message());\n co_return nullptr;\n }\n\n // Connect to real server\n co_await boost::asio::async_connect(\n target_socket, resolve_result.results, boost::asio::use_awaitable);\n\n // Send client handshake\n co_await boost::asio::async_write(target_socket,\n boost::asio::buffer(client_handshake_data), boost::asio::use_awaitable);\n\n const auto server_response =\n co_await common::network::WaitForServerTlsHelloAsync(\n target_socket, timeout);\n if (server_response.has_value()) {\n *full_response = server_response.value();\n }\n SPDLOG_INFO(\"Received {} bytes from {}\", full_response->size(), sni);\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Error fetching handshake from {}: {}\", sni, e.what());\n }\n\n boost::system::error_code close_ec;\n target_socket.close(close_ec);\n\n co_return full_response;\n}\n\n} // namespace fptn::web\n" }, { "path": "src/fptn-server/web/handshake/handshake_cache_manager.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n\nnamespace fptn::web {\n\nusing HandshakeResponse = std::shared_ptr>;\n\nclass HandshakeCacheManager final {\n public:\n explicit HandshakeCacheManager(boost::asio::io_context& ioc,\n std::string default_domain,\n std::chrono::seconds cache_ttl = std::chrono::seconds(1200));\n\n boost::asio::awaitable GetHandshake(const std::string& sni,\n const std::uint8_t* buffer_ptr,\n std::size_t size,\n const std::chrono::seconds& timeout);\n\n protected:\n boost::asio::awaitable FetchRealHandshake(\n const std::string& sni,\n const std::vector& client_handshake_data,\n const std::chrono::seconds& timeout) const;\n\n HandshakeResponse CheckCache(const std::string& cache_key);\n\n private:\n struct CacheEntry {\n HandshakeResponse data;\n std::chrono::steady_clock::time_point timestamp;\n };\n\n mutable std::mutex mutex_;\n\n boost::asio::io_context& ioc_;\n std::chrono::seconds cache_ttl_;\n\n const std::string default_domain_;\n\n std::unordered_map cache_;\n};\n\nusing HandshakeCacheManagerSPtr = std::shared_ptr;\n\n} // namespace fptn::web\n" }, { "path": "src/fptn-server/web/listener/listener.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"web/listener/listener.h\"\n\n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n\nusing fptn::web::Listener;\n\nListener::Listener(std::uint16_t port,\n bool enable_detect_probing,\n std::string default_proxy_domain,\n std::vector allowed_sni_list,\n boost::asio::io_context& ioc,\n fptn::common::jwt_token::TokenManagerSPtr token_manager,\n HandshakeCacheManagerSPtr handshake_cache_manager,\n std::string server_external_ips,\n WebSocketOpenConnectionCallback ws_open_callback,\n WebSocketNewIPPacketCallback ws_new_ippacket_callback,\n WebSocketCloseConnectionCallback ws_close_callback)\n : port_(port),\n enable_detect_probing_(enable_detect_probing),\n default_proxy_domain_(std::move(default_proxy_domain)),\n allowed_sni_list_(std::move(allowed_sni_list)),\n ioc_(ioc),\n ctx_(boost::asio::ssl::context::tlsv13_server),\n acceptor_(ioc_),\n token_manager_(std::move(token_manager)),\n handshake_cache_manager_(std::move(handshake_cache_manager)),\n server_external_ips_(std::move(server_external_ips)),\n ws_open_callback_(std::move(ws_open_callback)),\n ws_new_ippacket_callback_(std::move(ws_new_ippacket_callback)),\n ws_close_callback_(std::move(ws_close_callback)),\n endpoint_(\n boost::asio::ip::tcp::endpoint(boost::asio::ip::tcp::v4(), port)),\n running_(false) {\n ctx_.set_options(boost::asio::ssl::context::default_workarounds |\n boost::asio::ssl::context::no_sslv2 |\n boost::asio::ssl::context::no_sslv3 |\n boost::asio::ssl::context::single_dh_use);\n ctx_.use_certificate_chain_file(token_manager_->ServerCrtPath());\n ctx_.use_private_key_file(\n token_manager_->ServerKeyPath(), boost::asio::ssl::context::pem);\n ctx_.set_verify_mode(boost::asio::ssl::verify_none);\n}\n\nvoid Listener::AddApiHandle(const std::string& url,\n const std::string& method,\n const ApiHandle& handle) {\n fptn::web::AddApiHandle(api_handles_, url, method, handle);\n}\n\nboost::asio::awaitable Listener::Run() {\n constexpr int kBufferSize = 4 * 1024 * 1024;\n try {\n acceptor_.open(endpoint_.protocol());\n acceptor_.set_option(boost::asio::ip::tcp::no_delay(true));\n acceptor_.set_option(boost::asio::socket_base::reuse_address(true));\n\n // Optimize socket buffers for high throughput (1 Gbit/s+)\n // Set send/recv buffers to 4MB (typical for high-speed WAN)\n acceptor_.set_option(\n boost::asio::socket_base::receive_buffer_size(kBufferSize));\n acceptor_.set_option(\n boost::asio::socket_base::send_buffer_size(kBufferSize));\n\n acceptor_.bind(endpoint_);\n acceptor_.listen(boost::asio::socket_base::max_listen_connections);\n } catch (boost::system::system_error& err) {\n SPDLOG_ERROR(\"Listener::prepare error: {}\", err.what());\n co_return;\n }\n running_ = true;\n\n boost::system::error_code ec;\n while (running_) {\n try {\n boost::asio::ip::tcp::socket socket(ioc_);\n co_await acceptor_.async_accept(\n socket, boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n\n if (!ec) {\n // Propagate buffer settings to the accepted socket\n socket.set_option(boost::asio::ip::tcp::no_delay(true));\n socket.set_option(\n boost::asio::socket_base::receive_buffer_size(kBufferSize));\n socket.set_option(\n boost::asio::socket_base::send_buffer_size(kBufferSize));\n\n auto session = std::make_shared(port_,\n // probing settings\n enable_detect_probing_, default_proxy_domain_, allowed_sni_list_,\n server_external_ips_, std::move(socket), ctx_,\n // handlers\n api_handles_, handshake_cache_manager_, ws_open_callback_,\n ws_new_ippacket_callback_, ws_close_callback_);\n // run coroutine\n boost::asio::co_spawn(\n ioc_,\n [session]() mutable -> boost::asio::awaitable {\n co_await session->Run();\n },\n boost::asio::detached);\n } else if (running_) {\n SPDLOG_ERROR(\"Error onAccept: {}\", ec.message());\n // Add delay after exception\n boost::asio::steady_timer timer(ioc_);\n timer.expires_after(std::chrono::milliseconds(300));\n co_await timer.async_wait(boost::asio::use_awaitable);\n }\n } catch (boost::system::system_error& err) {\n if (running_) {\n SPDLOG_ERROR(\"Listener::run error: {}\", err.what());\n }\n co_return;\n }\n }\n co_return;\n}\n\nbool Listener::Stop() {\n try {\n running_ = false;\n acceptor_.close();\n } catch (boost::system::system_error& err) {\n SPDLOG_ERROR(\"Listener::stop error: {}\", err.what());\n return false;\n }\n return true;\n}\n" }, { "path": "src/fptn-server/web/listener/listener.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n\n#include \"common/jwt_token/token_manager.h\"\n\n#include \"web/api/handle.h\"\n#include \"web/handshake/handshake_cache_manager.h\"\n#include \"web/session/session.h\"\n\nnamespace fptn::web {\n\nclass Listener final {\n public:\n explicit Listener(std::uint16_t port,\n bool enable_detect_probing,\n std::string default_proxy_domain,\n std::vector allowed_sni_list,\n boost::asio::io_context& ioc,\n fptn::common::jwt_token::TokenManagerSPtr token_manager,\n HandshakeCacheManagerSPtr handshake_cache_manager,\n std::string server_external_ips,\n WebSocketOpenConnectionCallback ws_open_callback,\n WebSocketNewIPPacketCallback ws_new_ippacket_callback,\n WebSocketCloseConnectionCallback ws_close_callback);\n\n boost::asio::awaitable Run();\n bool Stop();\n void AddApiHandle(const std::string& url,\n const std::string& method,\n const ApiHandle& handle);\n\n protected:\n const std::uint16_t port_;\n const bool enable_detect_probing_;\n const std::string default_proxy_domain_;\n const std::vector allowed_sni_list_;\n\n boost::asio::io_context& ioc_;\n boost::asio::ssl::context ctx_;\n boost::asio::ip::tcp::acceptor acceptor_;\n\n const fptn::common::jwt_token::TokenManagerSPtr token_manager_;\n\n HandshakeCacheManagerSPtr handshake_cache_manager_;\n\n const std::string server_external_ips_;\n\n const WebSocketOpenConnectionCallback ws_open_callback_;\n const WebSocketNewIPPacketCallback ws_new_ippacket_callback_;\n const WebSocketCloseConnectionCallback ws_close_callback_;\n\n boost::asio::ip::tcp::endpoint endpoint_;\n std::atomic running_;\n\n ApiHandleMap api_handles_;\n};\n\nusing ListenerSPtr = std::shared_ptr;\n} // namespace fptn::web\n" }, { "path": "src/fptn-server/web/server.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"web/server.h\"\n\n#include \n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"common/utils/utils.h\"\n\nusing fptn::web::Server;\n\nServer::Server(std::uint16_t port,\n const fptn::nat::TableSPtr& nat_table,\n const fptn::user::UserManagerSPtr& user_manager,\n const fptn::common::jwt_token::TokenManagerSPtr& token_manager,\n const fptn::statistic::MetricsSPtr& prometheus,\n const std::string& prometheus_access_key,\n fptn::common::network::IPv4Address dns_server_ipv4,\n fptn::common::network::IPv6Address dns_server_ipv6,\n bool enable_detect_probing,\n std::string default_proxy_domain,\n std::vector allowed_sni_list,\n std::size_t max_active_sessions_per_user,\n std::string server_external_ips,\n int thread_number)\n : running_(false),\n port_(port),\n nat_table_(nat_table),\n user_manager_(user_manager),\n token_manager_(token_manager),\n prometheus_(prometheus),\n prometheus_access_key_(prometheus_access_key),\n dns_server_ipv4_(std::move(dns_server_ipv4)),\n dns_server_ipv6_(std::move(dns_server_ipv6)),\n enable_detect_probing_(enable_detect_probing),\n default_proxy_domain_(std::move(default_proxy_domain)),\n allowed_sni_list_(std::move(allowed_sni_list)),\n max_active_sessions_per_user_(max_active_sessions_per_user),\n server_external_ips_(std::move(server_external_ips)),\n thread_number_(std::max(1, thread_number)),\n ioc_(thread_number),\n from_client_(std::make_unique()),\n to_client_(std::make_unique(ioc_)) {\n using std::placeholders::_1;\n using std::placeholders::_2;\n using std::placeholders::_3;\n using std::placeholders::_4;\n using std::placeholders::_5;\n using std::placeholders::_6;\n using std::placeholders::_7;\n\n handshake_cache_manager_ =\n std::make_shared(ioc_, default_proxy_domain_);\n\n listener_ = std::make_shared(port_,\n // proxy settings\n enable_detect_probing_, default_proxy_domain_, allowed_sni_list_,\n // ioc\n ioc_, token_manager, handshake_cache_manager_, server_external_ips_,\n // NOLINTNEXTLINE(modernize-avoid-bind)\n std::bind(\n &Server::HandleWsOpenConnection, this, _1, _2, _3, _4, _5, _6, _7),\n // NOLINTNEXTLINE(modernize-avoid-bind)\n std::bind(&Server::HandleWsNewIPPacket, this, _1),\n // NOLINTNEXTLINE(modernize-avoid-bind)\n std::bind(&Server::HandleWsCloseConnection, this, _1));\n listener_->AddApiHandle(\n // NOLINTNEXTLINE(modernize-avoid-bind)\n kUrlDns_, \"GET\", std::bind(&Server::HandleApiDns, this, _1, _2));\n listener_->AddApiHandle(\n // NOLINTNEXTLINE(modernize-avoid-bind)\n kUrlLogin_, \"POST\", std::bind(&Server::HandleApiLogin, this, _1, _2));\n listener_->AddApiHandle(kUrlTestFileBin_, \"GET\",\n // NOLINTNEXTLINE(modernize-avoid-bind)\n std::bind(&Server::HandleApiTestFile, this, _1, _2));\n if (!prometheus_access_key.empty()) {\n // Construct the URL for accessing Prometheus statistics by appending the\n // access key\n const std::string metrics = kUrlMetrics_ + '/' + prometheus_access_key;\n listener_->AddApiHandle(\n // NOLINTNEXTLINE(modernize-avoid-bind)\n metrics, \"GET\", std::bind(&Server::HandleApiMetrics, this, _1, _2));\n }\n}\n\nServer::~Server() { Stop(); }\n\nbool Server::Start() {\n running_ = true;\n try {\n // run listener\n boost::asio::co_spawn(\n ioc_,\n [this]() -> boost::asio::awaitable { co_await listener_->Run(); },\n boost::asio::detached);\n // run senders\n boost::asio::co_spawn(\n ioc_,\n [this]() -> boost::asio::awaitable { co_await RunSender(); },\n boost::asio::detached);\n // run threads\n ioc_threads_.reserve(thread_number_);\n for (std::size_t i = 0; i < thread_number_; ++i) {\n ioc_threads_.emplace_back([this]() { ioc_.run(); });\n }\n } catch (boost::system::system_error& err) {\n SPDLOG_ERROR(\"Server::start error: {}\", err.what());\n running_ = false;\n return false;\n }\n return true;\n}\n\nboost::asio::awaitable Server::RunSender() {\n constexpr std::chrono::milliseconds kTimeout{10};\n\n while (running_) {\n auto optpacket = co_await to_client_->WaitForPacketAsync(kTimeout);\n if (optpacket && running_) {\n SessionSPtr session;\n\n {\n const std::unique_lock lock(mutex_); // mutex\n\n auto it = sessions_.find(optpacket->get()->ClientId());\n if (it != sessions_.end()) {\n session = it->second;\n }\n }\n if (session) {\n const bool status = co_await session->Send(std::move(*optpacket));\n if (!status) {\n session->Close();\n }\n }\n }\n }\n co_return;\n}\n\nbool Server::Stop() {\n if (running_) {\n running_ = false;\n SPDLOG_INFO(\"Server stop\");\n\n listener_->Stop();\n\n for (auto& session : sessions_) {\n if (session.second) {\n session.second->Close();\n }\n }\n sessions_.clear();\n if (!ioc_.stopped()) {\n ioc_.stop();\n }\n for (auto& th : ioc_threads_) {\n if (th.joinable()) {\n th.join();\n }\n }\n return true;\n }\n return false;\n}\n\nvoid Server::Send(fptn::common::network::IPPacketPtr packet) {\n to_client_->Push(std::move(packet));\n}\n\nfptn::common::network::IPPacketPtr Server::WaitForPacket(\n const std::chrono::milliseconds& duration) {\n return from_client_->WaitForPacket(duration);\n}\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nint Server::HandleApiDns(const http::request& req, http::response& resp) {\n (void)req;\n\n resp.body() = fmt::format(R\"({{\"dns\": \"{}\", \"dns_ipv6\": \"{}\" }})\",\n dns_server_ipv4_.ToString(), dns_server_ipv6_.ToString());\n resp.set(boost::beast::http::field::content_type,\n \"application/json; charset=utf-8\");\n return 200;\n}\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nint Server::HandleApiLogin(const http::request& req, http::response& resp) {\n try {\n const auto request = nlohmann::json::parse(req.body());\n const auto username = request.at(\"username\").get();\n const auto password = request.at(\"password\").get();\n int bandwidth_bit = 0;\n if (user_manager_->Login(username, password, bandwidth_bit)) {\n SPDLOG_INFO(\"Successful login for user {}\", username);\n const auto tokens = token_manager_->Generate(username, bandwidth_bit);\n resp.body() = fmt::format(\n R\"({{ \"access_token\": \"{}\", \"refresh_token\": \"{}\", \"bandwidth_bit\": {} }})\",\n tokens.first, tokens.second, std::to_string(bandwidth_bit));\n return 200;\n }\n SPDLOG_WARN(\"Wrong password for user: \\\"{}\\\" \", username);\n resp.body() =\n R\"({\"status\": \"error\", \"message\": \"Invalid login or password.\"})\";\n } catch (const nlohmann::json::exception& e) {\n SPDLOG_ERROR(\"HTTP JSON AUTH ERROR: {}\", e.what());\n resp.body() = R\"({\"status\": \"error\", \"message\": \"Invalid JSON format.\"})\";\n return 400;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"HTTP AUTH ERROR: {}\", e.what());\n resp.body() =\n R\"({\"status\": \"error\", \"message\": \"An unexpected error occurred.\"})\";\n return 500;\n } catch (...) {\n SPDLOG_ERROR(\"UNDEFINED SERVER ERROR\");\n resp.body() = R\"({\"status\": \"error\", \"message\": \"Undefined server error\"})\";\n return 501;\n }\n return 401;\n}\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nint Server::HandleApiMetrics(const http::request& req, http::response& resp) {\n (void)req;\n\n resp.set(boost::beast::http::field::content_type, \"text/html; charset=utf-8\");\n resp.body() = prometheus_->Collect();\n return 200;\n}\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nint Server::HandleApiTestFile(const http::request& req, http::response& resp) {\n (void)req;\n\n static const std::string kData =\n fptn::common::utils::GenerateRandomString(100 * 1024); // 100KB\n\n resp.set(boost::beast::http::field::content_type, \"application/octet-stream\");\n resp.body() = kData;\n return 200;\n}\n\nbool Server::HandleWsOpenConnection(fptn::ClientID client_id,\n const fptn::common::network::IPv4Address& client_ip,\n const fptn::common::network::IPv4Address& client_vpn_ipv4,\n const fptn::common::network::IPv6Address& client_vpn_ipv6,\n const SessionSPtr& session,\n const std::string& url,\n const std::string& access_token) {\n if (!running_) {\n SPDLOG_ERROR(\"Server is not running\");\n return false;\n }\n if (url != kUrlWebSocket_) {\n SPDLOG_ERROR(\"Wrong URL \\\"{}\\\"\", url);\n return false;\n }\n if (!client_vpn_ipv4.IsEmpty() && !client_vpn_ipv6.IsEmpty()) {\n std::string username;\n std::size_t bandwidth_bites_seconds = 0;\n if (token_manager_->Validate(\n access_token, username, bandwidth_bites_seconds)) {\n const std::unique_lock lock(mutex_); // mutex\n\n const auto active_sessions =\n nat_table_->GetNumberActiveSessionByUsername(username);\n\n if (active_sessions > max_active_sessions_per_user_) {\n SPDLOG_WARN(\n \"Session limit exceeded for user '{}': {} active (limit: {})\",\n username, active_sessions, max_active_sessions_per_user_);\n return false;\n }\n\n if (sessions_.contains(client_id)) {\n SPDLOG_WARN(\"Client with same ID already exists!\");\n } else {\n const auto shaper_to_client =\n std::make_shared(\n bandwidth_bites_seconds);\n const auto shaper_from_client =\n std::make_shared(\n bandwidth_bites_seconds);\n const auto nat_session = nat_table_->CreateClientSession(client_id,\n username, client_vpn_ipv4, client_vpn_ipv6, shaper_to_client,\n shaper_from_client);\n SPDLOG_INFO(\n \"NEW SESSION! Username={} client_id={} Bandwidth={} ClientIP={} \"\n \"VirtualIPv4={} VirtualIPv6={}\",\n username, client_id, bandwidth_bites_seconds, client_ip.ToString(),\n nat_session->FakeClientIPv4().ToString(),\n nat_session->FakeClientIPv6().ToString());\n if (running_) {\n sessions_.insert({client_id, session});\n return true;\n }\n return false;\n }\n } else {\n SPDLOG_WARN(\"WRONG TOKEN: {}\", username);\n }\n } else {\n SPDLOG_WARN(\"Wrong ClientIP or ClientIPv6\");\n }\n return false;\n}\n\nvoid Server::HandleWsNewIPPacket(\n fptn::common::network::IPPacketPtr packet) noexcept {\n from_client_->Push(std::move(packet));\n}\n\nvoid Server::HandleWsCloseConnection(fptn::ClientID client_id) noexcept {\n SessionSPtr session;\n if (running_) {\n const std::unique_lock lock(mutex_); // mutex\n\n auto it = sessions_.find(client_id);\n if (it != sessions_.end()) {\n session = std::move(it->second);\n sessions_.erase(it);\n }\n }\n if (session != nullptr) {\n session->Close();\n SPDLOG_INFO(\"Session closed and removed (client_id={})\", client_id);\n } else {\n SPDLOG_WARN(\n \"Attempted to close non-existent session (client_id={})\", client_id);\n }\n nat_table_->DelClientSession(client_id);\n}\n" }, { "path": "src/fptn-server/web/server.h", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n\n#include \"common/data/channel.h\"\n#include \"common/data/channel_async.h\"\n#include \"common/jwt_token/token_manager.h\"\n#include \"common/network/ip_packet.h\"\n\n#include \"handshake/handshake_cache_manager.h\"\n#include \"listener/listener.h\"\n#include \"nat/table.h\"\n#include \"user/user_manager.h\"\n\nnamespace fptn::web {\nclass Server final {\n public:\n Server(std::uint16_t port,\n const fptn::nat::TableSPtr& nat_table,\n const fptn::user::UserManagerSPtr& user_manager,\n const fptn::common::jwt_token::TokenManagerSPtr& token_manager,\n const fptn::statistic::MetricsSPtr& prometheus,\n const std::string& prometheus_access_key,\n fptn::common::network::IPv4Address dns_server_ipv4,\n fptn::common::network::IPv6Address dns_server_ipv6,\n bool enable_detect_probing,\n std::string default_proxy_domain,\n std::vector allowed_sni_list,\n std::size_t max_active_sessions_per_user,\n std::string server_external_ips,\n int thread_number = 8);\n ~Server();\n bool Start();\n bool Stop();\n\n void Send(fptn::common::network::IPPacketPtr packet);\n fptn::common::network::IPPacketPtr WaitForPacket(\n const std::chrono::milliseconds& duration);\n\n protected:\n boost::asio::awaitable RunSender();\n\n protected:\n // http\n int HandleApiDns(const http::request& req, http::response& resp);\n int HandleApiLogin(const http::request& req, http::response& resp);\n int HandleApiMetrics(const http::request& req, http::response& resp);\n int HandleApiTestFile(const http::request& req, http::response& resp);\n\n protected:\n // websocket\n bool HandleWsOpenConnection(fptn::ClientID client_id,\n const fptn::common::network::IPv4Address& client_ip,\n const fptn::common::network::IPv4Address& client_vpn_ipv4,\n const fptn::common::network::IPv6Address& client_vpn_ipv6,\n const SessionSPtr& session,\n const std::string& url,\n const std::string& access_token);\n void HandleWsNewIPPacket(fptn::common::network::IPPacketPtr packet) noexcept;\n void HandleWsCloseConnection(fptn::ClientID client_id) noexcept;\n\n private:\n const std::string kUrlDns_ = \"/api/v1/dns\";\n const std::string kUrlLogin_ = \"/api/v1/login\";\n const std::string kUrlMetrics_ = \"/api/v1/metrics\";\n const std::string kUrlTestFileBin_ = \"/api/v1/test/file.bin\";\n const std::string kUrlWebSocket_ = \"/fptn\";\n\n mutable std::mutex mutex_;\n std::atomic running_;\n\n const std::uint16_t port_;\n const fptn::nat::TableSPtr& nat_table_;\n const fptn::user::UserManagerSPtr& user_manager_;\n const fptn::common::jwt_token::TokenManagerSPtr token_manager_;\n const fptn::statistic::MetricsSPtr& prometheus_;\n const std::string prometheus_access_key_;\n const fptn::common::network::IPv4Address dns_server_ipv4_;\n const fptn::common::network::IPv6Address dns_server_ipv6_;\n const bool enable_detect_probing_;\n const std::string default_proxy_domain_;\n const std::vector allowed_sni_list_;\n\n const std::size_t max_active_sessions_per_user_;\n const std::string server_external_ips_;\n const std::size_t thread_number_;\n\n boost::asio::io_context ioc_;\n fptn::common::data::ChannelPtr from_client_;\n fptn::common::data::ChannelAsyncPtr to_client_;\n\n ListenerSPtr listener_;\n\n HandshakeCacheManagerSPtr handshake_cache_manager_;\n\n std::vector ioc_threads_;\n std::unordered_map sessions_;\n};\n\nusing ServerPtr = std::unique_ptr;\n} // namespace fptn::web\n" }, { "path": "src/fptn-server/web/session/session.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \"web/session/session.h\"\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include \"common/network/resolv.h\"\n#include \"common/network/utils.h\"\n\n#include \"fptn-protocol-lib/https/obfuscator/methods/detector.h\"\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls/tls_obfuscator.h\"\n#include \"fptn-protocol-lib/https/obfuscator/methods/tls2/tls_obfuscator2.h\"\n#include \"fptn-protocol-lib/https/utils/tls/tls.h\"\n#include \"fptn-protocol-lib/protobuf/protocol.h\"\n#include \"fptn-protocol-lib/time/time_provider.h\"\n\nnamespace {\nstd::atomic client_id_counter = 0;\n\nstd::vector GetServerIpAddresses(\n const std::string& server_external_ips) {\n static std::mutex ip_mutex;\n static std::vector server_ips;\n\n const std::scoped_lock lock(ip_mutex); // mutex\n\n if (server_ips.empty()) {\n server_ips = fptn::common::network::GetServerIpAddresses();\n\n if (!server_external_ips.empty()) {\n const auto external_ips =\n fptn::common::utils::SplitCommaSeparated(server_external_ips);\n std::ranges::copy_if(external_ips, std::back_inserter(server_ips),\n [](const std::string& ip) {\n return fptn::common::network::IsIpAddress(ip);\n });\n }\n }\n return server_ips;\n}\n\nvoid SetSocketTimeouts(boost::asio::ip::tcp::socket& socket, int timeout_sec) {\n timeval tv = {};\n tv.tv_sec = timeout_sec;\n tv.tv_usec = 0;\n const int socket_fd = socket.native_handle();\n ::setsockopt(socket_fd, SOL_SOCKET, SO_RCVTIMEO,\n reinterpret_cast(&tv), sizeof(tv));\n ::setsockopt(socket_fd, SOL_SOCKET, SO_SNDTIMEO,\n reinterpret_cast(&tv), sizeof(tv));\n}\n\n} // namespace\n\nnamespace fptn::web {\n\nSession::Session(std::uint16_t port,\n bool enable_detect_probing,\n std::string default_proxy_domain,\n std::vector allowed_sni_list,\n std::string server_external_ips,\n boost::asio::ip::tcp::socket&& socket,\n boost::asio::ssl::context& ctx,\n const ApiHandleMap& api_handles,\n HandshakeCacheManagerSPtr handshake_cache_manager,\n WebSocketOpenConnectionCallback ws_open_callback,\n WebSocketNewIPPacketCallback ws_new_ippacket_callback,\n WebSocketCloseConnectionCallback ws_close_callback)\n : port_(port),\n enable_detect_probing_(enable_detect_probing),\n default_proxy_domain_(std::move(default_proxy_domain)),\n allowed_sni_list_(std::move(allowed_sni_list)),\n server_external_ips_(std::move(server_external_ips)),\n ws_(ssl_stream_type(\n obfuscator_socket_type(tcp_stream_type(std::move(socket))), ctx)),\n strand_(boost::asio::make_strand(ws_.get_executor())),\n write_channel_(strand_, 8192),\n api_handles_(api_handles),\n handshake_cache_manager_(std::move(handshake_cache_manager)),\n ws_open_callback_(std::move(ws_open_callback)),\n ws_new_ippacket_callback_(std::move(ws_new_ippacket_callback)),\n ws_close_callback_(std::move(ws_close_callback)),\n running_(false),\n init_completed_(false),\n ws_session_was_opened_(false),\n full_queue_(false) {\n try {\n client_id_ = ++client_id_counter;\n\n boost::beast::get_lowest_layer(ws_).socket().set_option(\n boost::asio::ip::tcp::no_delay(true));\n\n ws_.text(false);\n ws_.binary(true);\n ws_.auto_fragment(false);\n ws_.read_message_max(4 * 1024 * 1024); // 4MB\n ws_.set_option(boost::beast::websocket::stream_base::timeout::suggested(\n boost::beast::role_type::server));\n ws_.set_option(boost::beast::websocket::stream_base::timeout{\n .handshake_timeout = std::chrono::seconds(60),\n .idle_timeout = std::chrono::seconds(60),\n .keep_alive_pings = true});\n\n boost::beast::get_lowest_layer(ws_).expires_after(std::chrono::seconds(15));\n init_completed_ = true;\n } catch (const boost::system::system_error& err) {\n SPDLOG_ERROR(\"Session::init failed (client_id={}): {} [{}]\", client_id_,\n err.what(), err.code().message());\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Session::init unexpected exception (client_id={}): {}\",\n client_id_, e.what());\n } catch (...) {\n SPDLOG_ERROR(\n \"Session::init unknown fatal error (client_id={})\", client_id_);\n }\n}\n\nSession::~Session() { Close(); }\n\nboost::asio::awaitable Session::Run() {\n boost::system::error_code ec;\n\n running_ = true;\n if (!init_completed_) {\n SPDLOG_ERROR(\"Session not initialized. Closing connection (client_id={})\",\n client_id_);\n Close();\n co_return;\n }\n\n // Setup traffic obfuscator\n auto obfuscator_opt = co_await DetectObfuscator();\n if (!obfuscator_opt.has_value()) {\n SPDLOG_ERROR(\"Failed to initialize traffic obfuscator\");\n Close();\n co_return;\n }\n ws_.next_layer().next_layer().set_obfuscator(obfuscator_opt.value());\n\n // Detect probing (only for null obfuscator)\n if (enable_detect_probing_ && obfuscator_opt.value() == nullptr) {\n const auto probing_result = co_await DetectProbing();\n if (probing_result.should_close) {\n SPDLOG_WARN(\n \"Connection rejected during probing (client_id={})\", client_id_);\n Close();\n co_return;\n }\n if (probing_result.is_probing) {\n SPDLOG_WARN(\n \"Probing detected. Redirecting to proxy (client_id={}, SNI={}, \"\n \"port={})\",\n client_id_, probing_result.sni, port_);\n co_await HandleProxy(probing_result.sni, port_);\n Close();\n co_return;\n }\n SPDLOG_INFO(\"SESSION ID correct. Continue setup connection (client_id={})\",\n client_id_);\n }\n\n // Check for Reality Mode handshake (only when no obfuscator is detected)\n if (obfuscator_opt.value() == nullptr) {\n const auto result = co_await IsRealityHandshake();\n if (result.should_close) {\n SPDLOG_WARN(\n \"Reality Mode handshake check failed (client_id={})\", client_id_);\n Close();\n co_return;\n }\n\n // Process Reality Mode connection if detected\n if (result.is_reality_mode || result.is_reality_mode2) {\n if (result.is_reality_mode) {\n SPDLOG_INFO(\"Processing Reality Mode connection sni={} (client_id={}) \",\n result.sni, client_id_);\n }\n if (result.is_reality_mode2) {\n SPDLOG_INFO(\n \"Processing Reality Mode2 connection sni={} (client_id={}) \",\n result.sni, client_id_);\n }\n\n // Prevent recursive proxy attempts for Reality Mode\n const auto self_proxy = co_await IsSniSelfProxyAttempt(result.sni);\n if (self_proxy) {\n co_await HandleProxy(default_proxy_domain_, port_);\n Close();\n co_return;\n }\n\n bool reality_success = false;\n if (result.is_reality_mode) {\n // DEPRECATED\n reality_success = co_await PerformFakeHandshake(result.sni);\n // For Reality Mode we use TLS obfuscator after fake handshake\n // This provides additional encryption layer for the real connection\n ws_.next_layer().next_layer().set_obfuscator(\n std::make_shared());\n } else {\n reality_success = co_await PerformFakeHandshake2(result.sni);\n // For Reality Mode we use TLS obfuscator after fake handshake\n // This provides additional encryption layer for the real connection\n ws_.next_layer().next_layer().set_obfuscator(\n std::make_shared());\n }\n\n if (!reality_success) {\n SPDLOG_WARN(\"Reality mode handshake failed (client_id={})\", client_id_);\n Close();\n co_return;\n }\n }\n }\n // SSL handshake\n boost::beast::get_lowest_layer(ws_).expires_after(std::chrono::seconds(10));\n co_await ws_.next_layer().async_handshake(\n boost::asio::ssl::stream_base::server,\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n if (ec) {\n SPDLOG_WARN(\"TLS-Handshake error (client_id={})\", client_id_);\n Close();\n co_return;\n }\n\n // Reset obfuscator after TLS handshake\n ws_.next_layer().next_layer().set_obfuscator(nullptr);\n\n // Process request (HTTP or WebSocket)\n const bool status = co_await ProcessRequest();\n if (status) {\n auto self = shared_from_this();\n boost::asio::co_spawn(\n strand_,\n [self]() mutable -> boost::asio::awaitable {\n return self->RunReader();\n },\n boost::asio::detached);\n boost::asio::co_spawn(\n strand_,\n [self]() mutable -> boost::asio::awaitable {\n return self->RunSender();\n },\n boost::asio::detached);\n } else {\n Close();\n }\n co_return;\n}\n\nboost::asio::awaitable Session::DetectProbing() {\n try {\n auto& tcp_socket = boost::beast::get_lowest_layer(ws_).socket();\n // Peek data without consuming it from the socket buffer!!!\n // This allows inspection without affecting subsequent reads!!!\n std::array buffer;\n\n // Set socket timeout for peek\n boost::system::error_code ec;\n const std::size_t bytes_read = co_await tcp_socket.async_receive(\n boost::asio::buffer(buffer), boost::asio::socket_base::message_peek,\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n\n if (ec || !bytes_read) {\n SPDLOG_ERROR(\"Peeked zero bytes from socket (client_id={})\", client_id_);\n co_return ProbingResult{.is_probing = true,\n .sni = default_proxy_domain_,\n .should_close = true};\n }\n // Check ssl\n if (!pcpp::SSLLayer::IsSSLMessage(\n 0, 0, buffer.data(), buffer.size(), true)) {\n SPDLOG_ERROR(\n \"Not an SSL message, closing connection (client_id={})\", client_id_);\n co_return ProbingResult{.is_probing = true,\n .sni = default_proxy_domain_,\n .should_close = true};\n }\n // Create SslLayer\n pcpp::SSLLayer* ssl_layer = pcpp::SSLLayer::createSSLMessage(\n buffer.data(), buffer.size(), nullptr, nullptr);\n if (!ssl_layer) {\n SPDLOG_ERROR(\n \"Failed to create SSL layer from handshake data (client_id={})\",\n client_id_);\n co_return ProbingResult{.is_probing = true,\n .sni = default_proxy_domain_,\n .should_close = true};\n }\n\n // Check handshake\n // https://github.com/wiresock/ndisapi/blob/master/examples/cpp/pcapplusplus/pcapplusplus.cpp#L40\n const auto* handshake = dynamic_cast(ssl_layer);\n\n // Cleanup memory!\n // std::unique_ptr ssl_layer_ptr(ssl_layer);\n\n if (!handshake) {\n SPDLOG_ERROR(\"Failed to cast to SSLHandshakeLayer\");\n co_return ProbingResult{.is_probing = true,\n .sni = default_proxy_domain_,\n .should_close = true};\n }\n\n // Get TTL-HELLO\n auto* hello =\n // cppcheck-suppress nullPointerRedundantCheck\n handshake->getHandshakeMessageOfType();\n if (!hello) {\n SPDLOG_ERROR(\n \"Failed to extract SSLClientHelloMessage from handshake \"\n \"(client_id={})\",\n client_id_);\n co_return ProbingResult{.is_probing = true,\n .sni = default_proxy_domain_,\n .should_close = true};\n }\n\n // Set SNI\n std::string sni = default_proxy_domain_;\n auto* sni_ext =\n // cppcheck-suppress nullPointerRedundantCheck\n hello->getExtensionOfType();\n if (sni_ext) {\n std::string tls_sni = sni_ext->getHostName();\n if (!tls_sni.empty()) {\n sni = std::move(tls_sni);\n }\n }\n // Validate allowed sni\n if (!allowed_sni_list_.empty()) {\n const bool sni_allowed = std::ranges::any_of(\n allowed_sni_list_, [&sni](const std::string& allowed_sni) {\n if (sni == allowed_sni) {\n return true;\n }\n // check subdomains\n if (sni.size() > allowed_sni.size() + 1) {\n return sni.ends_with(\".\" + allowed_sni);\n }\n return false;\n });\n if (!sni_allowed) {\n sni = default_proxy_domain_;\n SPDLOG_WARN(\n \"SNI '{}' not in allowed list, using default domain: {} \"\n \"(client_id={})\",\n sni, default_proxy_domain_, client_id_);\n }\n }\n\n // Detect and prevent recursive proxying to the local server\n if (sni != default_proxy_domain_) {\n const bool is_recursive_attempt = co_await IsSniSelfProxyAttempt(sni);\n if (is_recursive_attempt) {\n SPDLOG_WARN(\n \"Detected recursive proxy attempt! \"\n \"Client: {}, SNI: {}, Redirecting to default SNI: {}\",\n client_id_, sni, default_proxy_domain_);\n sni = default_proxy_domain_;\n }\n }\n\n // Get Session ID\n constexpr std::size_t kSessionLen = 32;\n std::size_t session_len = std::min(\n static_cast(kSessionLen), hello->getSessionIDLength());\n if (session_len != kSessionLen) {\n SPDLOG_ERROR(\n \"Invalid session ID length: expected {}, got {} (client_id={})\",\n kSessionLen, session_len, client_id_);\n co_return ProbingResult{\n .is_probing = true, .sni = sni, .should_close = false};\n }\n std::uint8_t session_id[kSessionLen] = {0};\n std::memcpy(session_id, hello->getSessionID(), session_len);\n\n // Check Session ID\n const bool is_fptn_session_id =\n protocol::https::utils::IsFptnClientSessionID(session_id, session_len);\n const bool is_decoy_session_id =\n protocol::https::utils::IsDecoyHandshakeSessionID(\n session_id, session_len);\n const bool is_decoy_session_id2 =\n protocol::https::utils::IsDecoyHandshakeSessionID2(\n session_id, session_len);\n if (!is_fptn_session_id && !is_decoy_session_id && !is_decoy_session_id2) {\n SPDLOG_ERROR(\n \"Session ID does not match FPTN client format (client_id={})\",\n client_id_);\n co_return ProbingResult{\n .is_probing = true, .sni = sni, .should_close = false};\n }\n // Valid FPTN client\n co_return ProbingResult{\n .is_probing = false, .sni = sni, .should_close = false};\n } catch (const boost::system::system_error& e) {\n SPDLOG_ERROR(\n \"System error during probing: {} (client_id={})\", e.what(), client_id_);\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\n \"Exception during probing: {} (client_id={})\", e.what(), client_id_);\n } catch (...) {\n SPDLOG_ERROR(\"Unknown exception during probing (client_id={})\", client_id_);\n }\n co_return ProbingResult{\n .is_probing = true, .sni = default_proxy_domain_, .should_close = true};\n}\n\n// NOLINTNEXTLINE(readability-convert-member-functions-to-static)\nboost::asio::awaitable Session::IsSniSelfProxyAttempt(\n const std::string& sni) const {\n // First check if SNI is already an IP address\n if (fptn::common::network::IsIpAddress(sni)) {\n // FIXME\n SPDLOG_WARN(\"SNI is IP address, treating as potential self-proxy: {}\", sni);\n co_return true;\n }\n\n // Not an IP address - proceed with DNS resolution using our new function\n try {\n const auto server_ips = GetServerIpAddresses(server_external_ips_);\n\n boost::asio::io_context ioc;\n const auto resolve_result =\n fptn::common::network::ResolveWithTimeout(ioc, sni, \"\", 5);\n\n if (!resolve_result.success()) {\n SPDLOG_WARN(\"DNS resolution failed for {}: {}\", sni,\n resolve_result.error.message());\n }\n\n // Iterate through resolved endpoints\n for (const auto& endpoint : resolve_result.results) {\n const auto ip = endpoint.endpoint().address().to_string();\n if (ip.empty()) {\n continue;\n }\n // check server interfaces\n if (std::ranges::find(server_ips, ip) != server_ips.end()) {\n SPDLOG_WARN(\n \"SNI {} resolves to server interface IP {}, blocking self-proxy\",\n sni, ip);\n co_return true;\n }\n }\n } catch (const std::exception& e) {\n SPDLOG_WARN(\"Exception during DNS resolution for {}: {}\", sni, e.what());\n co_return true;\n }\n\n co_return false;\n}\n\nboost::asio::awaitable Session::IsRealityHandshake() {\n try {\n auto& tcp_socket = boost::beast::get_lowest_layer(ws_).socket();\n\n // Peek data without consuming it\n std::array buffer{};\n const std::size_t bytes_read =\n co_await tcp_socket.async_receive(boost::asio::buffer(buffer),\n boost::asio::socket_base::message_peek, boost::asio::use_awaitable);\n\n if (!bytes_read) {\n co_return RealityResult{.is_reality_mode = false,\n .is_reality_mode2 = false,\n .sni = \"\",\n .should_close = true};\n }\n\n // Check if it's SSL/TLS handshake\n if (!pcpp::SSLLayer::IsSSLMessage(\n 0, 0, buffer.data(), buffer.size(), true)) {\n co_return RealityResult{.is_reality_mode = false,\n .is_reality_mode2 = false,\n .sni = \"\",\n .should_close = true};\n }\n\n // Parse SSL handshake\n pcpp::SSLLayer* ssl_layer = pcpp::SSLLayer::createSSLMessage(\n buffer.data(), buffer.size(), nullptr, nullptr);\n if (!ssl_layer) {\n co_return RealityResult{.is_reality_mode = false,\n .is_reality_mode2 = false,\n .sni = \"\",\n .should_close = true};\n }\n\n // Check handshake\n // https://github.com/wiresock/ndisapi/blob/master/examples/cpp/pcapplusplus/pcapplusplus.cpp#L40\n auto* handshake = dynamic_cast(ssl_layer);\n if (!handshake) {\n co_return RealityResult{.is_reality_mode = false,\n .is_reality_mode2 = false,\n .sni = \"\",\n .should_close = true};\n }\n\n auto* hello =\n // cppcheck-suppress nullPointerRedundantCheck\n handshake->getHandshakeMessageOfType();\n if (!hello) {\n co_return RealityResult{.is_reality_mode = false,\n .is_reality_mode2 = false,\n .sni = \"\",\n .should_close = true};\n }\n\n // Get SNI\n std::string sni = default_proxy_domain_;\n auto* sni_ext =\n // cppcheck-suppress nullPointerRedundantCheck\n hello->getExtensionOfType();\n if (sni_ext) {\n std::string tls_sni = sni_ext->getHostName();\n if (!tls_sni.empty()) {\n sni = std::move(tls_sni);\n }\n }\n\n // Check if this is a reality mode handshake by examining session ID\n constexpr std::size_t kSessionLen = 32;\n std::size_t session_len = std::min(\n static_cast(kSessionLen), hello->getSessionIDLength());\n\n if (session_len == kSessionLen) {\n std::uint8_t session_id[kSessionLen] = {0};\n std::memcpy(session_id, hello->getSessionID(), session_len);\n\n // Check if it's a decoy handshake (reality mode)\n const bool is_reality = protocol::https::utils::IsDecoyHandshakeSessionID(\n session_id, session_len);\n const bool is_reality2 =\n protocol::https::utils::IsDecoyHandshakeSessionID2(\n session_id, session_len);\n if (is_reality || is_reality2) {\n co_return RealityResult{.is_reality_mode = is_reality,\n .is_reality_mode2 = is_reality2,\n .sni = sni,\n .should_close = false};\n }\n co_return RealityResult{.is_reality_mode = false,\n .is_reality_mode2 = false,\n .sni = sni,\n .should_close = false};\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"IsRealityHandshake exception (client_id={}): {}\", client_id_,\n e.what());\n }\n co_return RealityResult{.is_reality_mode = true,\n .is_reality_mode2 = false,\n .sni = \"\",\n .should_close = true};\n}\n\n// DEPRECATED\nboost::asio::awaitable Session::PerformFakeHandshake(\n const std::string& sni) {\n try {\n auto& tcp_socket = boost::beast::get_lowest_layer(ws_).socket();\n\n std::vector buffer(16384, '\\0');\n // std::string buffer(16384, '\\0');\n const std::size_t bytes_read = co_await tcp_socket.async_receive(\n boost::asio::buffer(buffer), boost::asio::use_awaitable);\n if (!bytes_read || !handshake_cache_manager_) {\n co_return false;\n }\n buffer.resize(bytes_read);\n\n const auto handshake_answer =\n co_await handshake_cache_manager_->GetHandshake(\n sni, buffer.data(), bytes_read, std::chrono::seconds(3));\n\n if (!handshake_answer) {\n co_return false;\n }\n\n const std::size_t bytes_wrote =\n co_await boost::asio::async_write(tcp_socket,\n boost::asio::buffer(*handshake_answer), boost::asio::use_awaitable);\n\n SPDLOG_INFO(\n \"Reality mode completed, ready for real handshake (client_id={}) \"\n \"request_size = {} response_size: {}\",\n client_id_, bytes_read, bytes_wrote);\n co_return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\n \"HandleRealityMode exception (client_id={}): {}\", client_id_, e.what());\n }\n co_return false;\n}\n\nboost::asio::awaitable Session::PerformFakeHandshake2(\n const std::string& sni) {\n try {\n auto& tcp_socket = boost::beast::get_lowest_layer(ws_).socket();\n /* Wait for client hello */\n const auto client_hello =\n co_await common::network::WaitForClientTlsHelloAsync(tcp_socket);\n if (!client_hello.has_value()) {\n SPDLOG_ERROR(\"Empty client hello\");\n co_return false;\n }\n\n const auto client_hello_size = client_hello.value().size();\n\n common::network::CleanSocket(tcp_socket);\n\n /* Send server hello */\n const auto handshake_answer =\n co_await handshake_cache_manager_->GetHandshake(sni,\n client_hello.value().data(), client_hello_size,\n std::chrono::seconds(5));\n if (!handshake_answer) {\n co_return false;\n }\n\n const std::size_t handshake_answer_size =\n co_await boost::asio::async_write(tcp_socket,\n boost::asio::buffer(*handshake_answer), boost::asio::use_awaitable);\n\n /* Wait for ChangeCipherSpec */\n const bool change_cipher_spec_size =\n co_await common::network::WaitForClientChangeCipherSpec(tcp_socket);\n if (!change_cipher_spec_size) {\n SPDLOG_ERROR(\"Failed to receive Client ChangeCipherSpec\");\n co_return false;\n }\n\n SPDLOG_INFO(\n \"Reality mode2 completed, ready for real handshake (client_id={}) \"\n \"request_size = {} response_size: {}\",\n client_id_, client_hello_size, handshake_answer_size);\n co_return true;\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"HandleRealityMode2 exception (client_id={}): {}\", client_id_,\n e.what());\n }\n co_return false;\n}\n\nboost::asio::awaitable Session::HandleProxy(\n const std::string& sni, int port) {\n auto& tcp_socket = boost::beast::get_lowest_layer(ws_).socket();\n boost::asio::ip::tcp::socket target_socket(\n co_await boost::asio::this_coro::executor);\n\n constexpr int kTimeout = 10;\n boost::beast::get_lowest_layer(ws_).expires_after(\n std::chrono::seconds(kTimeout));\n\n bool status = false;\n try {\n const std::string port_str = std::to_string(port);\n\n boost::asio::io_context ioc;\n auto resolve_result =\n fptn::common::network::ResolveWithTimeout(ioc, sni, port_str, kTimeout);\n\n if (!resolve_result.success()) {\n SPDLOG_ERROR(\"Proxy DNS resolution failed for {}:{}: {}\", sni, port_str,\n resolve_result.error.message());\n co_return false;\n }\n\n co_await boost::asio::async_connect(\n target_socket, resolve_result.results, boost::asio::use_awaitable);\n\n const auto ep = target_socket.remote_endpoint();\n SPDLOG_INFO(\"Proxying {}:{} <-> {}:{} (client_id={})\",\n ep.address().to_string(), ep.port(), sni, port_str, client_id_);\n\n auto self = shared_from_this();\n auto forward = [self](\n auto& from, auto& to) -> boost::asio::awaitable {\n try {\n boost::system::error_code ec;\n std::array buf{};\n while (self->running_) {\n const auto n = co_await from.async_read_some(boost::asio::buffer(buf),\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n if (ec || n == 0) {\n break;\n }\n co_await boost::asio::async_write(to,\n boost::asio::buffer(buf.data(), n),\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n if (ec) {\n break;\n }\n }\n from.close();\n } catch (const boost::system::system_error& e) {\n SPDLOG_ERROR(\"Coroutine system error: {} [{}] (client_id={})\", e.what(),\n e.code().message(), self->client_id_);\n }\n co_return;\n };\n\n // Set socket timeout\n SetSocketTimeouts(tcp_socket, kTimeout);\n SetSocketTimeouts(target_socket, kTimeout);\n\n auto [client_to_server_result, server_to_client_result, completion_status] =\n co_await boost::asio::experimental::make_parallel_group(\n boost::asio::co_spawn(co_await boost::asio::this_coro::executor,\n forward(tcp_socket, target_socket), boost::asio::deferred),\n boost::asio::co_spawn(co_await boost::asio::this_coro::executor,\n forward(target_socket, tcp_socket), boost::asio::deferred))\n .async_wait(boost::asio::experimental::wait_for_all(),\n boost::asio::use_awaitable);\n (void)client_to_server_result;\n (void)server_to_client_result;\n (void)completion_status;\n status = true;\n } catch (const boost::system::system_error& e) {\n SPDLOG_ERROR(\"Proxy system error: {} [{}] (client_id={})\", e.what(),\n e.code().message(), client_id_);\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\"Proxy error (client_id={}): {} \", e.what(), client_id_);\n }\n\n // close socket\n try {\n tcp_socket.close();\n } catch (const boost::system::system_error& e) {\n SPDLOG_ERROR(\n \"Failed to close the socket after proxy completion (client_id={}): \"\n \"{} \"\n \"[{}]\",\n client_id_, e.what(), e.code().message());\n }\n // close target socket\n boost::system::error_code ec;\n target_socket.close(ec);\n\n SPDLOG_INFO(\"Close proxy (client_id={})\", client_id_);\n\n co_return status;\n}\n\nboost::asio::awaitable Session::RunReader() {\n boost::system::error_code ec;\n boost::beast::flat_buffer buffer;\n buffer.reserve(4 * 1024 * 1024);\n auto token = boost::asio::redirect_error(boost::asio::use_awaitable, ec);\n try {\n while (running_ && ws_.is_open()) {\n co_await ws_.async_read(buffer, token);\n if (ec) {\n break;\n }\n if (buffer.size() > 0 && running_ && ws_.is_open()) {\n auto raw_ip = fptn::protocol::protobuf::GetProtoPayload(buffer);\n if (raw_ip.has_value() && running_) {\n auto packet = fptn::common::network::IPPacket::Parse(\n std::move(raw_ip.value()), client_id_);\n if (packet != nullptr) {\n ws_new_ippacket_callback_(std::move(packet));\n }\n }\n }\n buffer.consume(buffer.size());\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\n \"RunReader exception (client_id={}): {}\", client_id_, e.what());\n }\n\n Close();\n co_return;\n}\n\nboost::asio::awaitable Session::RunSender() {\n try {\n while (running_ && ws_.is_open()) {\n auto [ec, packet] = co_await write_channel_.async_receive(\n boost::asio::bind_cancellation_slot(cancel_signal_.slot(),\n boost::asio::as_tuple(boost::asio::use_awaitable)));\n if (running_ && ws_.is_open() && !ec && packet != nullptr) {\n auto msg =\n fptn::protocol::protobuf::CreateProtoPayload(std::move(packet));\n if (msg.has_value()) {\n co_await ws_.async_write(boost::asio::buffer(std::move(msg.value())),\n boost::asio::use_awaitable);\n }\n }\n }\n } catch (const boost::system::system_error& err) {\n if (err.code() != boost::asio::error::operation_aborted &&\n err.code() != boost::beast::websocket::error::closed) {\n SPDLOG_ERROR(\n \"RunSender error (client_id={}): {}\", client_id_, err.what());\n }\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\n \"RunSender exception (client_id={}): {}\", client_id_, e.what());\n }\n\n Close();\n co_return;\n}\n\nboost::asio::awaitable Session::ProcessRequest() {\n bool status = false;\n\n try {\n boost::system::error_code ec;\n boost::beast::flat_buffer buffer;\n boost::beast::http::request request;\n\n co_await boost::beast::http::async_read(ws_.next_layer(), buffer, request,\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n\n if (boost::beast::websocket::is_upgrade(request)) {\n status = co_await HandleWebSocket(request);\n if (status) {\n co_await ws_.async_accept(request,\n boost::asio::redirect_error(boost::asio::use_awaitable, ec));\n }\n } else {\n status = co_await HandleHttp(request);\n }\n } catch (const boost::system::system_error& err) {\n SPDLOG_ERROR(\"Session::handshake failed (client_id={}): {} [{}]\",\n client_id_, err.what(), err.code().message());\n }\n co_return status;\n}\n\nboost::asio::awaitable Session::HandleHttp(\n const boost::beast::http::request&\n request) {\n const std::string url = request.target();\n const std::string method = request.method_string();\n\n boost::beast::get_lowest_layer(ws_).expires_after(std::chrono::seconds(30));\n\n if (method.empty() && url.empty()) {\n SPDLOG_WARN(\n \"HTTP request has empty method or URL (client_id={}): method='{}', \"\n \"url='{}'\",\n client_id_, method, url);\n co_return false;\n }\n\n if (url.find(\"metrics\") == std::string::npos) { // NOLINT\n SPDLOG_INFO(\"HTTP request (client_id={}): {} {}\", client_id_, method, url);\n } else {\n SPDLOG_INFO(\"HTTP request (client_id={}): {} {}\", client_id_, method,\n \"/api/v1/metrics/\");\n }\n\n const auto server_info = fmt::format(\"fptn/{}\", FPTN_VERSION);\n const auto http_date = fptn::time::TimeProvider::Instance()->Rfc7231Date();\n\n boost::beast::http::response resp;\n resp.set(boost::beast::http::field::server, server_info);\n resp.set(boost::beast::http::field::content_type,\n \"application/json; charset=utf-8\");\n resp.set(boost::beast::http::field::cache_control,\n \"no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\");\n resp.set(boost::beast::http::field::pragma, \"no-cache\");\n resp.set(boost::beast::http::field::expires, \"0\");\n resp.set(boost::beast::http::field::date, http_date);\n\n const ApiHandle handler = GetApiHandle(api_handles_, url, method);\n if (handler) {\n int status = handler(request, resp);\n resp.result(status);\n } else {\n resp.result(boost::beast::http::status::not_found);\n resp.body() = \"404 Not Found\";\n }\n resp.prepare_payload();\n\n auto res_ptr = std::make_shared<\n boost::beast::http::response>(\n std::move(resp));\n try {\n co_await boost::beast::http::async_write(\n ws_.next_layer(), *res_ptr, boost::asio::use_awaitable);\n } catch (const boost::beast::system_error& e) {\n SPDLOG_ERROR(\"Session::HandleHttp write error (client_id={}): {}\",\n client_id_, e.what());\n } catch (...) {\n SPDLOG_ERROR(\n \"Session::HandleHttp write unknown error (client_id={})\", client_id_);\n }\n co_return false;\n}\n\nboost::asio::awaitable Session::HandleWebSocket(\n const boost::beast::http::request&\n request) {\n boost::beast::get_lowest_layer(ws_).expires_after(std::chrono::hours(12));\n\n if (request.contains(\"Authorization\") && request.contains(\"ClientIP\")) {\n std::string token = request[\"Authorization\"];\n boost::replace_first(token, \"Bearer \", \"\");\n\n const std::string client_vpn_ipv4_str = request[\"ClientIP\"];\n\n boost::system::error_code ec;\n const std::string client_ip_str = boost::beast::get_lowest_layer(ws_)\n .socket()\n .remote_endpoint(ec)\n .address()\n .to_string();\n if (ec) {\n SPDLOG_ERROR(\"Failed to get remote endpoint: {}\", ec.message());\n co_return false;\n }\n\n try {\n const common::network::IPv4Address client_ip(client_ip_str);\n const common::network::IPv4Address client_vpn_ipv4(client_vpn_ipv4_str);\n\n const std::string client_vpn_ipv6_str =\n (request.contains(\"ClientIPv6\") ? request[\"ClientIPv6\"]\n : FPTN_CLIENT_DEFAULT_ADDRESS_IP6);\n const common::network::IPv6Address client_vpn_ipv6(client_vpn_ipv6_str);\n\n const bool status =\n ws_open_callback_(client_id_, client_ip, client_vpn_ipv4,\n client_vpn_ipv6, shared_from_this(), request.target(), token);\n ws_session_was_opened_ = true;\n co_return status;\n } catch (const std::exception& ex) {\n SPDLOG_ERROR(\n \"Session::Open (client_id={}): Exception caught while creating IP \"\n \"addresses or running callback: {}\",\n client_id_, ex.what());\n } catch (...) {\n SPDLOG_ERROR(\n \"Session::Open (client_id={}): Unknown fatal error caught while \"\n \"creating IP addresses or running callback\",\n client_id_);\n }\n }\n co_return false;\n}\n\nvoid Session::Close() {\n if (!running_) {\n return;\n }\n\n const std::unique_lock lock(mutex_); // mutex\n\n // cppcheck-suppress identicalConditionAfterEarlyExit\n if (!running_) { // Double-check after acquiring lock\n return;\n }\n\n SPDLOG_INFO(\"Close session {}\", client_id_);\n running_ = false;\n\n try {\n cancel_signal_.emit(boost::asio::cancellation_type::all);\n write_channel_.close();\n } catch (const std::exception& err) {\n SPDLOG_WARN(\n \"Failed to cancel session or close write_channel: {}\", err.what());\n } catch (...) {\n SPDLOG_WARN(\n \"Session::Close unknown fatal error (client_id={})\", client_id_);\n }\n\n // Close TCP socket first\n try {\n auto& tcp_layer = boost::beast::get_lowest_layer(ws_);\n if (tcp_layer.socket().is_open()) {\n boost::system::error_code ec;\n tcp_layer.expires_after(std::chrono::milliseconds(50));\n\n tcp_layer.socket().shutdown(\n boost::asio::ip::tcp::socket::shutdown_both, ec);\n tcp_layer.socket().close(ec);\n }\n } catch (const std::exception& err) {\n SPDLOG_WARN(\"Session::Close TCP socket error (client_id={}): {}\",\n client_id_, err.what());\n } catch (...) {\n SPDLOG_WARN(\n \"Session::Close TCP socket unknown error (client_id={})\", client_id_);\n }\n\n // Close WebSocket\n try {\n if (ws_.is_open()) {\n boost::system::error_code ec;\n ws_.close(boost::beast::websocket::close_code::normal, ec);\n }\n } catch (const std::exception& err) {\n SPDLOG_WARN(\"Session::Close WebSocket error (client_id={}): {}\", client_id_,\n err.what());\n } catch (...) {\n SPDLOG_WARN(\n \"Session::Close WebSocket unknown error (client_id={})\", client_id_);\n }\n\n // Close SSL\n try {\n auto& ssl_layer = ws_.next_layer();\n if (ssl_layer.native_handle()) {\n ::SSL_set_quiet_shutdown(ssl_layer.native_handle(), 1);\n }\n } catch (const std::exception& err) {\n SPDLOG_ERROR(\"Session::Close SSL shutdown exception (client_id={}): {}\",\n client_id_, err.what());\n } catch (...) {\n SPDLOG_ERROR(\n \"Session::Close SSL shutdown unknown error (client_id={})\", client_id_);\n }\n\n if (ws_close_callback_ && ws_session_was_opened_) {\n try {\n ws_close_callback_(client_id_);\n } catch (const std::exception& e) {\n SPDLOG_WARN(\"WebSocket close callback threw exception (client_id={}): {}\",\n client_id_, e.what());\n } catch (...) {\n SPDLOG_WARN(\n \"WebSocket close callback threw unknown exception (client_id={})\",\n client_id_);\n }\n }\n}\n\nboost::asio::awaitable Session::Send(common::network::IPPacketPtr pkt) {\n auto self = shared_from_this();\n boost::asio::post(strand_, [self, pkt = std::move(pkt)]() mutable {\n if (self->running_ && self->write_channel_.is_open()) {\n const bool status = self->write_channel_.try_send(\n boost::system::error_code(), std::move(pkt));\n if (!status && !self->full_queue_) {\n self->full_queue_ = true;\n SPDLOG_WARN(\n \"Session::send queue is full (client_id={})\", self->client_id_);\n }\n }\n });\n co_return true;\n}\n\nboost::asio::awaitable Session::DetectObfuscator() {\n try {\n auto& tcp_socket = boost::beast::get_lowest_layer(ws_).socket();\n\n // Peek data without consuming it from the socket buffer\n // This allows inspection without affecting subsequent reads\n std::array buffer{};\n const std::size_t bytes_read =\n co_await tcp_socket.async_receive(boost::asio::buffer(buffer),\n boost::asio::socket_base::message_peek, boost::asio::use_awaitable);\n\n if (!bytes_read) {\n SPDLOG_WARN(\"No data received for obfuscator detection [client_id: {}]\",\n client_id_);\n co_return std::nullopt;\n }\n\n // Detect the appropriate obfuscator based on the peeked data\n auto obfuscator = fptn::protocol::https::obfuscator::DetectObfuscator(\n buffer.data(), bytes_read);\n co_return obfuscator;\n } catch (const boost::system::system_error& e) {\n SPDLOG_ERROR(\n \"System error during obfuscator setup [client_id: {}, error: '{}', \"\n \"code: {}]\",\n client_id_, e.what(), e.code().message());\n } catch (const std::exception& e) {\n SPDLOG_ERROR(\n \"Exception during obfuscator setup [client_id: {}, error: '{}']\",\n client_id_, e.what());\n } catch (...) {\n SPDLOG_ERROR(\n \"Unknown error during obfuscator setup [client_id: {}]\", client_id_);\n }\n co_return std::nullopt;\n}\n\n}; // namespace fptn::web\n" }, { "path": "src/fptn-server/web/session/session.h", "content": "\n/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#pragma once\n\n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \"common/jwt_token/token_manager.h\"\n\n#include \"fptn-protocol-lib/https/obfuscator/tcp_stream/tcp_stream.h\"\n#include \"web/api/handle.h\"\n#include \"web/handshake/handshake_cache_manager.h\"\n\nnamespace fptn::web {\n\nusing IObfuscator = std::optional;\n\nclass Session : public std::enable_shared_from_this {\n public:\n explicit Session(std::uint16_t port,\n bool enable_detect_probing,\n std::string default_proxy_domain,\n std::vector allowed_sni_list,\n std::string server_external_ips,\n boost::asio::ip::tcp::socket&& socket,\n boost::asio::ssl::context& ctx,\n const ApiHandleMap& api_handles,\n HandshakeCacheManagerSPtr handshake_cache_manager,\n WebSocketOpenConnectionCallback ws_open_callback,\n WebSocketNewIPPacketCallback ws_new_ippacket_callback,\n WebSocketCloseConnectionCallback ws_close_callback);\n virtual ~Session();\n void Close();\n\n // async\n boost::asio::awaitable Run();\n boost::asio::awaitable Send(fptn::common::network::IPPacketPtr pkt);\n\n protected:\n boost::asio::awaitable RunReader();\n boost::asio::awaitable RunSender();\n\n protected:\n struct ProbingResult {\n bool is_probing;\n std::string sni;\n bool should_close;\n };\n\n boost::asio::awaitable DetectProbing();\n\n protected:\n boost::asio::awaitable IsSniSelfProxyAttempt(\n const std::string& sni) const;\n\n struct RealityResult {\n bool is_reality_mode; // DEPRICATED\n bool is_reality_mode2;\n std::string sni;\n bool should_close;\n };\n\n boost::asio::awaitable IsRealityHandshake();\n\n // DEPRECATED\n boost::asio::awaitable PerformFakeHandshake(const std::string& sni);\n\n boost::asio::awaitable PerformFakeHandshake2(const std::string& sni);\n\n boost::asio::awaitable HandleProxy(const std::string& sni, int port);\n\n boost::asio::awaitable DetectObfuscator();\n\n protected:\n boost::asio::awaitable ProcessRequest();\n boost::asio::awaitable HandleHttp(\n const boost::beast::http::request&\n request);\n boost::asio::awaitable HandleWebSocket(\n const boost::beast::http::request&\n request);\n\n private:\n mutable std::mutex mutex_;\n\n fptn::ClientID client_id_ = MAX_CLIENT_ID;\n\n const std::uint16_t port_;\n const bool enable_detect_probing_;\n const std::string default_proxy_domain_;\n const std::vector allowed_sni_list_;\n\n const std::string server_external_ips_;\n\n // TCP -> obfuscator -> SSL -> WebSocket\n using tcp_stream_type = boost::beast::tcp_stream;\n using obfuscator_socket_type =\n fptn::protocol::https::obfuscator::TcpStream;\n using ssl_stream_type = boost::beast::ssl_stream;\n using websocket_type = boost::beast::websocket::stream;\n\n websocket_type ws_;\n\n boost::asio::strand strand_;\n boost::asio::experimental::concurrent_channel\n write_channel_;\n\n const ApiHandleMap& api_handles_;\n\n HandshakeCacheManagerSPtr handshake_cache_manager_;\n\n const WebSocketOpenConnectionCallback ws_open_callback_;\n const WebSocketNewIPPacketCallback ws_new_ippacket_callback_;\n const WebSocketCloseConnectionCallback ws_close_callback_;\n\n std::atomic running_;\n std::atomic init_completed_;\n std::atomic ws_session_was_opened_;\n std::atomic full_queue_;\n\n boost::asio::cancellation_signal cancel_signal_;\n};\n\nusing SessionSPtr = std::shared_ptr;\n} // namespace fptn::web\n" }, { "path": "sysadmin-tools/grafana/.gitignore", "content": ".env\ndocker-compose-data/" }, { "path": "sysadmin-tools/grafana/README.md", "content": "## Grafana\n\nGrafana is used for monitoring server activity, including traffic amount and active users.\n\n\"Grafana\"/\n\n\"Grafana\"/\n\n#### To set it up:\n\n1. **Clone the repository:**\n\n```bash\ngit clone https://github.com/batchar2/fptn.git\n```\n\n2. **Navigate to the Grafana configuration folder:**\n\n```bash\ncd sysadmin-tools/grafana\n```\n\n3. **Copy and configure the environment file:**\n - Copy the `.env.demo` file to `.env`:\n\n ```bash\n cp .env.demo .env\n ```\n\n - Open the `.env` file in a text editor and fill in all required fields.\n - Set your piblic ip for `FPTN_HOST` and your fptn port for `FPTN_PORT`\n - Pay special attention to the `PROMETHEUS_SECRET_ACCESS_KEY` parameter:\n - This value **must match** the access key defined in your `fptn-server` config at `/etc/fptn/server.conf`.\n - Use a **secure, random string** of **at least 30 characters** for this value.\n\n4. **Run Docker Compose:**\n - Need install docker. To install it on ubuntu use [this docs](https://docs.docker.com/engine/install/ubuntu/)\n - Start Grafana and its dependencies using Docker Compose:\n \n ```bash\n docker compose down && docker compose up -d\n ```\n5. **Access Grafana:**\n - Open your browser and navigate to the Grafana interface using the selected port (**3000 by default**).\n - Log in using the default credentials: `admin` / `admin`.\n - After logging in, Grafana will prompt you to change the default password — **do it immediately and avoid using default credentials going forward!**\n\n#### Notes:\n\nEnsure that all parameters in the .env file are correctly configured before starting the services.\nThe `PROMETHEUS_SECRET_ACCESS_KEY` parameter must be consistent with the key used in fptn-server to allow proper access to metrics.\n\n\n#### 🐳 Building and Running the Docker Image (Optional)\n\nTo build the image:\n\n```bash\ndocker compose build -f docker-compose.build.yml\n```\n\nTo run the services:\n\n```bash\ndocker compose build -f docker-compose.build.yml up -d\n```\n\nTo stop the services:\n\n```bash\ndocker compose build -f docker-compose.build.yml down\n```\n" }, { "path": "sysadmin-tools/grafana/configs/grafana/dashboards/dashboards.yaml", "content": "apiVersion: 1\n\nproviders:\n - name: 'default'\n orgId: 1\n folder: ''\n type: file\n disableDeletion: false\n editable: true\n options:\n path: /etc/grafana/provisioning/dashboards" }, { "path": "sysadmin-tools/grafana/configs/grafana/dashboards/fptn_dashboard.json", "content": "{\n \"annotations\": {\n \"list\": [\n {\n \"builtIn\": 1,\n \"datasource\": {\n \"type\": \"grafana\",\n \"uid\": \"-- Grafana --\"\n },\n \"enable\": true,\n \"hide\": true,\n \"iconColor\": \"rgba(0, 211, 255, 1)\",\n \"name\": \"Annotations & Alerts\",\n \"type\": \"dashboard\"\n }\n ]\n },\n \"editable\": true,\n \"fiscalYearStartMonth\": 0,\n \"graphTooltip\": 1,\n \"links\": [],\n \"panels\": [\n {\n \"datasource\": {\n \"default\": true,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n }\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 0,\n \"y\": 0\n },\n \"id\": 6,\n \"options\": {\n \"colorMode\": \"value\",\n \"graphMode\": \"none\",\n \"justifyMode\": \"auto\",\n \"orientation\": \"auto\",\n \"percentChangeColorMode\": \"standard\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"showPercentChange\": false,\n \"textMode\": \"auto\",\n \"wideLayout\": true\n },\n \"pluginVersion\": \"11.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"disableTextWrap\": false,\n \"editorMode\": \"builder\",\n \"expr\": \"fptn_active_sessions\",\n \"fullMetaSearch\": false,\n \"includeNullMetadata\": true,\n \"instant\": false,\n \"legendFormat\": \"__auto\",\n \"range\": true,\n \"refId\": \"A\",\n \"useBackend\": false\n }\n ],\n \"title\": \"Active VPN sessions\",\n \"type\": \"stat\"\n },\n {\n \"datasource\": {\n \"default\": true,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisBorderShow\": false,\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"barWidthFactor\": 0.6,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 0,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"insertNulls\": false,\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"auto\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n }\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 12,\n \"y\": 0\n },\n \"id\": 7,\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"11.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"disableTextWrap\": false,\n \"editorMode\": \"builder\",\n \"expr\": \"fptn_active_sessions\",\n \"fullMetaSearch\": false,\n \"includeNullMetadata\": true,\n \"instant\": false,\n \"legendFormat\": \"USERS\",\n \"range\": true,\n \"refId\": \"A\",\n \"useBackend\": false\n }\n ],\n \"title\": \"Sessions history\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"default\": true,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisBorderShow\": false,\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"barWidthFactor\": 0.6,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 0,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"insertNulls\": false,\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"auto\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"binbps\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 0,\n \"y\": 8\n },\n \"id\": 5,\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(rate(fptn_user_outgoing_traffic_bytes[$__rate_interval])*8) \",\n \"hide\": false,\n \"instant\": false,\n \"legendFormat\": \"TOTAL\",\n \"range\": true,\n \"refId\": \"B\"\n }\n ],\n \"title\": \"User outgoing traffic\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"default\": true,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisBorderShow\": false,\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"barWidthFactor\": 0.6,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 0,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"insertNulls\": false,\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"auto\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"binbps\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 12,\n \"y\": 8\n },\n \"id\": 4,\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"disableTextWrap\": false,\n \"editorMode\": \"code\",\n \"expr\": \"sum(rate(fptn_user_incoming_traffic_bytes[$__rate_interval])*8)\",\n \"fullMetaSearch\": false,\n \"includeNullMetadata\": true,\n \"instant\": false,\n \"legendFormat\": \"TOTAL\",\n \"range\": true,\n \"refId\": \"A\",\n \"useBackend\": false\n }\n ],\n \"title\": \"User incoming traffic\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"default\": true,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"custom\": {\n \"axisBorderShow\": false,\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"fillOpacity\": 80,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineWidth\": 1,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 0,\n \"y\": 16\n },\n \"id\": 8,\n \"interval\": \"1h\",\n \"options\": {\n \"barRadius\": 0,\n \"barWidth\": 0.97,\n \"fullHighlight\": false,\n \"groupWidth\": 0.7,\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"orientation\": \"auto\",\n \"showValue\": \"auto\",\n \"stacking\": \"none\",\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n },\n \"xTickLabelRotation\": 0,\n \"xTickLabelSpacing\": 0\n },\n \"pluginVersion\": \"11.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"disableTextWrap\": false,\n \"editorMode\": \"code\",\n \"expr\": \"sum(increase(fptn_user_outgoing_traffic_bytes[$__rate_interval]))\",\n \"fullMetaSearch\": false,\n \"includeNullMetadata\": true,\n \"instant\": false,\n \"legendFormat\": \"TOTAL\",\n \"range\": true,\n \"refId\": \"A\",\n \"useBackend\": false\n }\n ],\n \"title\": \"Total Outgoing Traffic for 1h\",\n \"type\": \"barchart\"\n },\n {\n \"datasource\": {\n \"default\": true,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisBorderShow\": false,\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"fillOpacity\": 80,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineWidth\": 1,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 12,\n \"y\": 16\n },\n \"id\": 9,\n \"interval\": \"1h\",\n \"options\": {\n \"barRadius\": 0,\n \"barWidth\": 0.97,\n \"fullHighlight\": false,\n \"groupWidth\": 0.7,\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"orientation\": \"auto\",\n \"showValue\": \"auto\",\n \"stacking\": \"none\",\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n },\n \"xTickLabelRotation\": 0,\n \"xTickLabelSpacing\": 0\n },\n \"pluginVersion\": \"11.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"disableTextWrap\": false,\n \"editorMode\": \"code\",\n \"expr\": \"sum(increase(fptn_user_incoming_traffic_bytes[1h]))\",\n \"fullMetaSearch\": false,\n \"includeNullMetadata\": true,\n \"instant\": false,\n \"legendFormat\": \"TOTAL\",\n \"range\": true,\n \"refId\": \"A\",\n \"useBackend\": false\n }\n ],\n \"title\": \"Total Incoming Traffic for the 1h\",\n \"type\": \"barchart\"\n },\n {\n \"collapsed\": false,\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 24\n },\n \"id\": 14,\n \"panels\": [],\n \"title\": \"Additional info\",\n \"type\": \"row\"\n },\n {\n \"datasource\": {\n \"default\": false,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisBorderShow\": false,\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"barWidthFactor\": 0.6,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 0,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"insertNulls\": false,\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"auto\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"binbps\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 0,\n \"y\": 25\n },\n \"id\": 12,\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"disableTextWrap\": false,\n \"editorMode\": \"code\",\n \"expr\": \"sum(rate(fptn_user_outgoing_traffic_bytes[$__rate_interval])*8) by (username) > 0\",\n \"fullMetaSearch\": false,\n \"includeNullMetadata\": true,\n \"instant\": false,\n \"legendFormat\": \"__auto\",\n \"range\": true,\n \"refId\": \"A\",\n \"useBackend\": false\n }\n ],\n \"title\": \"User outgoing Traffic Rate \",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"default\": false,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisBorderShow\": false,\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"barWidthFactor\": 0.6,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 0,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"insertNulls\": false,\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"auto\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"binbps\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 12,\n \"y\": 25\n },\n \"id\": 13,\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"disableTextWrap\": false,\n \"editorMode\": \"code\",\n \"expr\": \"sum(rate(fptn_user_incoming_traffic_bytes[$__rate_interval])*8) by (username) > 0\",\n \"fullMetaSearch\": false,\n \"includeNullMetadata\": true,\n \"instant\": false,\n \"legendFormat\": \"__auto\",\n \"range\": true,\n \"refId\": \"A\",\n \"useBackend\": false\n }\n ],\n \"title\": \"User Incoming Traffic Rate\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"default\": false,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisBorderShow\": false,\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"barWidthFactor\": 0.6,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 0,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"insertNulls\": false,\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"auto\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 0,\n \"y\": 33\n },\n \"id\": 10,\n \"interval\": \"1h\",\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"11.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"disableTextWrap\": false,\n \"editorMode\": \"code\",\n \"expr\": \"sum(increase(fptn_user_outgoing_traffic_bytes[$__rate_interval])) by (username) > 0\",\n \"fullMetaSearch\": false,\n \"includeNullMetadata\": true,\n \"instant\": false,\n \"legendFormat\": \"__auto\",\n \"range\": true,\n \"refId\": \"A\",\n \"useBackend\": false\n }\n ],\n \"title\": \"Outgoing traffic by user for 1h\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"default\": false,\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisBorderShow\": false,\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"barWidthFactor\": 0.6,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 0,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"insertNulls\": false,\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"auto\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 8,\n \"w\": 12,\n \"x\": 12,\n \"y\": 33\n },\n \"id\": 11,\n \"interval\": \"1h\",\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"PBFA97CFB590B2093\"\n },\n \"disableTextWrap\": false,\n \"editorMode\": \"code\",\n \"expr\": \"sum(increase(fptn_user_incoming_traffic_bytes[$__rate_interval])) by (username) > 0 \",\n \"fullMetaSearch\": false,\n \"includeNullMetadata\": true,\n \"instant\": false,\n \"legendFormat\": \"__auto\",\n \"range\": true,\n \"refId\": \"A\",\n \"useBackend\": false\n }\n ],\n \"title\": \"incoming traffic by user for 1h\",\n \"type\": \"timeseries\"\n }\n ],\n \"refresh\": \"5s\",\n \"schemaVersion\": 39,\n \"tags\": [],\n \"templating\": {\n \"list\": []\n },\n \"time\": {\n \"from\": \"now-6h\",\n \"to\": \"now\"\n },\n \"timepicker\": {\n \"refresh_intervals\": [\n \"5s\",\n \"10s\",\n \"30s\",\n \"1m\",\n \"5m\",\n \"15m\",\n \"30m\",\n \"1h\",\n \"3h\",\n \"6h\",\n \"12h\",\n \"24h\"\n ]\n },\n \"timezone\": \"browser\",\n \"title\": \"FPTN Metrics Dashboard\",\n \"uid\": \"fptn-metrics-dashboard\",\n \"version\": 1,\n \"weekStart\": \"\"\n}" }, { "path": "sysadmin-tools/grafana/configs/grafana/dashboards/node-exporter-full.json", "content": "{\n \"__inputs\": [\n {\n \"name\": \"DS_PROMETHEUS\",\n \"label\": \"Prometheus\",\n \"description\": \"\",\n \"type\": \"datasource\",\n \"pluginId\": \"prometheus\",\n \"pluginName\": \"Prometheus\"\n }\n ],\n \"__elements\": {},\n \"__requires\": [\n {\n \"type\": \"panel\",\n \"id\": \"bargauge\",\n \"name\": \"Bar gauge\",\n \"version\": \"\"\n },\n {\n \"type\": \"panel\",\n \"id\": \"gauge\",\n \"name\": \"Gauge\",\n \"version\": \"\"\n },\n {\n \"type\": \"grafana\",\n \"id\": \"grafana\",\n \"name\": \"Grafana\",\n \"version\": \"9.4.3\"\n },\n {\n \"type\": \"datasource\",\n \"id\": \"prometheus\",\n \"name\": \"Prometheus\",\n \"version\": \"1.0.0\"\n },\n {\n \"type\": \"panel\",\n \"id\": \"stat\",\n \"name\": \"Stat\",\n \"version\": \"\"\n },\n {\n \"type\": \"panel\",\n \"id\": \"timeseries\",\n \"name\": \"Time series\",\n \"version\": \"\"\n }\n ],\n \"annotations\": {\n \"list\": [\n {\n \"$$hashKey\": \"object:1058\",\n \"builtIn\": 1,\n \"datasource\": {\n \"type\": \"datasource\",\n \"uid\": \"grafana\"\n },\n \"enable\": true,\n \"hide\": true,\n \"iconColor\": \"rgba(0, 211, 255, 1)\",\n \"name\": \"Annotations & Alerts\",\n \"target\": {\n \"limit\": 100,\n \"matchAny\": false,\n \"tags\": [],\n \"type\": \"dashboard\"\n },\n \"type\": \"dashboard\"\n }\n ]\n },\n \"editable\": true,\n \"fiscalYearStartMonth\": 0,\n \"gnetId\": 1860,\n \"graphTooltip\": 1,\n \"id\": null,\n \"links\": [\n {\n \"icon\": \"external link\",\n \"tags\": [],\n \"targetBlank\": true,\n \"title\": \"GitHub\",\n \"type\": \"link\",\n \"url\": \"https://github.com/rfmoz/grafana-dashboards\"\n },\n {\n \"icon\": \"external link\",\n \"tags\": [],\n \"targetBlank\": true,\n \"title\": \"Grafana\",\n \"type\": \"link\",\n \"url\": \"https://grafana.com/grafana/dashboards/1860\"\n }\n ],\n \"liveNow\": false,\n \"panels\": [\n {\n \"collapsed\": false,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 0\n },\n \"id\": 261,\n \"panels\": [],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Quick CPU / Mem / Disk\",\n \"type\": \"row\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Resource pressure via PSI\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 1,\n \"links\": [],\n \"mappings\": [],\n \"max\": 1,\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"percentage\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"dark-yellow\",\n \"value\": 70\n },\n {\n \"color\": \"dark-red\",\n \"value\": 90\n }\n ]\n },\n \"unit\": \"percentunit\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 4,\n \"w\": 3,\n \"x\": 0,\n \"y\": 1\n },\n \"id\": 323,\n \"links\": [],\n \"options\": {\n \"displayMode\": \"basic\",\n \"minVizHeight\": 10,\n \"minVizWidth\": 0,\n \"orientation\": \"horizontal\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"showUnfilled\": true,\n \"text\": {}\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"irate(node_pressure_cpu_waiting_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"instant\": true,\n \"intervalFactor\": 1,\n \"legendFormat\": \"CPU\",\n \"range\": false,\n \"refId\": \"CPU some\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"irate(node_pressure_memory_waiting_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"instant\": true,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Mem\",\n \"range\": false,\n \"refId\": \"Memory some\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"irate(node_pressure_io_waiting_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"instant\": true,\n \"intervalFactor\": 1,\n \"legendFormat\": \"I/O\",\n \"range\": false,\n \"refId\": \"I/O some\",\n \"step\": 240\n }\n ],\n \"title\": \"Pressure\",\n \"type\": \"bargauge\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Busy state of all CPU cores together\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 1,\n \"mappings\": [\n {\n \"options\": {\n \"match\": \"null\",\n \"result\": {\n \"text\": \"N/A\"\n }\n },\n \"type\": \"special\"\n }\n ],\n \"max\": 100,\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"rgba(50, 172, 45, 0.97)\",\n \"value\": null\n },\n {\n \"color\": \"rgba(237, 129, 40, 0.89)\",\n \"value\": 85\n },\n {\n \"color\": \"rgba(245, 54, 54, 0.9)\",\n \"value\": 95\n }\n ]\n },\n \"unit\": \"percent\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 4,\n \"w\": 3,\n \"x\": 3,\n \"y\": 1\n },\n \"id\": 20,\n \"links\": [],\n \"options\": {\n \"orientation\": \"auto\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"showThresholdLabels\": false,\n \"showThresholdMarkers\": true\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"100 * (1 - avg(rate(node_cpu_seconds_total{mode=\\\"idle\\\", instance=\\\"$node\\\"}[$__rate_interval])))\",\n \"hide\": false,\n \"instant\": true,\n \"intervalFactor\": 1,\n \"legendFormat\": \"\",\n \"range\": false,\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"CPU Busy\",\n \"type\": \"gauge\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"System load over all CPU cores together\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 1,\n \"mappings\": [\n {\n \"options\": {\n \"match\": \"null\",\n \"result\": {\n \"text\": \"N/A\"\n }\n },\n \"type\": \"special\"\n }\n ],\n \"max\": 100,\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"rgba(50, 172, 45, 0.97)\",\n \"value\": null\n },\n {\n \"color\": \"rgba(237, 129, 40, 0.89)\",\n \"value\": 85\n },\n {\n \"color\": \"rgba(245, 54, 54, 0.9)\",\n \"value\": 95\n }\n ]\n },\n \"unit\": \"percent\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 4,\n \"w\": 3,\n \"x\": 6,\n \"y\": 1\n },\n \"id\": 155,\n \"links\": [],\n \"options\": {\n \"orientation\": \"auto\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"showThresholdLabels\": false,\n \"showThresholdMarkers\": true\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"scalar(node_load1{instance=\\\"$node\\\",job=\\\"$job\\\"}) * 100 / count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu))\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"instant\": true,\n \"intervalFactor\": 1,\n \"range\": false,\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Sys Load\",\n \"type\": \"gauge\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Non available RAM memory\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 1,\n \"mappings\": [],\n \"max\": 100,\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"rgba(50, 172, 45, 0.97)\",\n \"value\": null\n },\n {\n \"color\": \"rgba(237, 129, 40, 0.89)\",\n \"value\": 80\n },\n {\n \"color\": \"rgba(245, 54, 54, 0.9)\",\n \"value\": 90\n }\n ]\n },\n \"unit\": \"percent\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 4,\n \"w\": 3,\n \"x\": 9,\n \"y\": 1\n },\n \"hideTimeOverride\": false,\n \"id\": 16,\n \"links\": [],\n \"options\": {\n \"orientation\": \"auto\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"showThresholdLabels\": false,\n \"showThresholdMarkers\": true\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"((node_memory_MemTotal_bytes{instance=\\\"$node\\\", job=\\\"$job\\\"} - node_memory_MemFree_bytes{instance=\\\"$node\\\", job=\\\"$job\\\"}) / node_memory_MemTotal_bytes{instance=\\\"$node\\\", job=\\\"$job\\\"}) * 100\",\n \"format\": \"time_series\",\n \"hide\": true,\n \"instant\": true,\n \"intervalFactor\": 1,\n \"range\": false,\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"(1 - (node_memory_MemAvailable_bytes{instance=\\\"$node\\\", job=\\\"$job\\\"} / node_memory_MemTotal_bytes{instance=\\\"$node\\\", job=\\\"$job\\\"})) * 100\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"instant\": true,\n \"intervalFactor\": 1,\n \"range\": false,\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"RAM Used\",\n \"type\": \"gauge\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Used Swap\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 1,\n \"mappings\": [\n {\n \"options\": {\n \"match\": \"null\",\n \"result\": {\n \"text\": \"N/A\"\n }\n },\n \"type\": \"special\"\n }\n ],\n \"max\": 100,\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"rgba(50, 172, 45, 0.97)\",\n \"value\": null\n },\n {\n \"color\": \"rgba(237, 129, 40, 0.89)\",\n \"value\": 10\n },\n {\n \"color\": \"rgba(245, 54, 54, 0.9)\",\n \"value\": 25\n }\n ]\n },\n \"unit\": \"percent\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 4,\n \"w\": 3,\n \"x\": 12,\n \"y\": 1\n },\n \"id\": 21,\n \"links\": [],\n \"options\": {\n \"orientation\": \"auto\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"showThresholdLabels\": false,\n \"showThresholdMarkers\": true\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"((node_memory_SwapTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_SwapFree_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}) / (node_memory_SwapTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"})) * 100\",\n \"instant\": true,\n \"intervalFactor\": 1,\n \"range\": false,\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"SWAP Used\",\n \"type\": \"gauge\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Used Root FS\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 1,\n \"mappings\": [\n {\n \"options\": {\n \"match\": \"null\",\n \"result\": {\n \"text\": \"N/A\"\n }\n },\n \"type\": \"special\"\n }\n ],\n \"max\": 100,\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"rgba(50, 172, 45, 0.97)\",\n \"value\": null\n },\n {\n \"color\": \"rgba(237, 129, 40, 0.89)\",\n \"value\": 80\n },\n {\n \"color\": \"rgba(245, 54, 54, 0.9)\",\n \"value\": 90\n }\n ]\n },\n \"unit\": \"percent\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 4,\n \"w\": 3,\n \"x\": 15,\n \"y\": 1\n },\n \"id\": 154,\n \"links\": [],\n \"options\": {\n \"orientation\": \"auto\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"showThresholdLabels\": false,\n \"showThresholdMarkers\": true\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"100 - ((node_filesystem_avail_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",mountpoint=\\\"/\\\",fstype!=\\\"rootfs\\\"} * 100) / node_filesystem_size_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",mountpoint=\\\"/\\\",fstype!=\\\"rootfs\\\"})\",\n \"format\": \"time_series\",\n \"instant\": true,\n \"intervalFactor\": 1,\n \"range\": false,\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Root FS Used\",\n \"type\": \"gauge\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Total number of CPU cores\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"mappings\": [\n {\n \"options\": {\n \"match\": \"null\",\n \"result\": {\n \"text\": \"N/A\"\n }\n },\n \"type\": \"special\"\n }\n ],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 2,\n \"w\": 2,\n \"x\": 18,\n \"y\": 1\n },\n \"id\": 14,\n \"links\": [],\n \"maxDataPoints\": 100,\n \"options\": {\n \"colorMode\": \"none\",\n \"graphMode\": \"none\",\n \"justifyMode\": \"auto\",\n \"orientation\": \"horizontal\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"textMode\": \"auto\"\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu))\",\n \"instant\": true,\n \"legendFormat\": \"__auto\",\n \"range\": false,\n \"refId\": \"A\"\n }\n ],\n \"title\": \"CPU Cores\",\n \"type\": \"stat\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"System uptime\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 1,\n \"mappings\": [\n {\n \"options\": {\n \"match\": \"null\",\n \"result\": {\n \"text\": \"N/A\"\n }\n },\n \"type\": \"special\"\n }\n ],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"s\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 2,\n \"w\": 4,\n \"x\": 20,\n \"y\": 1\n },\n \"hideTimeOverride\": true,\n \"id\": 15,\n \"links\": [],\n \"maxDataPoints\": 100,\n \"options\": {\n \"colorMode\": \"none\",\n \"graphMode\": \"none\",\n \"justifyMode\": \"auto\",\n \"orientation\": \"horizontal\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"textMode\": \"auto\"\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"node_time_seconds{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_boot_time_seconds{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"instant\": true,\n \"intervalFactor\": 1,\n \"range\": false,\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Uptime\",\n \"type\": \"stat\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Total RootFS\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 0,\n \"mappings\": [\n {\n \"options\": {\n \"match\": \"null\",\n \"result\": {\n \"text\": \"N/A\"\n }\n },\n \"type\": \"special\"\n }\n ],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"rgba(50, 172, 45, 0.97)\",\n \"value\": null\n },\n {\n \"color\": \"rgba(237, 129, 40, 0.89)\",\n \"value\": 70\n },\n {\n \"color\": \"rgba(245, 54, 54, 0.9)\",\n \"value\": 90\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 2,\n \"w\": 2,\n \"x\": 18,\n \"y\": 3\n },\n \"id\": 23,\n \"links\": [],\n \"maxDataPoints\": 100,\n \"options\": {\n \"colorMode\": \"none\",\n \"graphMode\": \"none\",\n \"justifyMode\": \"auto\",\n \"orientation\": \"horizontal\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"textMode\": \"auto\"\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"node_filesystem_size_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",mountpoint=\\\"/\\\",fstype!=\\\"rootfs\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"instant\": true,\n \"intervalFactor\": 1,\n \"range\": false,\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"RootFS Total\",\n \"type\": \"stat\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Total RAM\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 0,\n \"mappings\": [\n {\n \"options\": {\n \"match\": \"null\",\n \"result\": {\n \"text\": \"N/A\"\n }\n },\n \"type\": \"special\"\n }\n ],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 2,\n \"w\": 2,\n \"x\": 20,\n \"y\": 3\n },\n \"id\": 75,\n \"links\": [],\n \"maxDataPoints\": 100,\n \"options\": {\n \"colorMode\": \"none\",\n \"graphMode\": \"none\",\n \"justifyMode\": \"auto\",\n \"orientation\": \"horizontal\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"textMode\": \"auto\"\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"node_memory_MemTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"instant\": true,\n \"intervalFactor\": 1,\n \"range\": false,\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"RAM Total\",\n \"type\": \"stat\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Total SWAP\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"thresholds\"\n },\n \"decimals\": 0,\n \"mappings\": [\n {\n \"options\": {\n \"match\": \"null\",\n \"result\": {\n \"text\": \"N/A\"\n }\n },\n \"type\": \"special\"\n }\n ],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 2,\n \"w\": 2,\n \"x\": 22,\n \"y\": 3\n },\n \"id\": 18,\n \"links\": [],\n \"maxDataPoints\": 100,\n \"options\": {\n \"colorMode\": \"none\",\n \"graphMode\": \"none\",\n \"justifyMode\": \"auto\",\n \"orientation\": \"horizontal\",\n \"reduceOptions\": {\n \"calcs\": [\n \"lastNotNull\"\n ],\n \"fields\": \"\",\n \"values\": false\n },\n \"textMode\": \"auto\"\n },\n \"pluginVersion\": \"9.4.3\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"node_memory_SwapTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"instant\": true,\n \"intervalFactor\": 1,\n \"range\": false,\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"SWAP Total\",\n \"type\": \"stat\"\n },\n {\n \"collapsed\": false,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 5\n },\n \"id\": 263,\n \"panels\": [],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Basic CPU / Mem / Net / Disk\",\n \"type\": \"row\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Basic CPU info\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 40,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"smooth\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"percent\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"percentunit\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Busy Iowait\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Idle\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Busy Iowait\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Idle\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Busy System\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Busy User\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Busy Other\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 7,\n \"w\": 12,\n \"x\": 0,\n \"y\": 6\n },\n \"id\": 77,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 250\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"desc\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"exemplar\": false,\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"system\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"instant\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Busy System\",\n \"range\": true,\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"user\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Busy User\",\n \"range\": true,\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"iowait\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Busy Iowait\",\n \"range\": true,\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=~\\\".*irq\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Busy IRQs\",\n \"range\": true,\n \"refId\": \"D\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode!='idle',mode!='user',mode!='system',mode!='iowait',mode!='irq',mode!='softirq'}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Busy Other\",\n \"range\": true,\n \"refId\": \"E\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"idle\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Idle\",\n \"range\": true,\n \"refId\": \"F\",\n \"step\": 240\n }\n ],\n \"title\": \"CPU Basic\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Basic memory usage\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 40,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"SWAP Used\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap Used\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n },\n {\n \"id\": \"custom.stacking\",\n \"value\": {\n \"group\": false,\n \"mode\": \"normal\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM Cache + Buffer\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Available\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#DEDAF7\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n },\n {\n \"id\": \"custom.stacking\",\n \"value\": {\n \"group\": false,\n \"mode\": \"normal\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 7,\n \"w\": 12,\n \"x\": 12,\n \"y\": 6\n },\n \"id\": 78,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_MemTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"RAM Total\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_MemTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_MemFree_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - (node_memory_Cached_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} + node_memory_Buffers_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} + node_memory_SReclaimable_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"})\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"RAM Used\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Cached_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} + node_memory_Buffers_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} + node_memory_SReclaimable_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"RAM Cache + Buffer\",\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_MemFree_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"RAM Free\",\n \"refId\": \"D\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"(node_memory_SwapTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_SwapFree_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"})\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"SWAP Used\",\n \"refId\": \"E\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Basic\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Basic network info per interface\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 40,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Recv_bytes_eth2\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Recv_bytes_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Recv_drop_eth2\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Recv_drop_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Recv_errs_eth2\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Recv_errs_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CCA300\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Trans_bytes_eth2\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Trans_bytes_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Trans_drop_eth2\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Trans_drop_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Trans_errs_eth2\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Trans_errs_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CCA300\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"recv_bytes_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"recv_drop_eth0\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"recv_drop_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#967302\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"recv_errs_eth0\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"recv_errs_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"trans_bytes_eth0\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"trans_bytes_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"trans_drop_eth0\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"trans_drop_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#967302\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"trans_errs_eth0\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"trans_errs_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 7,\n \"w\": 12,\n \"x\": 0,\n \"y\": 13\n },\n \"id\": 74,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_receive_bytes_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])*8\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"recv {{device}}\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_transmit_bytes_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])*8\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"trans {{device}} \",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic Basic\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Disk space used of all filesystems mounted\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 40,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"max\": 100,\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"percent\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 7,\n \"w\": 12,\n \"x\": 12,\n \"y\": 13\n },\n \"id\": 152,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [],\n \"displayMode\": \"list\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"100 - ((node_filesystem_avail_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'} * 100) / node_filesystem_size_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'})\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{mountpoint}}\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Disk Space Used Basic\",\n \"type\": \"timeseries\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 20\n },\n \"id\": 265,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"percentage\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 70,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"smooth\",\n \"lineWidth\": 2,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"percent\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"percentunit\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Idle - Waiting for something to happen\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Iowait - Waiting for I/O to complete\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Irq - Servicing interrupts\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Nice - Niced processes executing in user mode\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Softirq - Servicing softirqs\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Steal - Time spent in other operating systems when running in a virtualized environment\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCE2DE\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"System - Processes executing in kernel mode\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"User - Normal processes executing in user mode\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#5195CE\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 12,\n \"w\": 12,\n \"x\": 0,\n \"y\": 21\n },\n \"id\": 3,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 250\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"desc\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"system\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"System - Processes executing in kernel mode\",\n \"range\": true,\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"user\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"User - Normal processes executing in user mode\",\n \"range\": true,\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"nice\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Nice - Niced processes executing in user mode\",\n \"range\": true,\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum by(instance) (irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"iowait\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Iowait - Waiting for I/O to complete\",\n \"range\": true,\n \"refId\": \"E\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"irq\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Irq - Servicing interrupts\",\n \"range\": true,\n \"refId\": \"F\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"softirq\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Softirq - Servicing softirqs\",\n \"range\": true,\n \"refId\": \"G\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"steal\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Steal - Time spent in other operating systems when running in a virtualized environment\",\n \"range\": true,\n \"refId\": \"H\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum(irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"idle\\\"}[$__rate_interval])) / scalar(count(count(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}) by (cpu)))\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Idle - Waiting for something to happen\",\n \"range\": true,\n \"refId\": \"J\",\n \"step\": 240\n }\n ],\n \"title\": \"CPU\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 40,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap - Swap memory usage\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused - Free memory unassigned\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Hardware Corrupted - *./\"\n },\n \"properties\": [\n {\n \"id\": \"custom.stacking\",\n \"value\": {\n \"group\": false,\n \"mode\": \"normal\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 12,\n \"w\": 12,\n \"x\": 12,\n \"y\": 21\n },\n \"id\": 24,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_MemTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_MemFree_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_Buffers_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_Cached_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_Slab_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_PageTables_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_SwapCached_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Apps - Memory used by user-space applications\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_PageTables_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"PageTables - Memory used to map between virtual and physical memory addresses\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_SwapCached_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"SwapCache - Memory that keeps track of pages that have been fetched from swap but not yet been modified\",\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Slab_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Slab - Memory used by the kernel to cache data structures for its own use (caches like inode, dentry, etc)\",\n \"refId\": \"D\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Cached_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Cache - Parked file data (file content) cache\",\n \"refId\": \"E\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Buffers_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Buffers - Block device (e.g. harddisk) cache\",\n \"refId\": \"F\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_MemFree_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Unused - Free memory unassigned\",\n \"refId\": \"G\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"(node_memory_SwapTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"} - node_memory_SwapFree_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"})\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Swap - Swap space used\",\n \"refId\": \"H\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_HardwareCorrupted_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\",\n \"refId\": \"I\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Stack\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bits out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 40,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"receive_packets_eth0\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"receive_packets_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"transmit_packets_eth0\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"transmit_packets_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 12,\n \"w\": 12,\n \"x\": 0,\n \"y\": 33\n },\n \"id\": 84,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_receive_bytes_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])*8\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Receive\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_transmit_bytes_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])*8\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Transmit\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 40,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 12,\n \"w\": 12,\n \"x\": 12,\n \"y\": 33\n },\n \"id\": 156,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filesystem_size_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'} - node_filesystem_avail_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{mountpoint}}\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Disk Space Used\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"IO read (-) / write (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"iops\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Read.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda2_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BA43A9\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda3_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F4D598\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#962D82\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#9AC48A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#65C5DB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9934E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCEACA\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9E2D2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 12,\n \"w\": 12,\n \"x\": 0,\n \"y\": 45\n },\n \"id\": 229,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_reads_completed_total{instance=\\\"$node\\\",job=\\\"$job\\\",device=~\\\"$diskdevices\\\"}[$__rate_interval])\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"{{device}} - Reads completed\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_writes_completed_total{instance=\\\"$node\\\",job=\\\"$job\\\",device=~\\\"$diskdevices\\\"}[$__rate_interval])\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Writes completed\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Disk IOps\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes read (-) / write (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 40,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"Bps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"io time\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*read*./\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byType\",\n \"options\": \"time\"\n },\n \"properties\": [\n {\n \"id\": \"custom.axisPlacement\",\n \"value\": \"hidden\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 12,\n \"w\": 12,\n \"x\": 12,\n \"y\": 45\n },\n \"id\": 42,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_read_bytes_total{instance=\\\"$node\\\",job=\\\"$job\\\",device=~\\\"$diskdevices\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Successfully read bytes\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_written_bytes_total{instance=\\\"$node\\\",job=\\\"$job\\\",device=~\\\"$diskdevices\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Successfully written bytes\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"I/O Usage Read / Write\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"%util\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 40,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"percentunit\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"io time\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byType\",\n \"options\": \"time\"\n },\n \"properties\": [\n {\n \"id\": \"custom.axisPlacement\",\n \"value\": \"hidden\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 12,\n \"w\": 12,\n \"x\": 0,\n \"y\": 57\n },\n \"id\": 127,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_io_time_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\",device=~\\\"$diskdevices\\\"} [$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}}\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"I/O Utilization\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"percentage\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"bars\",\n \"fillOpacity\": 70,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"smooth\",\n \"lineWidth\": 2,\n \"pointSize\": 3,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"mappings\": [],\n \"max\": 1,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"percentunit\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/^Guest - /\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#5195ce\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/^GuestNice - /\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#c15c17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 12,\n \"w\": 12,\n \"x\": 12,\n \"y\": 57\n },\n \"id\": 319,\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"desc\"\n }\n },\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum by(instance) (irate(node_cpu_guest_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"user\\\"}[1m])) / on(instance) group_left sum by (instance)((irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[1m])))\",\n \"hide\": false,\n \"legendFormat\": \"Guest - Time spent running a virtual CPU for a guest operating system\",\n \"range\": true,\n \"refId\": \"A\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"sum by(instance) (irate(node_cpu_guest_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\", mode=\\\"nice\\\"}[1m])) / on(instance) group_left sum by (instance)((irate(node_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[1m])))\",\n \"hide\": false,\n \"legendFormat\": \"GuestNice - Time spent running a niced guest (virtual CPU for guest operating system)\",\n \"range\": true,\n \"refId\": \"B\"\n }\n ],\n \"title\": \"CPU spent seconds in guests (VMs)\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"CPU / Memory / Net / Disk\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 21\n },\n \"id\": 266,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 54\n },\n \"id\": 136,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Inactive_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Inactive - Memory which has been less recently used. It is more eligible to be reclaimed for other purposes\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Active_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Active - Memory that has been used more recently and usually not reclaimed unless absolutely necessary\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Active / Inactive\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*CommitLimit - *./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 54\n },\n \"id\": 135,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Committed_AS_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Committed_AS - Amount of memory presently allocated on the system\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_CommitLimit_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CommitLimit - Amount of memory currently available to be allocated on the system\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Committed\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 64\n },\n \"id\": 191,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Inactive_file_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Inactive_file - File-backed memory on inactive LRU list\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Inactive_anon_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Inactive_anon - Anonymous and swap cache on inactive LRU list, including tmpfs (shmem)\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Active_file_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Active_file - File-backed memory on active LRU list\",\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Active_anon_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Active_anon - Anonymous and swap cache on active least-recently-used (LRU) list, including tmpfs\",\n \"refId\": \"D\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Active / Inactive Detail\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#58140C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Dirty\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#B7DBAB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Mapped\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM + Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"VmallocUsed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 64\n },\n \"id\": 130,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Writeback_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Writeback - Memory which is actively being written back to disk\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_WritebackTmp_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"WritebackTmp - Memory used by FUSE for temporary writeback buffers\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Dirty_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Dirty - Memory which is waiting to get written back to the disk\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Writeback and Dirty\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"ShmemHugePages - Memory used by shared memory (shmem) and tmpfs allocated with huge pages\"\n },\n \"properties\": [\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"ShmemHugePages - Memory used by shared memory (shmem) and tmpfs allocated with huge pages\"\n },\n \"properties\": [\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 74\n },\n \"id\": 138,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Mapped_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Mapped - Used memory in mapped pages files which have been mapped, such as libraries\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Shmem_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Shmem - Used shared memory (shared between several processes, thus including RAM disks)\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_ShmemHugePages_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"ShmemHugePages - Memory used by shared memory (shmem) and tmpfs allocated with huge pages\",\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_ShmemPmdMapped_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"ShmemPmdMapped - Amount of shared (shmem/tmpfs) memory backed by huge pages\",\n \"refId\": \"D\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Shared and Mapped\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#58140C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Dirty\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#B7DBAB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Mapped\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM + Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"VmallocUsed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 74\n },\n \"id\": 131,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_SUnreclaim_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"SUnreclaim - Part of Slab, that cannot be reclaimed on memory pressure\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_SReclaimable_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"SReclaimable - Part of Slab, that might be reclaimed, such as caches\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Slab\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#58140C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Dirty\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#B7DBAB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Mapped\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM + Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"VmallocUsed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 84\n },\n \"id\": 70,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_VmallocChunk_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"VmallocChunk - Largest contiguous block of vmalloc area which is free\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_VmallocTotal_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"VmallocTotal - Total size of vmalloc memory area\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_VmallocUsed_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"VmallocUsed - Amount of vmalloc area which is used\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Vmalloc\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 84\n },\n \"id\": 159,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Bounce_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Bounce - Memory used for block device bounce buffers\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Bounce\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#58140C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Dirty\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#B7DBAB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Mapped\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM + Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"VmallocUsed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Inactive *./\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 94\n },\n \"id\": 129,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_AnonHugePages_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"AnonHugePages - Memory in anonymous huge pages\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_AnonPages_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"AnonPages - Memory in user pages not backed by files\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Anonymous\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 94\n },\n \"id\": 160,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_KernelStack_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"KernelStack - Kernel memory stack. This is not reclaimable\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Percpu_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"PerCPU - Per CPU memory allocated dynamically by loadable modules\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Kernel / CPU\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"pages\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#58140C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Dirty\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#B7DBAB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Mapped\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM + Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"VmallocUsed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 104\n },\n \"id\": 140,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_HugePages_Free{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"HugePages_Free - Huge pages in the pool that are not yet allocated\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_HugePages_Rsvd{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"HugePages_Rsvd - Huge pages for which a commitment to allocate from the pool has been made, but no allocation has yet been made\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_HugePages_Surp{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"HugePages_Surp - Huge pages in the pool above the value in /proc/sys/vm/nr_hugepages\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory HugePages Counter\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#58140C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Dirty\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#B7DBAB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Mapped\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM + Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"VmallocUsed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 104\n },\n \"id\": 71,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_HugePages_Total{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"HugePages - Total size of the pool of huge pages\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Hugepagesize_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Hugepagesize - Huge Page size\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory HugePages Size\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#58140C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Dirty\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#B7DBAB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Mapped\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM + Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"VmallocUsed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 114\n },\n \"id\": 128,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_DirectMap1G_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"DirectMap1G - Amount of pages mapped as this size\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_DirectMap2M_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"DirectMap2M - Amount of pages mapped as this size\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_DirectMap4k_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"DirectMap4K - Amount of pages mapped as this size\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory DirectMap\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 114\n },\n \"id\": 137,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Unevictable_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Unevictable - Amount of unevictable memory that can't be swapped out for a variety of reasons\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_Mlocked_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"MLocked - Size of pages locked to memory using the mlock() system call\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Unevictable and MLocked\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#58140C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Dirty\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#B7DBAB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Mapped\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM + Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"VmallocUsed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 124\n },\n \"id\": 132,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_memory_NFS_Unstable_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"NFS Unstable - Memory in NFS pages sent to the server, but not yet committed to the storage\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory NFS\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Memory Meminfo\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 22\n },\n \"id\": 267,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"pages out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*out/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 41\n },\n \"id\": 176,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_vmstat_pgpgin{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Pagesin - Page in operations\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_vmstat_pgpgout{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Pagesout - Page out operations\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Pages In / Out\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"pages out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*out/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 41\n },\n \"id\": 22,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_vmstat_pswpin{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Pswpin - Pages swapped in\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_vmstat_pswpout{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Pswpout - Pages swapped out\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Pages Swap In / Out\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"faults\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Apps\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#629E51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A437C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Hardware Corrupted - Amount of RAM that the kernel identified as corrupted / not working\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#CFFAFF\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"RAM_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#806EB7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#2F575E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Unused\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Pgfault - Page major and minor fault operations\"\n },\n \"properties\": [\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n },\n {\n \"id\": \"custom.stacking\",\n \"value\": {\n \"group\": false,\n \"mode\": \"normal\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 51\n },\n \"id\": 175,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 350\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_vmstat_pgfault{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Pgfault - Page major and minor fault operations\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_vmstat_pgmajfault{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Pgmajfault - Major page fault operations\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_vmstat_pgfault{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval]) - irate(node_vmstat_pgmajfault{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Pgminfault - Minor page fault operations\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"Memory Page Faults\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#99440A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Buffers\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#58140C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6D1F62\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Cached\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Committed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#508642\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Dirty\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Free\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#B7DBAB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Mapped\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PageTables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Page_Tables\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Slab_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Swap_Cache\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C15C17\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#511749\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total RAM + Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#052B51\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Total Swap\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"VmallocUsed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 51\n },\n \"id\": 307,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_vmstat_oom_kill{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"oom killer invocations \",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"OOM Killer\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Memory Vmstat\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 23\n },\n \"id\": 293,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"seconds\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"s\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Variation*./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 24\n },\n \"id\": 260,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_timex_estimated_error_seconds{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Estimated error in seconds\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_timex_offset_seconds{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Time offset in between local system and reference clock\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_timex_maxerror_seconds{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Maximum error in seconds\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"Time Synchronized Drift\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 24\n },\n \"id\": 291,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_timex_loop_time_constant{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Phase-locked loop time adjust\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Time PLL Adjust\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Variation*./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 34\n },\n \"id\": 168,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_timex_sync_status{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Is clock synchronized to a reliable server (1 = yes, 0 = no)\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_timex_frequency_adjustment_ratio{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Local clock frequency adjustment\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Time Synchronized Status\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"seconds\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"s\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 34\n },\n \"id\": 294,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_timex_tick_seconds{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Seconds between clock ticks\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_timex_tai_offset_seconds{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"International Atomic Time (TAI) offset\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Time Misc\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"System Timesync\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 24\n },\n \"id\": 312,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 73\n },\n \"id\": 62,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_procs_blocked{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Processes blocked waiting for I/O to complete\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_procs_running{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Processes in runnable state\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Processes Status\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Enable with --collector.processes argument on node-exporter\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 73\n },\n \"id\": 315,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_processes_state{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ state }}\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Processes State\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"forks / sec\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 83\n },\n \"id\": 148,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_forks_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Processes forks second\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Processes Forks\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"decbytes\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Max.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 83\n },\n \"id\": 149,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(process_virtual_memory_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Processes virtual memory size in bytes\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"process_resident_memory_max_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Maximum amount of virtual memory available in bytes\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(process_virtual_memory_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Processes virtual memory size in bytes\",\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(process_virtual_memory_max_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Maximum amount of virtual memory available in bytes\",\n \"refId\": \"D\",\n \"step\": 240\n }\n ],\n \"title\": \"Processes Memory\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Enable with --collector.processes argument on node-exporter\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"PIDs limit\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F2495C\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 93\n },\n \"id\": 313,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_processes_pids{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Number of PIDs\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_processes_max_processes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"PIDs limit\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"PIDs Number and Limit\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"seconds\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"s\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*waiting.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 93\n },\n \"id\": 305,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_schedstat_running_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CPU {{ cpu }} - seconds spent running a process\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_schedstat_waiting_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CPU {{ cpu }} - seconds spent by processing waiting for this CPU\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Process schedule stats Running / Waiting\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Enable with --collector.processes argument on node-exporter\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Threads limit\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F2495C\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 103\n },\n \"id\": 314,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_processes_threads{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Allocated threads\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_processes_max_threads{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Threads limit\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Threads Number and Limit\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"System Processes\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 25\n },\n \"id\": 269,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 26\n },\n \"id\": 8,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_context_switches_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Context switches\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_intr_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Interrupts\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Context Switches / Interrupts\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 26\n },\n \"id\": 7,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_load1{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"Load 1m\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_load5{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"Load 5m\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_load15{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"Load 15m\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"System Load\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 0,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"hertz\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Max\"\n },\n \"properties\": [\n {\n \"id\": \"custom.lineStyle\",\n \"value\": {\n \"dash\": [\n 10,\n 10\n ],\n \"fill\": \"dash\"\n }\n },\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"blue\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 10\n },\n {\n \"id\": \"custom.hideFrom\",\n \"value\": {\n \"legend\": true,\n \"tooltip\": false,\n \"viz\": false\n }\n },\n {\n \"id\": \"custom.fillBelowTo\",\n \"value\": \"Min\"\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Min\"\n },\n \"properties\": [\n {\n \"id\": \"custom.lineStyle\",\n \"value\": {\n \"dash\": [\n 10,\n 10\n ],\n \"fill\": \"dash\"\n }\n },\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"blue\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.hideFrom\",\n \"value\": {\n \"legend\": true,\n \"tooltip\": false,\n \"viz\": false\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 36\n },\n \"id\": 321,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"desc\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"node_cpu_scaling_frequency_hertz{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CPU {{ cpu }}\",\n \"range\": true,\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"avg(node_cpu_scaling_frequency_max_hertz{instance=\\\"$node\\\",job=\\\"$job\\\"})\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Max\",\n \"range\": true,\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"avg(node_cpu_scaling_frequency_min_hertz{instance=\\\"$node\\\",job=\\\"$job\\\"})\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Min\",\n \"range\": true,\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"CPU Frequency Scaling\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"https://docs.kernel.org/accounting/psi.html\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 10,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"percentunit\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Memory some\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"dark-red\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Memory full\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"light-red\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"I/O some\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"dark-blue\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"I/O full\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"light-blue\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 36\n },\n \"id\": 322,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"rate(node_pressure_cpu_waiting_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CPU some\",\n \"range\": true,\n \"refId\": \"CPU some\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"rate(node_pressure_memory_waiting_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Memory some\",\n \"range\": true,\n \"refId\": \"Memory some\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"rate(node_pressure_memory_stalled_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"Memory full\",\n \"range\": true,\n \"refId\": \"Memory full\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"rate(node_pressure_io_waiting_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"I/O some\",\n \"range\": true,\n \"refId\": \"I/O some\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"rate(node_pressure_io_stalled_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"I/O full\",\n \"range\": true,\n \"refId\": \"I/O full\",\n \"step\": 240\n }\n ],\n \"title\": \"Pressure Stall Information\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Enable with --collector.interrupts argument on node-exporter\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Critical*./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Max*./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 46\n },\n \"id\": 259,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_interrupts_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ type }} - {{ info }}\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Interrupts Detail\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 46\n },\n \"id\": 306,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_schedstat_timeslices_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CPU {{ cpu }}\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Schedule timeslices executed by each cpu\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 56\n },\n \"id\": 151,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_entropy_available_bits{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Entropy available to random number generators\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Entropy\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"seconds\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"s\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 56\n },\n \"id\": 308,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(process_cpu_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Time spent\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"CPU time spent in user and system contexts\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Max*./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 66\n },\n \"id\": 64,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"process_max_fds{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Maximum open file descriptors\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"process_open_fds{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Open file descriptors\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"File Descriptors\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"System Misc\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 26\n },\n \"id\": 304,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"temperature\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"celsius\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Critical*./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Max*./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 59\n },\n \"id\": 158,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_hwmon_temp_celsius{instance=\\\"$node\\\",job=\\\"$job\\\"} * on(chip) group_left(chip_name) node_hwmon_chip_names{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ chip_name }} {{ sensor }} temp\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_hwmon_temp_crit_alarm_celsius{instance=\\\"$node\\\",job=\\\"$job\\\"} * on(chip) group_left(chip_name) node_hwmon_chip_names{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": true,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ chip_name }} {{ sensor }} Critical Alarm\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_hwmon_temp_crit_celsius{instance=\\\"$node\\\",job=\\\"$job\\\"} * on(chip) group_left(chip_name) node_hwmon_chip_names{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ chip_name }} {{ sensor }} Critical\",\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_hwmon_temp_crit_hyst_celsius{instance=\\\"$node\\\",job=\\\"$job\\\"} * on(chip) group_left(chip_name) node_hwmon_chip_names{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": true,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ chip_name }} {{ sensor }} Critical Historical\",\n \"refId\": \"D\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_hwmon_temp_max_celsius{instance=\\\"$node\\\",job=\\\"$job\\\"} * on(chip) group_left(chip_name) node_hwmon_chip_names{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": true,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ chip_name }} {{ sensor }} Max\",\n \"refId\": \"E\",\n \"step\": 240\n }\n ],\n \"title\": \"Hardware temperature monitor\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Max*./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 59\n },\n \"id\": 300,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_cooling_device_cur_state{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Current {{ name }} in {{ type }}\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_cooling_device_max_state{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Max {{ name }} in {{ type }}\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Throttle cooling device\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 69\n },\n \"id\": 302,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_power_supply_online{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ power_supply }} online\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Power supply\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Hardware Misc\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 27\n },\n \"id\": 296,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 46\n },\n \"id\": 297,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_systemd_socket_accepted_connections_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ name }} Connections\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Systemd Sockets\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Failed\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F2495C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Inactive\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FF9830\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Active\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#73BF69\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Deactivating\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FFCB7D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"Activating\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#C8F2C2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 46\n },\n \"id\": 298,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_systemd_units{instance=\\\"$node\\\",job=\\\"$job\\\",state=\\\"activating\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Activating\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_systemd_units{instance=\\\"$node\\\",job=\\\"$job\\\",state=\\\"active\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Active\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_systemd_units{instance=\\\"$node\\\",job=\\\"$job\\\",state=\\\"deactivating\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Deactivating\",\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_systemd_units{instance=\\\"$node\\\",job=\\\"$job\\\",state=\\\"failed\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Failed\",\n \"refId\": \"D\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_systemd_units{instance=\\\"$node\\\",job=\\\"$job\\\",state=\\\"inactive\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Inactive\",\n \"refId\": \"E\",\n \"step\": 240\n }\n ],\n \"title\": \"Systemd Units State\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Systemd\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 28\n },\n \"id\": 270,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"The number (after merges) of I/O requests completed per second for the device\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"IO read (-) / write (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"iops\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Read.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda2_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BA43A9\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda3_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F4D598\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#962D82\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#9AC48A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#65C5DB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9934E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCEACA\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9E2D2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 47\n },\n \"id\": 9,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_reads_completed_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"{{device}} - Reads completed\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_writes_completed_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Writes completed\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Disk IOps Completed\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"The number of bytes read from or written to the device per second\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes read (-) / write (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"Bps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Read.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda2_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BA43A9\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda3_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F4D598\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#962D82\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#9AC48A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#65C5DB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9934E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCEACA\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9E2D2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 47\n },\n \"id\": 33,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_read_bytes_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"{{device}} - Read bytes\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_written_bytes_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Written bytes\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Disk R/W Data\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"The average time for requests issued to the device to be served. This includes the time spent by the requests in queue and the time spent servicing them.\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"time. read (-) / write (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 30,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"s\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Read.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda2_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BA43A9\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda3_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F4D598\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#962D82\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#9AC48A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#65C5DB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9934E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCEACA\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9E2D2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 57\n },\n \"id\": 37,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_read_time_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval]) / irate(node_disk_reads_completed_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"{{device}} - Read wait time avg\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_write_time_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval]) / irate(node_disk_writes_completed_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Write wait time avg\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Disk Average Wait Time\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"The average queue length of the requests that were issued to the device\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"aqu-sz\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"none\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda2_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BA43A9\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda3_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F4D598\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#962D82\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#9AC48A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#65C5DB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9934E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCEACA\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9E2D2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 57\n },\n \"id\": 35,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_io_time_weighted_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"interval\": \"\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"{{device}}\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Average Queue Size\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"The number of read and write requests merged per second that were queued to the device\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"I/Os\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"iops\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Read.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda2_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BA43A9\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda3_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F4D598\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#962D82\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#9AC48A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#65C5DB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9934E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCEACA\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9E2D2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 67\n },\n \"id\": 133,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_reads_merged_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Read merged\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_writes_merged_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Write merged\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Disk R/W Merged\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Percentage of elapsed time during which I/O requests were issued to the device (bandwidth utilization for the device). Device saturation occurs when this value is close to 100% for devices serving requests serially. But for devices serving requests in parallel, such as RAID arrays and modern SSDs, this number does not reflect their performance limits.\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"%util\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 30,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"percentunit\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda2_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BA43A9\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda3_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F4D598\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#962D82\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#9AC48A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#65C5DB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9934E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCEACA\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9E2D2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 67\n },\n \"id\": 36,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_io_time_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"interval\": \"\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"{{device}} - IO\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_discard_time_seconds_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"interval\": \"\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"{{device}} - discard\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Time Spent Doing I/Os\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"The number of outstanding requests at the instant the sample was taken. Incremented as requests are given to appropriate struct request_queue and decremented as they finish.\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"Outstanding req.\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"none\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda2_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BA43A9\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda3_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F4D598\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#962D82\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#9AC48A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#65C5DB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9934E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCEACA\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9E2D2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 77\n },\n \"id\": 34,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_disk_io_now{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"interval\": \"\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"{{device}} - IO now\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Instantaneous Queue Size\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"IOs\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"iops\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EAB839\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#6ED0E0\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EF843C\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#584477\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda2_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BA43A9\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sda3_.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F4D598\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#0A50A1\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#BF1B00\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdb3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0752D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#962D82\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#614D93\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdc3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#9AC48A\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#65C5DB\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9934E\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#EA6460\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde1.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E0F9D7\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sdd2.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#FCEACA\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*sde3.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F9E2D2\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 77\n },\n \"id\": 301,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_discards_completed_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"interval\": \"\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"{{device}} - Discards completed\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_disk_discards_merged_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Discards merged\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Disk IOps Discards completed / merged\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Storage Disk\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 29\n },\n \"id\": 271,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 62\n },\n \"id\": 43,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filesystem_avail_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{mountpoint}} - Available\",\n \"metric\": \"\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filesystem_free_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'}\",\n \"format\": \"time_series\",\n \"hide\": true,\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{mountpoint}} - Free\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filesystem_size_bytes{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'}\",\n \"format\": \"time_series\",\n \"hide\": true,\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{mountpoint}} - Size\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"Filesystem space available\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"file nodes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 62\n },\n \"id\": 41,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filesystem_files_free{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{mountpoint}} - Free file nodes\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"File Nodes Free\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"files\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 72\n },\n \"id\": 28,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"single\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filefd_maximum{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 4,\n \"legendFormat\": \"Max open files\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filefd_allocated{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Open files\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"File Descriptor\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"file Nodes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 72\n },\n \"id\": 219,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filesystem_files{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{mountpoint}} - File nodes total\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"File Nodes Size\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"max\": 1,\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"/ ReadOnly\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 82\n },\n \"id\": 44,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filesystem_readonly{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs'}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{mountpoint}} - ReadOnly\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_filesystem_device_error{instance=\\\"$node\\\",job=\\\"$job\\\",device!~'rootfs',fstype!~'tmpfs'}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{mountpoint}} - Device error\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Filesystem in ReadOnly / Error\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Storage Filesystem\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 30\n },\n \"id\": 272,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"packets out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"pps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"receive_packets_eth0\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"receive_packets_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"transmit_packets_eth0\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#7EB26D\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"transmit_packets_lo\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#E24D42\",\n \"mode\": \"fixed\"\n }\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 47\n },\n \"id\": 60,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_receive_packets_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Receive\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_transmit_packets_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Transmit\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic by Packets\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"packets out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"pps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 47\n },\n \"id\": 142,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_receive_errs_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Receive errors\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_transmit_errs_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Transmit errors\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic Errors\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"packets out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"pps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 57\n },\n \"id\": 143,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_receive_drop_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Receive drop\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_transmit_drop_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Transmit drop\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic Drop\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"packets out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"pps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 57\n },\n \"id\": 141,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_receive_compressed_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Receive compressed\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_transmit_compressed_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Transmit compressed\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic Compressed\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"packets out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"pps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 67\n },\n \"id\": 146,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_receive_multicast_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Receive multicast\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic Multicast\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"packets out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"pps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 67\n },\n \"id\": 144,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_receive_fifo_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Receive fifo\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_transmit_fifo_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Transmit fifo\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic Fifo\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"packets out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"pps\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 77\n },\n \"id\": 145,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_receive_frame_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Receive frame\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic Frame\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 77\n },\n \"id\": 231,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_transmit_carrier_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Statistic transmit_carrier\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic Carrier\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Trans.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 87\n },\n \"id\": 232,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_network_transmit_colls_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{device}} - Transmit colls\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Network Traffic Colls\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"entries\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byName\",\n \"options\": \"NF conntrack limit\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 87\n },\n \"id\": 61,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_nf_conntrack_entries{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"NF conntrack entries\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_nf_conntrack_entries_limit{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"NF conntrack limit\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"NF Conntrack\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"Entries\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 97\n },\n \"id\": 230,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_arp_entries{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ device }} - ARP entries\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"ARP Entries\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"decimals\": 0,\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 97\n },\n \"id\": 288,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_network_mtu_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ device }} - Bytes\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"MTU\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"decimals\": 0,\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 107\n },\n \"id\": 280,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_network_speed_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ device }} - Speed\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Speed\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"packets\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"decimals\": 0,\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"none\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 107\n },\n \"id\": 289,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_network_transmit_queue_length{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{ device }} - Interface transmit queue length\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Queue Length\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"packetes drop (-) / process (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Dropped.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 117\n },\n \"id\": 290,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_softnet_processed_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CPU {{cpu}} - Processed\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_softnet_dropped_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CPU {{cpu}} - Dropped\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Softnet Packets\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 117\n },\n \"id\": 310,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_softnet_times_squeezed_total{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CPU {{cpu}} - Squeezed\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Softnet Out of Quota\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 127\n },\n \"id\": 309,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_network_up{operstate=\\\"up\\\",instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{interface}} - Operational state UP\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_network_carrier{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"instant\": false,\n \"legendFormat\": \"{{device}} - Physical link state\",\n \"refId\": \"B\"\n }\n ],\n \"title\": \"Network Operational Status\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Network Traffic\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 31\n },\n \"id\": 273,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 48\n },\n \"id\": 63,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_TCP_alloc{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"TCP_alloc - Allocated sockets\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_TCP_inuse{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"TCP_inuse - Tcp sockets currently in use\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_TCP_mem{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": true,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"TCP_mem - Used memory for tcp\",\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_TCP_orphan{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"TCP_orphan - Orphan sockets\",\n \"refId\": \"D\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_TCP_tw{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"TCP_tw - Sockets waiting close\",\n \"refId\": \"E\",\n \"step\": 240\n }\n ],\n \"title\": \"Sockstat TCP\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 48\n },\n \"id\": 124,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_UDPLITE_inuse{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"UDPLITE_inuse - Udplite sockets currently in use\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_UDP_inuse{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"UDP_inuse - Udp sockets currently in use\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_UDP_mem{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"UDP_mem - Used memory for udp\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"Sockstat UDP\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 58\n },\n \"id\": 125,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_FRAG_inuse{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"FRAG_inuse - Frag sockets currently in use\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_RAW_inuse{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"RAW_inuse - Raw sockets currently in use\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"Sockstat FRAG / RAW\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"bytes\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"bytes\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 58\n },\n \"id\": 220,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_TCP_mem_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"mem_bytes - TCP sockets in that state\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_UDP_mem_bytes{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"mem_bytes - UDP sockets in that state\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_FRAG_memory{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"FRAG_memory - Used memory for frag\",\n \"refId\": \"C\"\n }\n ],\n \"title\": \"Sockstat Memory Size\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"sockets\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 68\n },\n \"id\": 126,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_sockstat_sockets_used{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Sockets_used - Sockets currently in use\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Sockstat Used\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Network Sockstat\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 32\n },\n \"id\": 274,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"octets out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Out.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 33\n },\n \"id\": 221,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_IpExt_InOctets{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"InOctets - Received octets\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_IpExt_OutOctets{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"OutOctets - Sent octets\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Netstat IP In / Out Octets\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"datagrams\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 33\n },\n \"id\": 81,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true,\n \"width\": 300\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Ip_Forwarding{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"Forwarding - IP forwarding\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Netstat IP Forwarding\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"messages out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Out.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 43\n },\n \"id\": 115,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Icmp_InMsgs{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"InMsgs - Messages which the entity received. Note that this counter includes all those counted by icmpInErrors\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Icmp_OutMsgs{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"OutMsgs - Messages which this entity attempted to send. Note that this counter includes all those counted by icmpOutErrors\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"ICMP In / Out\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"messages out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Out.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 43\n },\n \"id\": 50,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Icmp_InErrors{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"InErrors - Messages which the entity received but determined as having ICMP-specific errors (bad ICMP checksums, bad length, etc.)\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"ICMP Errors\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"datagrams out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Out.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Snd.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 53\n },\n \"id\": 55,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Udp_InDatagrams{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"InDatagrams - Datagrams received\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Udp_OutDatagrams{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"OutDatagrams - Datagrams sent\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"UDP In / Out\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"datagrams\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 53\n },\n \"id\": 109,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Udp_InErrors{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"InErrors - UDP Datagrams that could not be delivered to an application\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Udp_NoPorts{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"NoPorts - UDP Datagrams received on a port with no listener\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_UdpLite_InErrors{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"interval\": \"\",\n \"legendFormat\": \"InErrors Lite - UDPLite Datagrams that could not be delivered to an application\",\n \"refId\": \"C\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Udp_RcvbufErrors{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"RcvbufErrors - UDP buffer errors received\",\n \"refId\": \"D\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Udp_SndbufErrors{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"SndbufErrors - UDP buffer errors send\",\n \"refId\": \"E\",\n \"step\": 240\n }\n ],\n \"title\": \"UDP Errors\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"datagrams out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Out.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n },\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Snd.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 63\n },\n \"id\": 299,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Tcp_InSegs{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"instant\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"InSegs - Segments received, including those received in error. This count includes segments received on currently established connections\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Tcp_OutSegs{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"OutSegs - Segments sent, including those on current connections but excluding those containing only retransmitted octets\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"TCP In / Out\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 63\n },\n \"id\": 104,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_TcpExt_ListenOverflows{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"ListenOverflows - Times the listen queue of a socket overflowed\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_TcpExt_ListenDrops{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"ListenDrops - SYNs to LISTEN sockets ignored\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_TcpExt_TCPSynRetrans{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"TCPSynRetrans - SYN-SYN/ACK retransmits to break down retransmissions in SYN, fast/timeout retransmits\",\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Tcp_RetransSegs{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"interval\": \"\",\n \"legendFormat\": \"RetransSegs - Segments retransmitted - that is, the number of TCP segments transmitted containing one or more previously transmitted octets\",\n \"refId\": \"D\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Tcp_InErrs{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"interval\": \"\",\n \"legendFormat\": \"InErrs - Segments received in error (e.g., bad TCP checksums)\",\n \"refId\": \"E\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Tcp_OutRsts{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"interval\": \"\",\n \"legendFormat\": \"OutRsts - Segments sent with RST flag\",\n \"refId\": \"F\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"irate(node_netstat_TcpExt_TCPRcvQDrop{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"hide\": false,\n \"interval\": \"\",\n \"legendFormat\": \"TCPRcvQDrop - Packets meant to be queued in rcv queue but dropped because socket rcvbuf limit hit\",\n \"range\": true,\n \"refId\": \"G\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"irate(node_netstat_TcpExt_TCPOFOQueue{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"hide\": false,\n \"interval\": \"\",\n \"legendFormat\": \"TCPOFOQueue - TCP layer receives an out of order packet and has enough memory to queue it\",\n \"range\": true,\n \"refId\": \"H\"\n }\n ],\n \"title\": \"TCP Errors\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"connections\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*MaxConn *./\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#890F02\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.fillOpacity\",\n \"value\": 0\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 73\n },\n \"id\": 85,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_netstat_Tcp_CurrEstab{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"CurrEstab - TCP connections for which the current state is either ESTABLISHED or CLOSE- WAIT\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_netstat_Tcp_MaxConn{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"MaxConn - Limit on the total number of TCP connections the entity can support (Dynamic is \\\"-1\\\")\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"TCP Connections\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter out (-) / in (+)\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*Sent.*/\"\n },\n \"properties\": [\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 73\n },\n \"id\": 91,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_TcpExt_SyncookiesFailed{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"SyncookiesFailed - Invalid SYN cookies received\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_TcpExt_SyncookiesRecv{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"SyncookiesRecv - SYN cookies received\",\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_TcpExt_SyncookiesSent{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"SyncookiesSent - SYN cookies sent\",\n \"refId\": \"C\",\n \"step\": 240\n }\n ],\n \"title\": \"TCP SynCookie\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"connections\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 83\n },\n \"id\": 82,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Tcp_ActiveOpens{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"ActiveOpens - TCP connections that have made a direct transition to the SYN-SENT state from the CLOSED state\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"irate(node_netstat_Tcp_PassiveOpens{instance=\\\"$node\\\",job=\\\"$job\\\"}[$__rate_interval])\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"PassiveOpens - TCP connections that have made a direct transition to the SYN-RCVD state from the LISTEN state\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"TCP Direct Transition\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"Enable with --collector.tcpstat argument on node-exporter\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"connections\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\",\n \"value\": null\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 83\n },\n \"id\": 320,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"node_tcp_connection_states{state=\\\"established\\\",instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"established - TCP sockets in established state\",\n \"range\": true,\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"node_tcp_connection_states{state=\\\"fin_wait2\\\",instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"fin_wait2 - TCP sockets in fin_wait2 state\",\n \"range\": true,\n \"refId\": \"B\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"node_tcp_connection_states{state=\\\"listen\\\",instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"listen - TCP sockets in listen state\",\n \"range\": true,\n \"refId\": \"C\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"editorMode\": \"code\",\n \"expr\": \"node_tcp_connection_states{state=\\\"time_wait\\\",instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"time_wait - TCP sockets in time_wait state\",\n \"range\": true,\n \"refId\": \"D\",\n \"step\": 240\n }\n ],\n \"title\": \"TCP Stat\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Network Netstat\",\n \"type\": \"row\"\n },\n {\n \"collapsed\": true,\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n \"y\": 33\n },\n \"id\": 279,\n \"panels\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"seconds\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"normal\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"s\"\n },\n \"overrides\": []\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 0,\n \"y\": 66\n },\n \"id\": 40,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_scrape_collector_duration_seconds{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{collector}} - Scrape duration\",\n \"refId\": \"A\",\n \"step\": 240\n }\n ],\n \"title\": \"Node Exporter Scrape Time\",\n \"type\": \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"description\": \"\",\n \"fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \"mode\": \"palette-classic\"\n },\n \"custom\": {\n \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n \"axisLabel\": \"counter\",\n \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n \"fillOpacity\": 20,\n \"gradientMode\": \"none\",\n \"hideFrom\": {\n \"legend\": false,\n \"tooltip\": false,\n \"viz\": false\n },\n \"lineInterpolation\": \"linear\",\n \"lineStyle\": {\n \"fill\": \"solid\"\n },\n \"lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n \"type\": \"linear\"\n },\n \"showPoints\": \"never\",\n \"spanNulls\": false,\n \"stacking\": {\n \"group\": \"A\",\n \"mode\": \"none\"\n },\n \"thresholdsStyle\": {\n \"mode\": \"off\"\n }\n },\n \"links\": [],\n \"mappings\": [],\n \"thresholds\": {\n \"mode\": \"absolute\",\n \"steps\": [\n {\n \"color\": \"green\"\n },\n {\n \"color\": \"red\",\n \"value\": 80\n }\n ]\n },\n \"unit\": \"short\"\n },\n \"overrides\": [\n {\n \"matcher\": {\n \"id\": \"byRegexp\",\n \"options\": \"/.*error.*/\"\n },\n \"properties\": [\n {\n \"id\": \"color\",\n \"value\": {\n \"fixedColor\": \"#F2495C\",\n \"mode\": \"fixed\"\n }\n },\n {\n \"id\": \"custom.transform\",\n \"value\": \"negative-Y\"\n }\n ]\n }\n ]\n },\n \"gridPos\": {\n \"h\": 10,\n \"w\": 12,\n \"x\": 12,\n \"y\": 66\n },\n \"id\": 157,\n \"links\": [],\n \"options\": {\n \"legend\": {\n \"calcs\": [\n \"mean\",\n \"lastNotNull\",\n \"max\",\n \"min\"\n ],\n \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \"showLegend\": true\n },\n \"tooltip\": {\n \"mode\": \"multi\",\n \"sort\": \"none\"\n }\n },\n \"pluginVersion\": \"9.2.0\",\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_scrape_collector_success{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{collector}} - Scrape success\",\n \"refId\": \"A\",\n \"step\": 240\n },\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"expr\": \"node_textfile_scrape_error{instance=\\\"$node\\\",job=\\\"$job\\\"}\",\n \"format\": \"time_series\",\n \"hide\": false,\n \"interval\": \"\",\n \"intervalFactor\": 1,\n \"legendFormat\": \"{{collector}} - Scrape textfile error (1 = true)\",\n \"refId\": \"B\",\n \"step\": 240\n }\n ],\n \"title\": \"Node Exporter Scrape\",\n \"type\": \"timeseries\"\n }\n ],\n \"targets\": [\n {\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"000000001\"\n },\n \"refId\": \"A\"\n }\n ],\n \"title\": \"Node Exporter\",\n \"type\": \"row\"\n }\n ],\n \"refresh\": \"1m\",\n \"revision\": 1,\n \"schemaVersion\": 38,\n \"style\": \"dark\",\n \"tags\": [\n \"linux\"\n ],\n \"templating\": {\n \"list\": [\n {\n \"current\": {\n \"selected\": false,\n \"text\": \"default\",\n \"value\": \"default\"\n },\n \"hide\": 0,\n \"includeAll\": false,\n \"label\": \"Datasource\",\n \"multi\": false,\n \"name\": \"datasource\",\n \"options\": [],\n \"query\": \"prometheus\",\n \"queryValue\": \"\",\n \"refresh\": 1,\n \"regex\": \"\",\n \"skipUrlSync\": false,\n \"type\": \"datasource\"\n },\n {\n \"current\": {},\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"definition\": \"\",\n \"hide\": 0,\n \"includeAll\": false,\n \"label\": \"Job\",\n \"multi\": false,\n \"name\": \"job\",\n \"options\": [],\n \"query\": {\n \"query\": \"label_values(node_uname_info, job)\",\n \"refId\": \"Prometheus-job-Variable-Query\"\n },\n \"refresh\": 1,\n \"regex\": \"\",\n \"skipUrlSync\": false,\n \"sort\": 1,\n \"tagValuesQuery\": \"\",\n \"tagsQuery\": \"\",\n \"type\": \"query\",\n \"useTags\": false\n },\n {\n \"current\": {},\n \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\": \"${datasource}\"\n },\n \"definition\": \"label_values(node_uname_info{job=\\\"$job\\\"}, instance)\",\n \"hide\": 0,\n \"includeAll\": false,\n \"label\": \"Host\",\n \"multi\": false,\n \"name\": \"node\",\n \"options\": [],\n \"query\": {\n \"query\": \"label_values(node_uname_info{job=\\\"$job\\\"}, instance)\",\n \"refId\": \"Prometheus-node-Variable-Query\"\n },\n \"refresh\": 1,\n \"regex\": \"\",\n \"skipUrlSync\": false,\n \"sort\": 1,\n \"tagValuesQuery\": \"\",\n \"tagsQuery\": \"\",\n \"type\": \"query\",\n \"useTags\": false\n },\n {\n \"current\": {\n \"selected\": false,\n \"text\": \"[a-z]+|nvme[0-9]+n[0-9]+|mmcblk[0-9]+\",\n \"value\": \"[a-z]+|nvme[0-9]+n[0-9]+|mmcblk[0-9]+\"\n },\n \"hide\": 2,\n \"includeAll\": false,\n \"multi\": false,\n \"name\": \"diskdevices\",\n \"options\": [\n {\n \"selected\": true,\n \"text\": \"[a-z]+|nvme[0-9]+n[0-9]+|mmcblk[0-9]+\",\n \"value\": \"[a-z]+|nvme[0-9]+n[0-9]+|mmcblk[0-9]+\"\n }\n ],\n \"query\": \"[a-z]+|nvme[0-9]+n[0-9]+|mmcblk[0-9]+\",\n \"skipUrlSync\": false,\n \"type\": \"custom\"\n }\n ]\n },\n \"time\": {\n \"from\": \"now-24h\",\n \"to\": \"now\"\n },\n \"timepicker\": {\n \"refresh_intervals\": [\n \"5s\",\n \"10s\",\n \"30s\",\n \"1m\",\n \"5m\",\n \"15m\",\n \"30m\",\n \"1h\",\n \"2h\",\n \"1d\"\n ],\n \"time_options\": [\n \"5m\",\n \"15m\",\n \"1h\",\n \"6h\",\n \"12h\",\n \"24h\",\n \"2d\",\n \"7d\",\n \"30d\"\n ]\n },\n \"timezone\": \"browser\",\n \"title\": \"Node Exporter Full\",\n \"uid\": \"rYdddlPWk\",\n \"version\": 92,\n \"weekStart\": \"\"\n}" }, { "path": "sysadmin-tools/grafana/configs/grafana/datasources/datasources.yaml", "content": "apiVersion: 1\ndatasources:\n - name: Prometheus\n type: prometheus\n url: http://fptn-prometheus:9090\n access: proxy\n" }, { "path": "sysadmin-tools/grafana/configs/nginx/nginx.conf.template", "content": "server {\n listen 80;\n location / {\n proxy_pass https://FPTN_HOST_PORT; # WILL REPLACE\n proxy_set_header Host $host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_ssl_verify off;\n }\n}\n" }, { "path": "sysadmin-tools/grafana/configs/prometheus/prometheus.yaml.template", "content": "global:\n scrape_interval: 15s\nscrape_configs:\n - job_name: 'fptn-server'\n scrape_interval: 30s\n metrics_path: '/metrics'\n params:\n host: ['FPTN_HOST']\n port: ['FPTN_PORT']\n key: ['PROMETHEUS_SECRET_ACCESS_KEY']\n static_configs:\n - targets: ['fptn-proxy-server:80']\n - job_name: 'node'\n scrape_interval: 30s\n static_configs:\n - targets: ['fptn-node-exporter:9100']\n" }, { "path": "sysadmin-tools/grafana/docker-compose.build.yml", "content": "volumes:\n fptn_grafana_data: {}\n fptn_prometheus_data: {}\nservices:\n fptn-grafana:\n image: grafana/grafana:11.2.0\n restart: unless-stopped\n ports:\n - ${GRAFANA_PORT}:3000\n volumes:\n - fptn_grafana_data:/var/lib/grafana\n - ./configs/grafana/dashboards:/etc/grafana/provisioning/dashboards\n - ./configs/grafana/datasources:/etc/grafana/provisioning/datasources\n\n fptn-prometheus:\n image: prom/prometheus:v2.54.1\n restart: unless-stopped\n environment:\n - PROMETHEUS_SECRET_ACCESS_KEY=${PROMETHEUS_SECRET_ACCESS_KEY}\n - FPTN_HOST=${FPTN_HOST}\n - FPTN_PORT=${FPTN_PORT}\n entrypoint:\n - sh\n - -c\n - |\n sed -e \"s|PROMETHEUS_SECRET_ACCESS_KEY|${PROMETHEUS_SECRET_ACCESS_KEY}|g\" \\\n -e \"s|FPTN_HOST|${FPTN_HOST}|g\" \\\n -e \"s|FPTN_PORT|${FPTN_PORT}|g\" \\\n /etc/prometheus/prometheus.yaml.template > /etc/prometheus/prometheus.yaml\n exec prometheus --config.file=/etc/prometheus/prometheus.yaml --storage.tsdb.retention.time=30d\n volumes:\n - fptn_prometheus_data:/prometheus\n - ./configs/prometheus/prometheus.yaml.template:/etc/prometheus/prometheus.yaml.template\n\n fptn-node-exporter:\n image: prom/node-exporter:v1.8.2\n restart: unless-stopped\n command: '--path.rootfs=/host'\n pid: host\n volumes:\n - /:/host:ro,rslave\n\n fptn-proxy-server:\n build:\n proxy-server\n container_name: fptn-proxy-server\n restart: unless-stopped\n command: /usr/bin/fptn-proxy --listen-port 80\n" }, { "path": "sysadmin-tools/grafana/docker-compose.yml", "content": "volumes:\n fptn_grafana_data: {}\n fptn_prometheus_data: {}\nservices:\n fptn-grafana:\n image: grafana/grafana:11.2.0\n restart: unless-stopped\n ports:\n - ${GRAFANA_PORT}:3000\n volumes:\n - fptn_grafana_data:/var/lib/grafana\n - ./configs/grafana/dashboards:/etc/grafana/provisioning/dashboards\n - ./configs/grafana/datasources:/etc/grafana/provisioning/datasources\n\n fptn-prometheus:\n image: prom/prometheus:v2.54.1\n restart: unless-stopped\n environment:\n - PROMETHEUS_SECRET_ACCESS_KEY=${PROMETHEUS_SECRET_ACCESS_KEY}\n - FPTN_HOST=${FPTN_HOST}\n - FPTN_PORT=${FPTN_PORT}\n entrypoint:\n - sh\n - -c\n - |\n sed -e \"s|PROMETHEUS_SECRET_ACCESS_KEY|${PROMETHEUS_SECRET_ACCESS_KEY}|g\" \\\n -e \"s|FPTN_HOST|${FPTN_HOST}|g\" \\\n -e \"s|FPTN_PORT|${FPTN_PORT}|g\" \\\n /etc/prometheus/prometheus.yaml.template > /etc/prometheus/prometheus.yaml\n exec prometheus --config.file=/etc/prometheus/prometheus.yaml --storage.tsdb.retention.time=30d\n volumes:\n - fptn_prometheus_data:/prometheus\n - ./configs/prometheus/prometheus.yaml.template:/etc/prometheus/prometheus.yaml.template\n\n fptn-node-exporter:\n image: prom/node-exporter:v1.8.2\n restart: unless-stopped\n command: '--path.rootfs=/host'\n pid: host\n volumes:\n - /:/host:ro,rslave\n\n fptn-proxy-server:\n image: fptnvpn/fptn-proxy-server:latest\n restart: unless-stopped\n command: /usr/bin/fptn-proxy --listen-port 80\n" }, { "path": "sysadmin-tools/grafana/proxy-server/.dockerignore", "content": "CMakeUserPresets.json\nlibs/\nbuild/\ncmake-build-debug/\n" }, { "path": "sysadmin-tools/grafana/proxy-server/.gitignore", "content": "libs/\ncmake-build-debug/\n.env\ndocker-compose-data/\nCMakeUserPresets.json\nbuild/\n" }, { "path": "sysadmin-tools/grafana/proxy-server/CMakeLists.txt", "content": "cmake_minimum_required(VERSION 3.22.1)\nproject(\"fptn-proxy\")\n\nadd_executable(${CMAKE_PROJECT_NAME} src/proxy-server.cpp)\n\nset_target_properties(\n ${CMAKE_PROJECT_NAME}\n PROPERTIES\n CXX_STANDARD 20\n CXX_STANDARD_REQUIRED ON\n CXX_EXTENSIONS OFF\n)\n\n# Rest of your CMake code...\nadd_definitions(-DBOOST_PROCESS_V2_HEADER_ONLY)\nadd_definitions(-DBOOST_ASIO_HAS_CO_AWAIT)\nadd_definitions(-DBOOST_ASIO_HAS_CO_SPAWN)\nadd_definitions(-DBOOST_ASIO_HAS_COROUTINES)\n\nset(CMAKE_INCLUDE_CURRENT_DIR ON)\n\nif (CMAKE_CXX_COMPILER_ID STREQUAL \"Clang\")\n set(CMAKE_CXX_FLAGS \"${CMAKE_CXX_FLAGS} -Wno-unused-command-line-argument\")\nendif ()\n\nfind_package(fptn REQUIRED)\nfind_package(nlohmann_json REQUIRED)\nfind_package(fmt REQUIRED)\nfind_package(httplib REQUIRED)\nfind_package(argparse REQUIRED)\nfind_package(protobuf REQUIRED)\nfind_package(absl REQUIRED)\nfind_package(re2 REQUIRED)\nfind_package(spdlog REQUIRED)\nfind_package(OpenSSL REQUIRED)\n\nmessage(STATUS \"fptn_FOUND: ${fptn_FOUND}\")\nmessage(STATUS \"fptn_INCLUDE_DIRS: ${fptn_INCLUDE_DIRS}\")\nmessage(STATUS \"fptn_LIBRARIES: ${fptn_LIBRARIES}\")\n\n# disable pcap++\ntarget_compile_definitions(${CMAKE_PROJECT_NAME} PRIVATE\n FPTN_IP_ADDRESS_WITHOUT_PCAP\n)\n\ntarget_include_directories(${CMAKE_PROJECT_NAME} PRIVATE\n src/\n \"${CMAKE_CURRENT_SOURCE_DIR}/libs/fptn/src/\"\n \"${CMAKE_CURRENT_SOURCE_DIR}/libs/fptn/src/fptn-protocol-lib/\"\n)\ntarget_include_directories(${CMAKE_PROJECT_NAME} PRIVATE\n ${fptn_INCLUDE_DIRS}\n ${CMAKE_CURRENT_SOURCE_DIR}/src\n)\n\ntarget_link_libraries(${CMAKE_PROJECT_NAME} PRIVATE\n fptn::fptn\n argparse::argparse\n httplib::httplib\n nlohmann_json::nlohmann_json\n fmt::fmt\n protobuf::libprotobuf\n re2::re2\n spdlog::spdlog\n OpenSSL::SSL\n OpenSSL::Crypto\n pthread\n dl\n rt\n)\n\nif(APPLE)\n target_link_options(${CMAKE_PROJECT_NAME} PRIVATE\n -framework CoreFoundation\n -framework Security\n -framework SystemConfiguration\n )\nendif()\n" }, { "path": "sysadmin-tools/grafana/proxy-server/Dockerfile", "content": "# --- Stage 1: Building ---\nFROM ubuntu:24.04 AS build\n\nENV DEBIAN_FRONTEND=noninteractive\nENV TZ=Etc/UTC\n\nRUN apt-get update \\\n && apt-get upgrade -y \\\n && apt-get install -y cmake gcc g++ python3 python3-pip git \\\n && pip install conan==2.22.2 numpy --break-system-packages\n\nRUN conan profile detect --force\n\nRUN mkdir -p /code\nWORKDIR /code\n\nRUN git clone https://github.com/batchar2/fptn fptn-project \\\n && cp -rv fptn-project/.conan .conan \\\n && echo 2\n\nCOPY ./conanfile.py /code/\nRUN conan install . --output-folder=build --build=missing -s compiler.cppstd=20 --settings build_type=Release\n\nCOPY ./CMakeLists.txt /code/\nCOPY ./src/ /code/src/\n\nRUN cd build \\\n && cmake .. -DCMAKE_TOOLCHAIN_FILE=build/Release/generators/conan_toolchain.cmake -DCMAKE_BUILD_TYPE=Release \\\n && cmake --build . --config Release\n\n\n# --- Stage 2: Runtime image ---\nFROM ubuntu:24.04\n\nENV DEBIAN_FRONTEND=noninteractive\nENV TZ=Etc/UTC\n\nCOPY --from=build /code/build//fptn-proxy /usr/bin/\nRUN chmod +x /usr/bin/fptn-proxy\n" }, { "path": "sysadmin-tools/grafana/proxy-server/README.md", "content": "### proxy-server\n\nThis service acts as a proxy for forwarding requests to the API of the `fptn-server`.\n\nThe reason for this is that the `fptn-server` uses a custom TLS handshake, which this proxy handles correctly. \nIt also retrieves Prometheus metrics from the server and exposes them in a format that Prometheus can consume.\n\nThis service is built using Docker. \nCheck the [manual](../README.md) for instructions on how to build it.\n" }, { "path": "sysadmin-tools/grafana/proxy-server/conanfile.py", "content": "import os\nimport subprocess\nimport shutil\n\nfrom pathlib import Path\n\nfrom conan import ConanFile\nfrom conan.tools.cmake import CMakeToolchain, CMake, cmake_layout\nfrom conan.tools.files import copy\nfrom conan.tools.scm import Git\n\n\nclass FptnProxy(ConanFile):\n name = \"fptn-lib\"\n version = \"0.0.0\"\n settings = (\n \"os\",\n \"arch\",\n \"compiler\",\n \"build_type\",\n )\n requires = (\n \"argparse/3.2\",\n \"cpp-httplib/0.30.0\",\n \"fmt/12.1.0\",\n \"nlohmann_json/3.12.0\",\n )\n generators = (\"CMakeDeps\",)\n default_options = {\n \"*:fPIC\": True,\n \"*:shared\": False,\n \"fptn/*:build_only_fptn_lib\": True,\n \"fptn/*:with_gui_client\": False,\n }\n\n def requirements(self):\n self._register_local_recipe(\"fptn\", \"fptn\", \"0.0.0\")\n\n def layout(self):\n cmake_layout(self)\n\n def generate(self):\n tc = CMakeToolchain(self)\n if \"fptn\" in self.dependencies:\n fptn_dep = self.dependencies[\"fptn\"]\n tc.variables[\"FPTN_INCLUDE_DIR\"] = fptn_dep.cpp_info.includedirs[0] if fptn_dep.cpp_info.includedirs else \"\"\n tc.variables[\"FPTN_LIBRARIES\"] = fptn_dep.cpp_info.libs[0] if fptn_dep.cpp_info.libs else \"fptn\"\n if fptn_dep.cpp_info.libdirs:\n tc.variables[\"FPTN_LIBRARY_DIR\"] = fptn_dep.cpp_info.libdirs[0]\n tc.generate()\n\n def build(self):\n cmake = CMake(self)\n cmake.configure()\n cmake.build()\n\n def config_options(self):\n pass\n\n def _clone_fptn(self):\n fptn_path = Path(__file__).parent / \"libs\" / \"fptn\"\n if fptn_path.exists():\n shutil.rmtree(fptn_path)\n\n self.output.info(\"Cloning fptn repository...\")\n git = Git(self)\n git.clone(url=\"https://github.com/batchar2/fptn.git\", target=fptn_path.as_posix())\n\n def _register_local_recipe(self, recipe, name, version, override=False, force=False):\n self._clone_fptn()\n script_dir = os.path.dirname(os.path.abspath(__file__))\n recipe_rel_path = os.path.join(script_dir, \"libs\", \"fptn\")\n\n if os.path.exists(recipe_rel_path):\n self.output.info(f\"Exporting local recipe: {recipe_rel_path}\")\n subprocess.run(\n [\n \"conan\",\n \"export\",\n recipe_rel_path,\n f\"--name={name}\",\n f\"--version={version}\",\n \"--user=local\",\n \"--channel=local\",\n ],\n check=True,\n cwd=script_dir,\n )\n self.requires(f\"{name}/{version}@local/local\", override=override, force=force)\n else:\n self.output.warning(f\"Recipe path not found: {recipe_rel_path}\")\n" }, { "path": "sysadmin-tools/grafana/proxy-server/src/proxy-server.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#define CPPHTTPLIB_OPENSSL_SUPPORT\n#define CPPHTTPLIB_OPENSSL_SUPPORT\n\n#include // NOLINT(build/include_order)\n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\nvoid run_server(const int port) {\n httplib::Server server;\n server.Get(\"/metrics\", [](const httplib::Request& req, httplib::Response& res) {\n const std::string host = req.get_param_value(\"host\");\n const std::string port_str = req.get_param_value(\"port\");\n const std::string key = req.get_param_value(\"key\");\n\n if (host.empty() || port_str.empty() || key.empty()) {\n res.status = 400;\n res.body = \"Missing required parameters: host, port, key\";\n return;\n }\n int port = 443;\n try {\n port = std::stoi(port_str);\n } catch (...) {\n res.status = 400;\n res.body = \"Invalid port number\";\n return;\n }\n\n try {\n const std::string target_url = \"/api/v1/metrics/\" + key;\n std::cout << \"Proxying to: \" << \"https://\" << host + \":\" << port_str\n << target_url << std::endl;\n\n fptn::protocol::https::ApiClient client(\n host, port, fptn::protocol::https::CensorshipStrategy::kSni);\n auto response = client.Get(target_url);\n res.status = response.code;\n res.body = response.body;\n } catch (const std::exception& e) {\n res.status = 500;\n res.body = std::string(\"Proxy error: \") + e.what();\n }\n });\n server.listen(\"0.0.0.0\", port);\n}\n\nint main(int argc, char* argv[]) {\n // Proxy server for forwarding requests to external hosts\n // Request format: http://localhost:8080/?host=&port=&key=\n // Example: http://localhost:8080/?host=192.168.1.100&port=443&key=abc123\n argparse::ArgumentParser args(\"http-proxy\", \"1.0.1\");\n args.add_argument(\"--listen-port\")\n .help(\"Port to listen on (default: 8080)\")\n .default_value(8080)\n .scan<'i', int>();\n try {\n args.parse_args(argc, argv);\n const auto listen_port = args.get(\"--listen-port\");\n run_server(listen_port);\n } catch (const std::exception& err) {\n std::cerr << \"Error: \" << err.what() << std::endl;\n std::cerr << args;\n return EXIT_FAILURE;\n }\n return EXIT_SUCCESS;\n}\n" }, { "path": "sysadmin-tools/telegram-bot/.gitignore", "content": "logs/\nconfigs/users.list\nconfigs/servers.json\nconfigs/premium_servers.json\nconfigs/servers_censored_zone.json\n\n# Byte-compiled / optimized / DLL files\n__pycache__/\n*.py[cod]\n*$py.class\n\n# C extensions\n*.so\n\n# Distribution / packaging\n.Python\nbuild/\ndevelop-eggs/\ndist/\ndownloads/\neggs/\n.eggs/\nlib/\nlib64/\nparts/\nsdist/\nvar/\nwheels/\nshare/python-wheels/\n*.egg-info/\n.installed.cfg\n*.egg\nMANIFEST\n\n# PyInstaller\n# Usually these files are written by a python script from a template\n# before PyInstaller builds the exe, so as to inject date/other infos into it.\n*.manifest\n*.spec\n\n# Installer logs\npip-log.txt\npip-delete-this-directory.txt\n\n# Unit test / coverage reports\nhtmlcov/\n.tox/\n.nox/\n.coverage\n.coverage.*\n.cache\nnosetests.xml\ncoverage.xml\n*.cover\n*.py,cover\n.hypothesis/\n.pytest_cache/\ncover/\n\n# Translations\n*.mo\n*.pot\n\n# Django stuff:\n*.log\nlocal_settings.py\ndb.sqlite3\ndb.sqlite3-journal\n\n# Flask stuff:\ninstance/\n.webassets-cache\n\n# Scrapy stuff:\n.scrapy\n\n# Sphinx documentation\ndocs/_build/\n\n# PyBuilder\n.pybuilder/\ntarget/\n\n# Jupyter Notebook\n.ipynb_checkpoints\n\n# IPython\nprofile_default/\nipython_config.py\n\n# pyenv\n# For a library or package, you might want to ignore these files since the code is\n# intended to run in multiple environments; otherwise, check them in:\n# .python-version\n\n# pipenv\n# According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.\n# However, in case of collaboration, if having platform-specific dependencies or dependencies\n# having no cross-platform support, pipenv may install dependencies that don't work, or not\n# install all needed dependencies.\n#Pipfile.lock\n\n# poetry\n# Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.\n# This is especially recommended for binary packages to ensure reproducibility, and is more\n# commonly ignored for libraries.\n# https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control\n#poetry.lock\n\n# pdm\n# Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.\n#pdm.lock\n# pdm stores project-wide configurations in .pdm.toml, but it is recommended to not include it\n# in version control.\n# https://pdm.fming.dev/latest/usage/project/#working-with-version-control\n.pdm.toml\n.pdm-python\n.pdm-build/\n\n# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm\n__pypackages__/\n\n# Celery stuff\ncelerybeat-schedule\ncelerybeat.pid\n\n# SageMath parsed files\n*.sage.py\n\n# Environments\n.env\n.venv\nenv/\nvenv/\nENV/\nenv.bak/\nvenv.bak/\n\n# Spyder project settings\n.spyderproject\n.spyproject\n\n# Rope project settings\n.ropeproject\n\n# mkdocs documentation\n/site\n\n# mypy\n.mypy_cache/\n.dmypy.json\ndmypy.json\n\n# Pyre type checker\n.pyre/\n\n# pytype static type analyzer\n.pytype/\n\n# Cython debug symbols\ncython_debug/\n\n# PyCharm\n# JetBrains specific template is maintained in a separate JetBrains.gitignore that can\n# be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore\n# and can be added to the global gitignore or merged into this file. For a more nuclear\n# option (not recommended) you can uncomment the following to ignore the entire idea folder.\n#.idea/" }, { "path": "sysadmin-tools/telegram-bot/Dockerfile", "content": "FROM python:3.13-slim\n\nRUN mkdir -p /app/src\nWORKDIR /app\n\nCOPY ./src/requirements.txt /app/src/requirements.txt\nRUN pip install --no-cache-dir -r /app/src/requirements.txt\n\nCMD [\"python\", \"/app/src/bot.py\"]\n" }, { "path": "sysadmin-tools/telegram-bot/README.md", "content": "## Telegram Bot\n\nThis guide will help you build, configure, and run your Telegram bot using Docker.\n\n0. **Prerequisites**\n\nDocker and Docker Compose should be installed on your system. To install it on ubuntu use [this docs](https://docs.docker.com/engine/install/ubuntu/)\n\n1. **Clone the repository:**\n\nClone the repository to any location on your server:\n\n```bash\ngit clone https://github.com/batchar2/fptn.git\n```\n\n2. **Navigate to the Grafana configuration folder:**\n\n```bash\ncd sysadmin-tools/telegram-bot\n```\n\n3. **Build the Bot**\n\nTo build the Docker image for your Telegram bot, run the following command:\n\n```\ndocker compose build\n```\n\n\n4. **Create the Configuration File:**\n\nCopy the example environment file and rename it:\n\n```bash\ncp .env.demo .env\n```\n\n5. **Edit the .env File**:\n\nTo configure your bot, you'll need to edit the .env file. This file contains sensitive information required for the bot to function properly. Follow these steps to set it up:\n\n- Open the .env File:\n - Use a text editor to open the .env file. You can find this file in the root directory of your project.\n- Insert Your Bot's API Token:\n - Set `TELEGRAM_API_TOKEN` environment variable with your Telegram bot API token. This token is required for the bot to connect to Telegram's servers. You can obtain your API token from Telegram by using the [BotFather](https://t.me/BotFather) bot.\n- Set the Welcome Message (Optional):\n - Modify the `FPTN_WELCOME_MESSAGE` variable to customize the greeting message that your bot will send to users.\n- Set Maximum User Speed Limit:\n - Modify the `MAX_USER_SPEED_LIMIT` variable to define the maximum speed limit for users in megabits per second (Mbps). This setting controls the bandwidth cap applied to individual users. Adjust the value based on your requirements.\n- Configure Service Name:\n - Set `SERVICE_NAME` to your preferred service name (appears in logs and messages).\n- Enable Brotli Compression:\n - Set `ENABLE_BROTLI_COMPRESSION` to `true` for smaller tokens or `false` to disable.\n- Configure Configuration Folder Path:\n Set `FPTN_CONFIGS_FOLDER` to specify the directory where all configuration files are stored.\n - Default value: `./configs` (relative path to the project root)\n - Alternative: Use an absolute path like `/etc/fptn` to point to the folder where the FPTN server keeps user data\n - This folder will be mounted to `/etc/fptn` inside the Docker container\n - **All configuration files must be placed in this directory:**\n - `servers.json` - public servers list\n - `servers_censored_zone.json` - censored region servers\n - `users.list` - user database\n - `premium_servers.json` - premium servers (optional)\n\nExample `.env` configuration:\n\n```bash\n# Telegram bot API token\nTELEGRAM_API_TOKEN=your_actual_api_token_here\n\n# Welcome messages for the bot\nFPTN_WELCOME_MESSAGE_EN = \"⚡ Welcome to the FPTN bot! ⚡ \\n\nUse this bot to get a VPN access token or reset it. \\n\\n\n🌐_ You can download the client from the official project website _ [https://storage.googleapis.com/fptn.org/index.html](https://storage.googleapis.com/fptn.org/index.html) \\n\\n\n👉_ To get your connection token, just type the command: _ /token \\n\n\"\n\nFPTN_WELCOME_MESSAGE_RU = \"⚡ Добро пожаловать в бот FPTN! ⚡ \\n\nЭтот бот позволяет получить токен доступа к VPN или сбросить его. \\n\\n\n🌐_ Клиент можно скачать с официального сайта проекта _ [https://storage.googleapis.com/fptn.org/index.html](https://storage.googleapis.com/fptn.org/index.html) \\n\\n\n👉_ Чтобы получить токен для подключения, просто введите команду: _ /token \\n\n\"\n\n# Enable Brotli compression for smaller tokens\nENABLE_BROTLI_COMPRESSION=true\n\n# Maximum speed limit for new users in Mbps.\nMAX_USER_SPEED_LIMIT=20\n\n# name of service\nSERVICE_NAME=FPTN.ONLINE\n\n\n# Path to the FPTN configuration folder on the host machine\n# This folder will be mounted to /etc/fptn inside the container\n# Recommended: ./configs (relative path) or /etc/fptn (absolute path)\n# Create this folder and place all config files here:\n# - servers.json\n# - servers_censored_zone.json\n# - users.list\n# - premium_servers.json\nFPTN_CONFIGS_FOLDER=./configs\n\n```\n\n6. **Initialize Configuration Folder**\n\n Important: Before running the bot, you must set up the configuration folder and populate it with necessary files.\n\n```bash\n# Create the configuration folder (matches FPTN_CONFIGS_FOLDER in .env)\ncd ./configs\n\n# Copy demo server configurations to the config folder\ncp servers.json.demo servers.json\ncp premium_servers.json.demo premium_servers.json\ncp servers_censored_zone.json.demo servers_censored_zone.json\n\n# Create empty required files\ntouch ./configs/users.list\ntouch ./configs/premium_servers.json\n\n# Verify the folder structure\nls -la ./configs/\n```\n\nExpected folder structure after setup:\n\n```bash\ntelegram-bot/\n├── docker-compose.yml\n├── .env\n├── Dockerfile\n├── logs/\n└── configs/ # ← ALL CONFIGURATION FILES HERE\n ├── servers.json # Public servers list\n ├── servers_censored_zone.json # Censored region servers\n ├── premium_servers.json # Premium servers list\n └── users.list # User database\n```\n\n\n7. **🟢 Configure Public Servers**:\n\nTo set up your server list, follow these steps:\n\nStart by copying the demo server list:\n\n```bash\ncp servers.json.demo server.json\n```\n\nThen open `servers.json` in any text editor and replace the example entries with your actual server information:\n\n- name: A label for your server (any value).\n- host: The public IP address or hostname of your server.\n- port: The public port your VPN server listens on.\n- md5_fingerprint: The MD5 fingerprint of your server's TLS certificate.\n\nTo get the fingerprint, run this command on the server:\n\n```bash\nopenssl x509 -noout -fingerprint -md5 -in /etc/fptn/server.crt | cut -d'=' -f2 | tr -d ':' | tr 'A-F' 'a-f'\n```\n\nCopy the value and paste it into the md5_fingerprint field.\n\n8. **🔴 Configure Servers for Censored Regions**:\n\nCopy the demo configuration:\n\n```bash\ncp servers_censored_zone.json.demo servers_censored_zone.json\n```\n\nThen open `servers_censored_zone.json` and edit it the same way as `servers.json`, using server details intended for restricted or high-surveillance regions.\n\n9. **⚡ Configure Premium Servers**:\n\n\n- Premium servers have the same structure as regular servers\n\n- These servers are only accessible to premium users\n\n- Can be used for higher speeds, special locations, or better performance\n\n\n10. **Premium User Identification in `users.list` File**\n\nPremium users are identified by a special flag in the users.list file. Here's how it works:\n\nFile Format. Each line in users.list follows this format:\n\n```bash\nusername password_hash speed_limit premium_flag\n...\nuser00001 213098467123094612309846 100 1\nuser00002 321o32908237249384233232 100 0\n```\n\nPremium Flag Values:\n- 0 = Regular user (not premium)\n- 1 = Premium user\n\n\n10. **Run the Bot**\n\nAfter setting up the environment file, start the bot with:\n\n```bash\ndocker compose build\ndocker compose up -d\n```\n\nThis command will start the bot in detached mode, allowing it to run in the background.\n\n11. **Stop the Bot**\n\nTo stop the bot, use:\n\n```bash\ndocker compose down\n```\n\nThis will stop and remove the running containers associated with your bot.\n\n" }, { "path": "sysadmin-tools/telegram-bot/configs/premium_servers.json.demo", "content": "[\n {\n \"name\": \"[Premium] Server 1\",\n \"host\": \"127.0.0.1\",\n \"md5_fingerprint\": \"\",\n \"port\": 443\n }\n]\n" }, { "path": "sysadmin-tools/telegram-bot/configs/servers.json.demo", "content": "[\n {\n \"name\": \"ServerName1\",\n \"host\": \"127.0.0.1\",\n \"md5_fingerprint\": \"\",\n \"port\": 443\n },\n {\n \"name\": \"ServerName2\",\n \"host\": \"127.0.0.1\",\n \"md5_fingerprint\": \"\",\n \"port\": 443\n }\n]\n" }, { "path": "sysadmin-tools/telegram-bot/configs/servers_censored_zone.json.demo", "content": "[\n]\n" }, { "path": "sysadmin-tools/telegram-bot/docker-compose.yml", "content": "services:\n telegram-bot:\n restart: unless-stopped\n build:\n context: ./\n dockerfile: Dockerfile\n environment:\n - TELEGRAM_API_TOKEN=${TELEGRAM_API_TOKEN}\n - FPTN_WELCOME_MESSAGE_EN=${FPTN_WELCOME_MESSAGE_EN}\n - FPTN_WELCOME_MESSAGE_RU=${FPTN_WELCOME_MESSAGE_RU}\n - MAX_USER_SPEED_LIMIT=${MAX_USER_SPEED_LIMIT}\n - SERVICE_NAME=${SERVICE_NAME}\n - ENABLE_BROTLI_COMPRESSION=${ENABLE_BROTLI_COMPRESSION}\n - FPTN_CONFIGS_FOLDER=${FPTN_CONFIGS_FOLDER}\n volumes:\n - ./src/:/app/src:ro\n - ./logs:/var/log/fptn_bot:rw\n - \"${FPTN_CONFIGS_FOLDER}:/etc/fptn:rw\"\n" }, { "path": "sysadmin-tools/telegram-bot/src/bot.py", "content": "import json\nimport os\nimport sys\nimport base64\nimport random\nimport string\nimport hashlib\nimport tempfile\nimport threading\nfrom pathlib import Path\n\nimport brotli\n\nfrom loguru import logger\nfrom telegram import Update, ReplyKeyboardMarkup, KeyboardButton, ReplyKeyboardRemove\nfrom telegram.constants import ParseMode\nfrom telegram.ext import (\n Application,\n CommandHandler,\n MessageHandler,\n filters,\n CallbackContext,\n)\n\n\nTELEGRAM_API_TOKEN = os.getenv(\"TELEGRAM_API_TOKEN\")\nFPTN_WELCOME_MESSAGE_EN = os.getenv(\"FPTN_WELCOME_MESSAGE_EN\", \"\")\nFPTN_WELCOME_MESSAGE_RU = os.getenv(\"FPTN_WELCOME_MESSAGE_RU\", \"\")\n\nMAX_USER_SPEED_LIMIT = int(os.getenv(\"MAX_USER_SPEED_LIMIT\"))\nSERVICE_NAME = os.getenv(\"SERVICE_NAME\")\nUSERS_FILE = Path(os.getenv(\"USERS_FILE\", \"/etc/fptn/users.list\"))\nSERVERS_LIST_FILE = os.getenv(\"SERVERS_LIST_FILE\", \"/etc/fptn/servers.json\")\nPREMIUM_SERVERS_FILE = os.getenv(\"PREMIUM_SERVERS_FILE\", \"/etc/fptn/premium_servers.json\")\nSERVERS_CENSORED_LIST_FILE = os.getenv(\"SERVERS_CENSORED_LIST_FILE\", \"/etc/fptn/servers_censored_zone.json\")\n\nENABLE_BROTLI_COMPRESSION = os.getenv(\"ENABLE_BROTLI_COMPRESSION\", \"false\").lower() == \"true\"\n\nif os.path.exists(PREMIUM_SERVERS_FILE):\n with open(PREMIUM_SERVERS_FILE, \"r\") as fp:\n PREMIUM_SERVERS = json.load(fp)\nelse:\n PREMIUM_SERVERS = []\n\nwith open(SERVERS_LIST_FILE, \"r\") as fp:\n SERVERS_LIST = json.load(fp)\n\nif os.path.exists(SERVERS_CENSORED_LIST_FILE):\n with open(SERVERS_CENSORED_LIST_FILE, \"r\") as fp:\n SERVERS_CENSORED_LIST = json.load(fp)\nelse:\n SERVERS_CENSORED_LIST = []\n\n\ndef init_logger():\n logger.remove() # Remove default logger\n log_file = Path(os.getenv(\"LOG_FILE\", \"/var/log/fptn_bot.log\"))\n log_file.parent.mkdir(parents=True, exist_ok=True)\n logger.add(\n str(log_file),\n level=\"INFO\",\n format=\"{time} - {level} - {message}\",\n rotation=\"1 MB\",\n )\n logger.add(sys.stdout, level=\"INFO\", format=\"{time} - {level} - {message}\")\n\n\nclass UserManager:\n def __init__(self, users_file: Path):\n self.users_file = users_file\n self.user_data_lock = threading.Lock()\n\n def _generate_password(self, length=8) -> str:\n return \"\".join(random.choice(string.ascii_letters) for _ in range(length))\n\n def _hash_password(self, password: str) -> str:\n sha256 = hashlib.sha256()\n sha256.update(password.encode(\"utf-8\"))\n return sha256.hexdigest()\n\n def load_users(self) -> dict:\n users = {}\n if self.users_file.exists():\n with self.users_file.open(\"r\") as file:\n for line in file:\n parts = line.strip().split()\n if len(parts) == 4:\n username, hashed_password, speed, is_premium = parts[0], parts[1], parts[2], parts[3] == \"1\"\n elif len(parts) == 3:\n username, hashed_password, speed, is_premium = parts[0], parts[1], parts[2], False\n users[username] = {\n \"password\": hashed_password,\n \"speed\": speed,\n \"is_premium\": is_premium,\n }\n return users\n\n def save_users(self, users: dict):\n self.users_file.parent.mkdir(parents=True, exist_ok=True)\n with self.users_file.open(\"w\") as file:\n for username, data in users.items():\n password, speed = data[\"password\"], data[\"speed\"]\n is_premium = \"1\" if data[\"is_premium\"] is True else \"0\"\n file.write(f\"{username} {password} {speed} {is_premium}\\n\")\n\n def is_premium_user(self, user_id: str) -> bool:\n username = f\"user{user_id}\"\n with self.user_data_lock:\n users = self.load_users()\n if username in users:\n return users[username].get(\"is_premium\", False)\n return False\n\n def register_user(self, user_id: str) -> (str, str):\n username = f\"user{user_id}\"\n with self.user_data_lock:\n users = self.load_users()\n if username in users:\n logger.info(f\"User {user_id} attempted to register but is already registered.\")\n return username, None\n else:\n password = self._generate_password()\n hashed_password = self._hash_password(password)\n users[username] = {\n \"password\": hashed_password,\n \"speed\": str(MAX_USER_SPEED_LIMIT),\n \"is_premium\": False,\n }\n self.save_users(users)\n logger.info(f\"User {user_id} registered with username: {username}\")\n return username, password\n\n def is_registered(self, user_id: str) -> bool:\n username = f\"user{user_id}\"\n with self.user_data_lock:\n users = self.load_users()\n return username in users\n return False\n\n def reset_password(self, user_id: str) -> (str, str):\n username = f\"user{user_id}\"\n with self.user_data_lock:\n users = self.load_users()\n if username in users:\n new_password = self._generate_password()\n hashed_password = self._hash_password(new_password)\n current_speed = users[username][\"speed\"]\n current_premium = users[username].get(\"is_premium\", False)\n users[username] = {\"password\": hashed_password, \"speed\": current_speed, \"is_premium\": current_premium}\n self.save_users(users)\n logger.info(f\"User {user_id} reset password. Premium: {current_premium}\")\n return username, new_password\n else:\n logger.info(f\"User {user_id} attempted to reset password but is not registered.\")\n return username, None\n\n\nuser_manager = UserManager(USERS_FILE)\n\n\nasync def start(update: Update, context: CallbackContext) -> None:\n MESSAGES = {\n \"en\": {\n \"welcome\": FPTN_WELCOME_MESSAGE_EN,\n \"token_button\": \"Get access token\",\n },\n \"ru\": {\n \"welcome\": FPTN_WELCOME_MESSAGE_RU,\n \"token_button\": \"Получить токен доступа\",\n },\n }\n try:\n language_code = update.message.from_user.language_code or \"en\"\n messages = MESSAGES.get(language_code, MESSAGES[\"en\"])\n await update.message.reply_text(\n messages[\"welcome\"],\n parse_mode=ParseMode.MARKDOWN,\n disable_web_page_preview=True,\n reply_markup=ReplyKeyboardRemove(),\n )\n logger.info(f\"User {update.message.from_user.id} started the bot.\")\n except Exception as e:\n logger.error(f\"Error: {e}\")\n\n\ndef generate_token(username: str, password: str, is_premium: bool) -> str:\n if is_premium is True:\n servers = PREMIUM_SERVERS + SERVERS_LIST\n else:\n servers = SERVERS_LIST\n data = {\n \"version\": 1,\n \"service_name\": SERVICE_NAME,\n \"username\": username,\n \"password\": password,\n \"servers\": servers,\n \"censored_zone_servers\": SERVERS_CENSORED_LIST,\n }\n return json.dumps(data, separators=(\",\", \":\"))\n\n\ndef generate_access_link(token: str) -> str:\n if ENABLE_BROTLI_COMPRESSION is True:\n compressed = brotli.compress(token.encode(\"utf-8\"), quality=11, lgwin=24, lgblock=24, mode=brotli.MODE_TEXT)\n return \"fptnb:\" + base64.b64encode(compressed).decode(\"utf-8\").replace(\"=\", \"\")\n return \"fptn:\" + base64.b64encode(token.encode(\"utf-8\")).decode().replace(\"=\", \"\")\n\n\nasync def get_access_token(update: Update, context: CallbackContext) -> None:\n MESSAGES = {\n \"en\": {\n \"status_registered\": \"🎉✨ You have successfully registered! 🎉\",\n \"status_reset\": \"🔑 Your token has been reset! 🔑\",\n \"info\": \"🌐 You can download the client from https://storage.googleapis.com/fptn.org/index.html\",\n \"click_to_copy\": \"📋💾 Tap the **token below** to copy it and paste it into the app! ⬇️\",\n \"support_info\": \"You can support our small hobby project on [Boosty](https://boosty.to/fptn) by donating to help cover server costs. ❤️❤️❤️\",\n \"support_benefits\": \"_Sponsors enjoy unlimited speed, access to more servers, and can optionally have their names featured in our VPN clients' credits. More details in our Telegram chat _ https://t.me/fptn\\_project \",\n },\n \"ru\": {\n \"status_registered\": \"🎉✨ Вы успешно зарегистрированы! 🎉\",\n \"status_reset\": \"🔑 Ваш токен был сброшен!🔑\",\n \"info\": \"🌐 Клиент можно скачать с https://storage.googleapis.com/fptn.org/index.html\",\n \"click_to_copy\": \"📋💾 Нажмите на **токен ниже**, чтобы скопировать и вставите его в приложение! ⬇️\",\n \"support_info\": \"Вы можете поддержать наш небольшой хобби-проект на [Boosty](https://boosty.to/fptn), сделав донат для оплаты серверов. ❤️❤️❤️\",\n \"support_benefits\": \"_Спонсорам мы убираем лимиты скорости, предоставляем доступ к большему числу серверов и, по желанию, отображаем их ники в списке благодарностей прямо в наших VPN-клиентах. Подробнее — в нашем Telegram-чате _ https://t.me/fptn\\_project \",\n },\n }\n user_id = update.message.from_user.id\n language_code = update.message.from_user.language_code or \"en\"\n messages = MESSAGES.get(language_code, MESSAGES[\"en\"])\n\n if user_manager.is_registered(user_id):\n username, password = user_manager.reset_password(user_id)\n status_message = messages[\"status_reset\"]\n else:\n username, password = user_manager.register_user(user_id)\n status_message = messages[\"status_registered\"]\n\n is_premium = user_manager.is_premium_user(user_id)\n token = generate_token(username, password, is_premium)\n fptn_link = generate_access_link(token)\n click_to_copy = messages[\"click_to_copy\"]\n info = messages[\"info\"]\n support_info = messages[\"support_info\"]\n support_benefits = messages[\"support_benefits\"]\n await update.message.reply_text(\n f\"{status_message}\\n\\n\" f\"{info}\\n\\n\" f\"{click_to_copy}\\n\\n\" f\"`{fptn_link}` \\n\\n{support_info} \\n{support_benefits}\",\n parse_mode=ParseMode.MARKDOWN,\n disable_web_page_preview=True,\n )\n\n\nasync def send_credentials_file(update: Update, context: CallbackContext, token: str) -> None:\n # Create a unique temporary file\n with tempfile.NamedTemporaryFile(delete=False, suffix=\".fptn\") as temp_file:\n temp_file_path = temp_file.name\n temp_file.write(token.encode(\"utf-8\"))\n try:\n await context.bot.send_document(\n chat_id=update.message.chat_id,\n document=open(temp_file_path, \"rb\"),\n filename=f\"{SERVICE_NAME}.fptn\",\n )\n logger.info(f\"Sent credentials file to user {update.message.from_user.id}.\")\n except Exception as e:\n logger.error(f\"Failed to send credentials file: {e}\")\n finally:\n if os.path.exists(temp_file_path):\n os.remove(temp_file_path)\n\n\ndef main() -> None:\n if not TELEGRAM_API_TOKEN:\n logger.error(\"API_TOKEN is not set. Please set the TELEGRAM_API_TOKEN environment variable.\")\n sys.exit(1)\n\n application = Application.builder().token(TELEGRAM_API_TOKEN).build()\n application.add_handler(CommandHandler(\"start\", start))\n application.add_handler(CommandHandler(\"token\", get_access_token))\n # depricated old function\n application.add_handler(CommandHandler(\"token_mac\", get_access_token))\n\n # UPDATE KEYBOARD (OLD VERSION)\n application.add_handler(MessageHandler(filters.TEXT & filters.Regex(\"Get access file\"), start))\n logger.info(\"Bot started and is polling for messages.\")\n application.run_polling()\n\n\nif __name__ == \"__main__\":\n init_logger()\n main()\n" }, { "path": "sysadmin-tools/telegram-bot/src/requirements.txt", "content": "anyio==4.4.0\nbrotli==1.2.0\ncertifi==2024.7.4\nh11==0.14.0\nhttpcore==1.0.5\nhttpx==0.27.2\nidna==3.8\nloguru==0.7.2\npython-telegram-bot==21.4\nsniffio==1.3.1\n" }, { "path": "tests/CMakeLists.txt", "content": "find_package(GTest REQUIRED)\n\nadd_subdirectory(common)\nadd_subdirectory(server)\nadd_subdirectory(fptnlib)\n\nadd_custom_target(\n run_tests\n COMMAND ${CMAKE_CTEST_COMMAND}\n DEPENDS tests_common common\n COMMENT \"Running all tests\"\n VERBATIM)\n" }, { "path": "tests/common/CMakeLists.txt", "content": "find_package(GTest REQUIRED)\nfind_package(Boost REQUIRED)\nfind_package(OpenSSL REQUIRED)\nfind_package(spdlog REQUIRED)\nfind_package(fmt REQUIRED)\nfind_package(PcapPlusPlus REQUIRED)\nfind_package(nlohmann_json REQUIRED)\nfind_package(jwt-cpp REQUIRED)\nfind_package(Boost REQUIRED COMPONENTS random filesystem)\n\nif(WIN32)\n set(TUNTAP_LIB Wintun rpcrt4)\n add_definitions(-D_WIN32_WINNT=0x0601)\nelse()\n set(TUNTAP_LIB tuntap++)\nendif()\n\nset(LIBS\n GTest::gtest\n GTest::gtest_main\n Boost::boost\n Boost::random\n Boost::filesystem\n OpenSSL::SSL\n OpenSSL::Crypto\n nlohmann_json::nlohmann_json\n jwt-cpp::jwt-cpp\n spdlog::spdlog\n fmt::fmt\n PcapPlusPlus::PcapPlusPlus\n fptn-protocol-lib_static\n ${TUNTAP_LIB})\n\n# --- Channel test ---\nadd_executable(ChannelTest data/ChannelTest.cpp)\ntarget_link_libraries(ChannelTest PRIVATE ${LIBS})\nadd_test(NAME ChannelTest COMMAND ChannelTest)\n\n# --- IPv4 Generator test ---\nadd_executable(IPv4GeneratorTest network/IPv4GeneratorTest.cpp)\ntarget_link_libraries(IPv4GeneratorTest PRIVATE ${LIBS})\nadd_test(NAME IPv4GeneratorTest COMMAND IPv4GeneratorTest)\n\n# --- IPv6 Generator test ---\nadd_executable(IPv6GeneratorTest network/IPv6GeneratorTest.cpp)\ntarget_link_libraries(IPv6GeneratorTest PRIVATE ${LIBS})\nadd_test(NAME IPv6GeneratorTest COMMAND IPv6GeneratorTest)\n\n# --- IPv6 Utils test ---\nadd_executable(IPv6UtilsTest network/IPv6UtilsTest.cpp)\ntarget_link_libraries(IPv6UtilsTest PRIVATE ${LIBS})\nadd_test(NAME IPv6UtilsTest COMMAND IPv6UtilsTest)\n\n# --- TUN Device test ---\nadd_executable(TunDeviceTest network/TunDeviceTest.cpp)\ntarget_link_libraries(TunDeviceTest PRIVATE ${LIBS})\nadd_test(NAME TunDeviceTest COMMAND TunDeviceTest)\n\n# --- Client Stop race condition test ---\nadd_executable(ClientStopRaceTest network/ClientStopRaceTest.cpp)\ntarget_link_libraries(ClientStopRaceTest PRIVATE GTest::gtest GTest::gtest_main)\nadd_test(NAME ClientStopRaceTest COMMAND ClientStopRaceTest)\n" }, { "path": "tests/common/data/ChannelTest.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"common/data/channel.h\"\n#include \"common/network/ip_packet.h\"\n\nTEST(ChannelTest, PushAndWaitForPacket) {\n fptn::common::data::Channel channel(10);\n\n fptn::common::network::IPPacketData packet_data;\n const char* test_data = \"packet-data\";\n packet_data.insert(\n packet_data.end(), test_data, test_data + strlen(test_data));\n\n auto packet =\n std::make_unique(std::move(packet_data),\n static_cast(1), // Cast to proper ClientID type\n pcpp::LINKTYPE_IPV4);\n\n channel.Push(std::move(packet));\n EXPECT_NE(channel.WaitForPacket(std::chrono::milliseconds(100)), nullptr);\n}\n\nTEST(ChannelTest, WaitForPacketTimeout) {\n fptn::common::data::Channel channel(10);\n EXPECT_EQ(channel.WaitForPacket(std::chrono::milliseconds(100)), nullptr);\n}\n" }, { "path": "tests/common/network/ClientStopRaceTest.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Pavel Shpilev\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n// Reproduces the use-after-free race condition in vpn::http::Client::Stop().\n//\n// The bug: Stop() called ws_.reset() (destroying the WebSocket) BEFORE\n// th_.join() (waiting for Run() to exit). The Run() thread was still\n// executing ws_->Run() on the destroyed object.\n//\n// The fix: join the thread first, then reset the shared_ptr.\n//\n// This test uses a mock to exercise the exact same pattern.\n\n#include \n#include \n#include \n#include \n#include \n\n#include // NOLINT(build/include_order)\n\nnamespace {\n\n// Simulates WebsocketClient: Run() blocks until Stop() is called.\nclass MockWebSocket {\n public:\n MockWebSocket() : stopped_(false), run_entered_(false) {}\n\n void Run() {\n run_entered_ = true;\n std::unique_lock lock(mutex_);\n cv_.wait(lock, [this]() { return stopped_.load(); });\n // Simulate cleanup work after stop signal\n std::this_thread::sleep_for(std::chrono::microseconds(100));\n // Access member after wakeup — crashes if object is destroyed\n run_exited_ = true;\n }\n\n bool Stop() {\n stopped_ = true;\n cv_.notify_all();\n return true;\n }\n\n bool RunEntered() const { return run_entered_; }\n bool RunExited() const { return run_exited_; }\n\n private:\n std::mutex mutex_;\n std::condition_variable cv_;\n std::atomic stopped_;\n std::atomic run_entered_;\n std::atomic run_exited_{false};\n};\n\n// Reproduces the original buggy Client::Stop() pattern.\n// With the bug: ws_.reset() before th_.join() → use-after-free.\n// With the fix: th_.join() before ws_.reset() → safe.\nclass MockClient {\n public:\n bool Start() {\n running_ = true;\n ws_ = std::make_shared();\n th_ = std::thread(&MockClient::RunLoop, this);\n return true;\n }\n\n // Fixed version: join before reset\n bool StopFixed() {\n if (!running_) {\n return false;\n }\n running_ = false;\n\n if (ws_) {\n ws_->Stop();\n }\n if (th_.joinable()) {\n th_.join();\n }\n ws_.reset();\n return true;\n }\n\n bool IsRunning() const { return running_; }\n\n bool WsRunExited() const { return ws_ && ws_->RunExited(); }\n\n private:\n void RunLoop() {\n while (running_) {\n if (ws_) {\n ws_->Run();\n }\n if (!running_) {\n break;\n }\n }\n }\n\n std::thread th_;\n std::mutex mutex_;\n std::atomic running_{false};\n std::shared_ptr ws_;\n};\n\n} // namespace\n\n// Verify Stop() completes cleanly without crash\nTEST(ClientStopRaceTest, StopWhileRunning) {\n MockClient client;\n ASSERT_TRUE(client.Start());\n\n // Let Run() enter the blocking call\n std::this_thread::sleep_for(std::chrono::milliseconds(10));\n\n // Stop should complete without crash or hang\n EXPECT_TRUE(client.StopFixed());\n EXPECT_FALSE(client.IsRunning());\n}\n\n// Rapid start/stop cycles stress the race window\nTEST(ClientStopRaceTest, RapidStartStopCycles) {\n constexpr int kCycles = 50;\n for (int i = 0; i < kCycles; ++i) {\n MockClient client;\n ASSERT_TRUE(client.Start());\n // Vary the timing to hit different race windows\n if (i % 3 == 0) {\n std::this_thread::sleep_for(std::chrono::milliseconds(1));\n }\n EXPECT_TRUE(client.StopFixed());\n }\n}\n\n// Stop immediately after Start (thread may not have entered Run yet)\nTEST(ClientStopRaceTest, ImmediateStop) {\n MockClient client;\n ASSERT_TRUE(client.Start());\n EXPECT_TRUE(client.StopFixed());\n EXPECT_FALSE(client.IsRunning());\n}\n\n// Verify Run() thread fully exits before ws_ is destroyed\nTEST(ClientStopRaceTest, ThreadExitsBeforeReset) {\n MockClient client;\n ASSERT_TRUE(client.Start());\n std::this_thread::sleep_for(std::chrono::milliseconds(10));\n\n // After StopFixed, the ws_ shared_ptr is reset.\n // The fact that we reach here without ASan/TSan errors confirms\n // the thread finished before the object was destroyed.\n EXPECT_TRUE(client.StopFixed());\n}\n" }, { "path": "tests/common/network/IPv4GeneratorTest.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include // NOLINT(build/include_order)\n\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ipv4_generator.h\"\n\nTEST(IPv4GeneratorTest, InitialAddress) {\n fptn::common::network::IPv4AddressGenerator generator(\n fptn::common::network::IPv4Address(\"192.168.1.0\"), 24);\n EXPECT_EQ(generator.NumAvailableAddresses(), 254);\n const auto address1 = generator.GetNextAddress();\n EXPECT_EQ(address1.ToString(), \"192.168.1.1\");\n\n const auto address2 = generator.GetNextAddress();\n EXPECT_EQ(address2.ToString(), \"192.168.1.2\");\n\n const auto address3 = generator.GetNextAddress();\n EXPECT_EQ(address3.ToString(), \"192.168.1.3\");\n}\n\nTEST(IPv4GeneratorTest, NumAvaliableAddresses) {\n fptn::common::network::IPv4AddressGenerator generator(\n fptn::common::network::IPv4Address(\"192.168.0.0\"), 24);\n EXPECT_EQ(generator.NumAvailableAddresses(), 254);\n\n for (int i = 1; i <= 254; i++) {\n const auto address = generator.GetNextAddress();\n EXPECT_EQ(address.ToString(), fmt::format(\"192.168.0.{}\", i));\n }\n\n { // the repeat test\n const auto address = generator.GetNextAddress();\n EXPECT_EQ(address.ToString(), \"192.168.0.1\");\n }\n}\n\nTEST(IPv4GeneratorTest, SmallDifficultNetsMask) {\n fptn::common::network::IPv4AddressGenerator generator(\n fptn::common::network::IPv4Address(\"192.168.0.0\"), 28);\n EXPECT_EQ(generator.NumAvailableAddresses(), 14);\n for (int i = 1; i <= 14; i++) {\n const auto address = generator.GetNextAddress();\n EXPECT_EQ(address.ToString(), fmt::format(\"192.168.0.{}\", i));\n }\n}\n\nTEST(IPGeneratorTest, BigDifficultNetsMask) {\n fptn::common::network::IPv4AddressGenerator generator(\n fptn::common::network::IPv4Address(\"192.168.0.0\"), 16);\n EXPECT_EQ(generator.NumAvailableAddresses(), 65534);\n\n std::uint32_t counter = 0;\n for (int i = 0; i <= 255; i++) {\n for (int j = 0; j <= 255; j++) {\n if ((i == 0 && j == 0) || (i == 255 && j == 255)) {\n continue; // network address\n }\n const auto address = generator.GetNextAddress();\n EXPECT_EQ(address.ToString(), fmt::format(\"192.168.{}.{}\", i, j));\n counter += 1;\n }\n }\n EXPECT_EQ(counter, 65534);\n}\n" }, { "path": "tests/common/network/IPv6GeneratorTest.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n\n#include // NOLINT(build/include_order)\n\n#include // NOLINT(build/include_order)\n\n#include \n\n#include \"common/network/ipv6_generator.h\"\n\nnamespace {\n// Helper: produce the canonical compressed IPv6 string for a given\n// full-hex address, so test expectations match inet_ntop / pcpp output.\nstd::string canonical(const std::string& full_hex) {\n return boost::asio::ip::make_address_v6(full_hex).to_string();\n}\n} // namespace\n\nTEST(IPv6GeneratorTest, InitialAddress) {\n fptn::common::network::IPv6AddressGenerator generator(\n fptn::common::network::IPv6Address(\n \"2001:0db8:0000:0000:0000:0000:0000:0000\"),\n 120);\n EXPECT_EQ(generator.NumAvailableAddresses(), 254);\n\n const auto address1 = generator.GetNextAddress();\n EXPECT_EQ(address1.ToString(),\n canonical(\"2001:0db8:0000:0000:0000:0000:0000:0001\"));\n\n const auto address2 = generator.GetNextAddress();\n EXPECT_EQ(address2.ToString(),\n canonical(\"2001:0db8:0000:0000:0000:0000:0000:0002\"));\n\n const auto address3 = generator.GetNextAddress();\n EXPECT_EQ(address3.ToString(),\n canonical(\"2001:0db8:0000:0000:0000:0000:0000:0003\"));\n}\n\nTEST(IPv6GeneratorTest, NumAvaliableAddresses) {\n fptn::common::network::IPv6AddressGenerator generator(\n fptn::common::network::IPv6Address(\n \"2001:0db8:0001:0000:0000:0000:0000:0000\"),\n 120);\n EXPECT_EQ(generator.NumAvailableAddresses(), 254);\n\n for (int i = 1; i <= 254; i++) {\n const auto address = generator.GetNextAddress();\n EXPECT_EQ(address.ToString(),\n canonical(\n fmt::format(\"2001:0db8:0001:0000:0000:0000:0000:{:04x}\", i)));\n }\n\n { // Repeat test\n const auto address = generator.GetNextAddress();\n EXPECT_EQ(address.ToString(),\n canonical(\"2001:0db8:0001:0000:0000:0000:0000:0001\"));\n }\n}\n\nTEST(IPv6GeneratorTest, SmallDifficultNetsMask) {\n fptn::common::network::IPv6AddressGenerator generator(\n fptn::common::network::IPv6Address(\n \"2001:0db8:0002:0000:0000:0000:0000:0000\"),\n 124);\n EXPECT_EQ(generator.NumAvailableAddresses(), 14);\n\n for (int i = 1; i <= 14; i++) {\n const auto address = generator.GetNextAddress();\n EXPECT_EQ(address.ToString(),\n canonical(\n fmt::format(\"2001:0db8:0002:0000:0000:0000:0000:{:04x}\", i)));\n }\n}\n\nTEST(IPv6GeneratorTest, BigDifficultNetsMask) {\n fptn::common::network::IPv6AddressGenerator generator(\n fptn::common::network::IPv6Address(\n \"2001:0db8:0003:0000:0000:0000:0000:0000\"),\n 112);\n EXPECT_EQ(generator.NumAvailableAddresses(), (1ULL << 16) - 2);\n\n std::uint32_t counter = 0;\n for (int i = 0; i <= 255; i++) {\n for (int j = 0; j <= 255; j++) {\n if ((i == 0 && j == 0) || (i == 255 && j == 255)) {\n continue; // Skip network and broadcast addresses\n }\n const auto address = generator.GetNextAddress();\n EXPECT_EQ(address.ToString(),\n canonical(fmt::format(\n \"2001:0db8:0003:0000:0000:0000:{:02x}{:02x}:{:02x}{:02x}\", 0, 0,\n i, j)));\n counter += 1;\n }\n }\n EXPECT_EQ(counter, (1ULL << 16) - 2);\n}\n" }, { "path": "tests/common/network/IPv6UtilsTest.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Pavel Shpilev\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n#include \n\n#include // NOLINT(build/include_order)\n\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ipv6_generator.h\"\n#include \"common/network/ipv6_utils.h\"\n\n// This test demonstrates that the IPv6 string representation from the\n// generator must match the format produced by pcpp::IPv6Address::toString(),\n// because the server NAT table uses these strings as map keys.\n// If the formats differ, the NAT lookup fails and IPv6 response packets\n// are silently dropped.\nTEST(IPv6UtilsTest, ToStringMatchesPcppFormat) {\n // Simulate what the IPv6 generator does: convert an address to uint128,\n // then back to string using ipv6::toString()\n const std::string original = \"fc00:1::2\";\n const auto boost_addr = boost::asio::ip::make_address_v6(original);\n const auto uint128_val = fptn::common::network::ipv6::toUInt128(boost_addr);\n const std::string generator_str =\n fptn::common::network::ipv6::toString(uint128_val);\n\n // Simulate what happens when a response packet arrives: pcpp extracts\n // the IPv6 address and we call toString() on it\n const pcpp::IPv6Address pcpp_addr(original);\n const std::string pcpp_str = pcpp_addr.toString();\n\n // These MUST match, otherwise the NAT table lookup will fail\n EXPECT_EQ(generator_str, pcpp_str)\n << \"IPv6 string format mismatch between generator ('\" << generator_str\n << \"') and pcpp ('\" << pcpp_str\n << \"'). This causes NAT table lookups to fail, \"\n \"dropping all IPv6 response packets.\";\n}\n\n// Test with the actual server default subnet\nTEST(IPv6UtilsTest, ServerDefaultSubnetMatchesPcpp) {\n // Server defaults from CMakeLists.txt:\n // FPTN_SERVER_DEFAULT_NET_ADDRESS_IP6=\"fc00:1::\"\n // Mask: /112\n fptn::common::network::IPv6AddressGenerator generator(\n fptn::common::network::IPv6Address(\"fc00:1::\"), 112);\n\n // Generate a few addresses and verify they match pcpp's format\n for (int i = 1; i <= 5; i++) {\n const auto generated = generator.GetNextAddress();\n const auto& gen_str = generated.ToString();\n\n // Round-trip through pcpp (simulates what happens on packet receive)\n const pcpp::IPv6Address pcpp_addr(gen_str);\n const std::string pcpp_str = pcpp_addr.toString();\n\n EXPECT_EQ(gen_str, pcpp_str)\n << \"Mismatch for generated address #\" << i << \": generator='\"\n << gen_str << \"' vs pcpp='\" << pcpp_str << \"'\";\n }\n}\n\n// Test with various address patterns that exercise zero-compression\nTEST(IPv6UtilsTest, ToStringFormatsMatchPcppForVariousAddresses) {\n const std::vector test_addresses = {\n \"::1\",\n \"fe80::1\",\n \"2001:db8::1\",\n \"fc00:1::2\",\n \"2001:db8:85a3::8a2e:370:7334\",\n \"ff02::1\",\n \"::\",\n };\n\n for (const auto& addr_str : test_addresses) {\n const auto boost_addr = boost::asio::ip::make_address_v6(addr_str);\n const auto uint128_val =\n fptn::common::network::ipv6::toUInt128(boost_addr);\n const std::string utils_str =\n fptn::common::network::ipv6::toString(uint128_val);\n\n const pcpp::IPv6Address pcpp_addr(addr_str);\n const std::string pcpp_str = pcpp_addr.toString();\n\n EXPECT_EQ(utils_str, pcpp_str)\n << \"Format mismatch for input '\" << addr_str << \"': utils='\"\n << utils_str << \"' vs pcpp='\" << pcpp_str << \"'\";\n }\n}\n" }, { "path": "tests/common/network/TunDeviceTest.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Pavel Shpilev\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_packet.h\"\n#include \"common/network/net_interface.h\"\n\n// ===== Minimal valid IP packet builders for testing =====\n\nnamespace {\n\n// Minimal valid IPv4 header (20 bytes): src=10.0.0.1, dst=10.0.0.2\nstd::vector MakeMinimalIPv4Packet() {\n return {\n 0x45,\n 0x00,\n 0x00,\n 0x14, // ver=4, IHL=5, total_len=20\n 0x00,\n 0x01,\n 0x00,\n 0x00, // id=1, flags=0, frag=0\n 0x40,\n 0x00,\n 0xf5,\n 0xc2, // TTL=64, proto=HOPOPT, checksum\n 0x0a,\n 0x00,\n 0x00,\n 0x01, // src: 10.0.0.1\n 0x0a,\n 0x00,\n 0x00,\n 0x02, // dst: 10.0.0.2\n };\n}\n\n// Minimal valid IPv6 header (40 bytes): src=fc00:1::1, dst=fc00:1::2\nstd::vector MakeMinimalIPv6Packet() {\n return {\n 0x60,\n 0x00,\n 0x00,\n 0x00, // ver=6, traffic class, flow label\n 0x00,\n 0x00,\n 0x3b,\n 0x40, // payload_len=0, next=NoNext(59), hop=64\n // src: fc00:1::1\n 0xfc,\n 0x00,\n 0x00,\n 0x01,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x01,\n // dst: fc00:1::2\n 0xfc,\n 0x00,\n 0x00,\n 0x01,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x02,\n };\n}\n\n} // namespace\n\n// ===== Mock TUN device with shared state for testing GenericTunInterface =====\n\nnamespace {\n\nstruct SharedMockState {\n std::mutex mutex;\n std::vector> written_packets;\n std::queue> read_queue;\n\n void RecordWrite(const void* data, int size) {\n std::scoped_lock lock(mutex);\n written_packets.emplace_back(static_cast(data),\n static_cast(data) + size);\n }\n\n int FeedRead(void* buffer, int max_size) {\n std::scoped_lock lock(mutex);\n if (read_queue.empty()) {\n return 0;\n }\n const auto& front = read_queue.front();\n const int sz = std::min(max_size, static_cast(front.size()));\n std::memcpy(buffer, front.data(), sz);\n read_queue.pop();\n return sz;\n }\n\n void InjectPacket(std::vector data) {\n std::scoped_lock lock(mutex);\n read_queue.push(std::move(data));\n }\n\n void Clear() {\n std::scoped_lock lock(mutex);\n written_packets.clear();\n while (!read_queue.empty()) {\n read_queue.pop();\n }\n }\n};\n\n// NOLINTNEXTLINE(cppcoreguidelines-avoid-non-const-global-variables)\nstd::shared_ptr g_mock_state;\n\nclass MockTunDevice {\n public:\n bool Open(const std::string& name) {\n name_ = name;\n return true;\n }\n // cppcheck-suppress functionStatic\n void Close() {} // NOLINT(readability-convert-member-functions-to-static)\n [[nodiscard]] const std::string& GetName() const { return name_; }\n // cppcheck-suppress functionStatic\n // NOLINTNEXTLINE(readability-convert-member-functions-to-static)\n bool ConfigureIPv4(const std::string& /*addr*/, int /*mask*/) { return true; }\n // cppcheck-suppress functionStatic\n // NOLINTNEXTLINE(readability-convert-member-functions-to-static)\n bool ConfigureIPv6(const std::string& /*addr*/, int /*mask*/) { return true; }\n // cppcheck-suppress functionStatic\n // NOLINTNEXTLINE(readability-convert-member-*)\n void SetNonBlocking(bool /*enabled*/) {}\n // cppcheck-suppress functionStatic\n // NOLINTNEXTLINE(readability-convert-member-*)\n void SetMTU(int /*mtu*/) {}\n // cppcheck-suppress functionStatic\n // NOLINTNEXTLINE(readability-convert-member-*)\n void BringUp() {}\n // cppcheck-suppress functionStatic\n // NOLINTNEXTLINE(readability-convert-member-*)\n void SetStopFlag(const std::atomic* /*running*/) {}\n\n // cppcheck-suppress functionStatic\n // NOLINTNEXTLINE(readability-convert-member-functions-to-static)\n int Read(void* buffer, int size) {\n return g_mock_state->FeedRead(buffer, size);\n }\n\n // cppcheck-suppress functionStatic\n // NOLINTNEXTLINE(readability-convert-member-functions-to-static)\n int Write(const void* data, int size) {\n g_mock_state->RecordWrite(data, size);\n return size;\n }\n\n private:\n std::string name_;\n};\n\n} // namespace\n\nnamespace fptn::common::network {\n\ntemplate \nclass GenericTunInterface;\n\n}\n\nusing MockTunInterface =\n fptn::common::network::GenericTunInterface;\n\nnamespace {\n\nclass GenericTunInterfaceTest : public ::testing::Test {\n protected:\n void SetUp() override { g_mock_state = std::make_shared(); }\n\n void TearDown() override {\n g_mock_state->Clear();\n g_mock_state.reset();\n }\n\n static MockTunInterface::Config MakeConfig() {\n return MockTunInterface::Config{\n .name = \"mock0\",\n .ipv4_addr = fptn::common::network::IPv4Address(\"10.0.0.1\"),\n .ipv4_netmask = 24,\n .ipv6_addr = fptn::common::network::IPv6Address(\"fc00:1::1\"),\n .ipv6_netmask = 112,\n };\n }\n};\n\n} // namespace\n\nTEST_F(GenericTunInterfaceTest, StartAndStop) {\n MockTunInterface iface(MakeConfig());\n ASSERT_TRUE(iface.Start());\n EXPECT_EQ(iface.Name(), \"mock0\");\n EXPECT_TRUE(iface.Stop());\n}\n\nTEST_F(GenericTunInterfaceTest, SendIPv4Packet) {\n MockTunInterface iface(MakeConfig());\n ASSERT_TRUE(iface.Start());\n\n auto pkt_data = MakeMinimalIPv4Packet();\n auto packet = fptn::common::network::IPPacket::Parse(pkt_data);\n ASSERT_NE(packet, nullptr);\n\n EXPECT_TRUE(iface.Send(std::move(packet)));\n\n std::this_thread::sleep_for(std::chrono::milliseconds(10));\n\n auto written = g_mock_state->written_packets;\n ASSERT_EQ(written.size(), 1U);\n EXPECT_EQ(written[0].size(), pkt_data.size());\n EXPECT_EQ(written[0], pkt_data);\n\n iface.Stop();\n}\n\nTEST_F(GenericTunInterfaceTest, SendIPv6Packet) {\n MockTunInterface iface(MakeConfig());\n ASSERT_TRUE(iface.Start());\n\n auto pkt_data = MakeMinimalIPv6Packet();\n auto packet = fptn::common::network::IPPacket::Parse(pkt_data);\n ASSERT_NE(packet, nullptr);\n\n EXPECT_TRUE(iface.Send(std::move(packet)));\n\n std::this_thread::sleep_for(std::chrono::milliseconds(10));\n\n auto written = g_mock_state->written_packets;\n ASSERT_EQ(written.size(), 1U);\n EXPECT_EQ(written[0].size(), pkt_data.size());\n EXPECT_EQ(written[0], pkt_data);\n\n iface.Stop();\n}\n\nTEST_F(GenericTunInterfaceTest, ReceiveIPv4Packet) {\n MockTunInterface iface(MakeConfig());\n\n std::mutex callback_mutex;\n std::vector> received;\n\n iface.SetRecvIPPacketCallback([&](fptn::common::network::IPPacketPtr packet) {\n if (packet) {\n std::scoped_lock lock(callback_mutex);\n const auto* raw = packet->GetRawPacket();\n const auto* data = static_cast(raw->getRawData());\n received.emplace_back(data, data + raw->getRawDataLen());\n }\n });\n\n ASSERT_TRUE(iface.Start());\n\n g_mock_state->InjectPacket(MakeMinimalIPv4Packet());\n\n for (int i = 0; i < 100; ++i) {\n std::this_thread::sleep_for(std::chrono::milliseconds(5));\n std::scoped_lock lock(callback_mutex);\n if (!received.empty()) {\n break;\n }\n }\n\n iface.Stop();\n\n std::scoped_lock lock(callback_mutex);\n ASSERT_FALSE(received.empty());\n ASSERT_EQ(received.size(), 1U);\n // cppcheck-suppress containerOutOfBounds\n EXPECT_EQ(received[0], MakeMinimalIPv4Packet());\n}\n\nTEST_F(GenericTunInterfaceTest, ReceiveIPv6Packet) {\n MockTunInterface iface(MakeConfig());\n\n std::mutex callback_mutex;\n std::vector> received;\n\n iface.SetRecvIPPacketCallback([&](fptn::common::network::IPPacketPtr packet) {\n if (packet) {\n std::scoped_lock lock(callback_mutex);\n const auto* raw = packet->GetRawPacket();\n const auto* data = static_cast(raw->getRawData());\n received.emplace_back(data, data + raw->getRawDataLen());\n }\n });\n\n ASSERT_TRUE(iface.Start());\n\n g_mock_state->InjectPacket(MakeMinimalIPv6Packet());\n\n for (int i = 0; i < 100; ++i) {\n std::this_thread::sleep_for(std::chrono::milliseconds(5));\n std::scoped_lock lock(callback_mutex);\n if (!received.empty()) {\n break;\n }\n }\n\n iface.Stop();\n\n std::scoped_lock lock(callback_mutex);\n ASSERT_FALSE(received.empty());\n ASSERT_EQ(received.size(), 1U);\n // cppcheck-suppress containerOutOfBounds\n EXPECT_EQ(received[0], MakeMinimalIPv6Packet());\n}\n\nTEST_F(GenericTunInterfaceTest, SendMultipleMixedPackets) {\n MockTunInterface iface(MakeConfig());\n ASSERT_TRUE(iface.Start());\n\n auto ipv4_data = MakeMinimalIPv4Packet();\n auto ipv6_data = MakeMinimalIPv6Packet();\n\n auto pkt4 = fptn::common::network::IPPacket::Parse(ipv4_data);\n auto pkt6 = fptn::common::network::IPPacket::Parse(ipv6_data);\n ASSERT_NE(pkt4, nullptr);\n ASSERT_NE(pkt6, nullptr);\n\n EXPECT_TRUE(iface.Send(std::move(pkt4)));\n EXPECT_TRUE(iface.Send(std::move(pkt6)));\n\n std::this_thread::sleep_for(std::chrono::milliseconds(10));\n\n auto written = g_mock_state->written_packets;\n ASSERT_EQ(written.size(), 2U);\n EXPECT_EQ(written[0], ipv4_data);\n EXPECT_EQ(written[1], ipv6_data);\n\n iface.Stop();\n}\n\nTEST_F(GenericTunInterfaceTest, DeviceNameUpdatedAfterStart) {\n MockTunInterface iface(MakeConfig());\n EXPECT_EQ(iface.Name(), \"mock0\");\n ASSERT_TRUE(iface.Start());\n EXPECT_EQ(iface.Name(), \"mock0\");\n iface.Stop();\n}\n\n#ifdef __APPLE__\n\n#include \n#include \n#include \n\n#include \"common/network/tun/darwin_tun_device.h\"\n\nclass DarwinAfHeaderTest : public ::testing::Test {\n protected:\n void SetUp() override {\n ASSERT_EQ(socketpair(AF_UNIX, SOCK_DGRAM, 0, fds_), 0);\n }\n\n void TearDown() override {\n close(fds_[0]);\n close(fds_[1]);\n }\n\n int fds_[2] = {-1, -1};\n};\n\nTEST_F(DarwinAfHeaderTest, WriteIPv4PrependsCorrectAfHeader) {\n fptn::common::network::DarwinTunDevice device;\n ASSERT_TRUE(device.OpenWithFd(fds_[0], \"test0\"));\n\n auto ipv4_pkt = MakeMinimalIPv4Packet();\n const int written = device.Write(ipv4_pkt.data(), ipv4_pkt.size());\n EXPECT_EQ(written, static_cast(ipv4_pkt.size()));\n\n std::uint8_t raw_buf[256] = {};\n const ssize_t n = recv(fds_[1], raw_buf, sizeof(raw_buf), 0);\n ASSERT_GT(n, 4);\n\n std::uint32_t af_header = 0;\n std::memcpy(&af_header, raw_buf, 4);\n EXPECT_EQ(af_header, htonl(AF_INET));\n\n const auto payload_size = static_cast(n) - 4;\n EXPECT_EQ(payload_size, ipv4_pkt.size());\n EXPECT_EQ(std::memcmp(raw_buf + 4, ipv4_pkt.data(), ipv4_pkt.size()), 0);\n\n device.OpenWithFd(-1, \"\");\n}\n\nTEST_F(DarwinAfHeaderTest, WriteIPv6PrependsCorrectAfHeader) {\n fptn::common::network::DarwinTunDevice device;\n ASSERT_TRUE(device.OpenWithFd(fds_[0], \"test0\"));\n\n auto ipv6_pkt = MakeMinimalIPv6Packet();\n const int written = device.Write(ipv6_pkt.data(), ipv6_pkt.size());\n EXPECT_EQ(written, static_cast(ipv6_pkt.size()));\n\n std::uint8_t raw_buf[256] = {};\n const ssize_t n = recv(fds_[1], raw_buf, sizeof(raw_buf), 0);\n ASSERT_GT(n, 4);\n\n std::uint32_t af_header = 0;\n std::memcpy(&af_header, raw_buf, 4);\n EXPECT_EQ(af_header, htonl(AF_INET6));\n\n const auto payload_size = static_cast(n) - 4;\n EXPECT_EQ(payload_size, ipv6_pkt.size());\n EXPECT_EQ(std::memcmp(raw_buf + 4, ipv6_pkt.data(), ipv6_pkt.size()), 0);\n\n device.OpenWithFd(-1, \"\");\n}\n\nTEST_F(DarwinAfHeaderTest, ReadStripsAfHeaderIPv4) {\n fptn::common::network::DarwinTunDevice device;\n ASSERT_TRUE(device.OpenWithFd(fds_[0], \"test0\"));\n device.SetNonBlocking(true);\n\n auto ipv4_pkt = MakeMinimalIPv4Packet();\n\n std::vector raw(4 + ipv4_pkt.size());\n std::uint32_t af = htonl(AF_INET);\n std::memcpy(raw.data(), &af, 4);\n std::memcpy(raw.data() + 4, ipv4_pkt.data(), ipv4_pkt.size());\n ASSERT_EQ(send(fds_[1], raw.data(), raw.size(), 0),\n static_cast(raw.size()));\n\n std::uint8_t read_buf[256] = {};\n const int bytes_read = device.Read(read_buf, sizeof(read_buf));\n EXPECT_EQ(bytes_read, static_cast(ipv4_pkt.size()));\n EXPECT_EQ(std::memcmp(read_buf, ipv4_pkt.data(), ipv4_pkt.size()), 0);\n\n device.OpenWithFd(-1, \"\");\n}\n\nTEST_F(DarwinAfHeaderTest, ReadStripsAfHeaderIPv6) {\n fptn::common::network::DarwinTunDevice device;\n ASSERT_TRUE(device.OpenWithFd(fds_[0], \"test0\"));\n device.SetNonBlocking(true);\n\n auto ipv6_pkt = MakeMinimalIPv6Packet();\n\n std::vector raw(4 + ipv6_pkt.size());\n std::uint32_t af = htonl(AF_INET6);\n std::memcpy(raw.data(), &af, 4);\n std::memcpy(raw.data() + 4, ipv6_pkt.data(), ipv6_pkt.size());\n ASSERT_EQ(send(fds_[1], raw.data(), raw.size(), 0),\n static_cast(raw.size()));\n\n std::uint8_t read_buf[256] = {};\n const int bytes_read = device.Read(read_buf, sizeof(read_buf));\n EXPECT_EQ(bytes_read, static_cast(ipv6_pkt.size()));\n EXPECT_EQ(std::memcmp(read_buf, ipv6_pkt.data(), ipv6_pkt.size()), 0);\n\n device.OpenWithFd(-1, \"\");\n}\n\nTEST_F(DarwinAfHeaderTest, RoundTripIPv6Preserved) {\n fptn::common::network::DarwinTunDevice writer;\n fptn::common::network::DarwinTunDevice reader;\n ASSERT_TRUE(writer.OpenWithFd(fds_[0], \"writer0\"));\n ASSERT_TRUE(reader.OpenWithFd(fds_[1], \"reader0\"));\n reader.SetNonBlocking(true);\n\n auto original = MakeMinimalIPv6Packet();\n const int written = writer.Write(original.data(), original.size());\n EXPECT_EQ(written, static_cast(original.size()));\n\n std::uint8_t read_buf[256] = {};\n const int bytes_read = reader.Read(read_buf, sizeof(read_buf));\n ASSERT_EQ(bytes_read, static_cast(original.size()));\n\n std::vector result(read_buf, read_buf + bytes_read);\n EXPECT_EQ(result, original);\n\n writer.OpenWithFd(-1, \"\");\n reader.OpenWithFd(-1, \"\");\n}\n\n#endif // __APPLE__\n" }, { "path": "tests/fptnlib/CMakeLists.txt", "content": "find_package(GTest REQUIRED)\nfind_package(Boost REQUIRED)\nfind_package(OpenSSL REQUIRED)\nfind_package(spdlog REQUIRED)\nfind_package(fmt REQUIRED)\nfind_package(PcapPlusPlus REQUIRED)\nfind_package(nlohmann_json REQUIRED)\nfind_package(jwt-cpp REQUIRED)\nfind_package(Boost REQUIRED COMPONENTS random filesystem)\n\nif(WIN32)\n set(TUNTAP_LIB Wintun rpcrt4)\n add_definitions(-D_WIN32_WINNT=0x0601)\nelse()\n set(TUNTAP_LIB tuntap++)\nendif()\n\nset(LIBS\n GTest::gtest\n GTest::gtest_main\n Boost::boost\n Boost::random\n Boost::process\n Boost::filesystem\n OpenSSL::SSL\n OpenSSL::Crypto\n nlohmann_json::nlohmann_json\n jwt-cpp::jwt-cpp\n spdlog::spdlog\n fmt::fmt\n PcapPlusPlus::PcapPlusPlus\n fptn-protocol-lib_static\n ${TUNTAP_LIB})\n\n# --- ApiClient test ---\nadd_executable(ApiClientTest api_client/ApiClientTest.cpp)\ntarget_link_libraries(ApiClientTest PRIVATE ${LIBS})\nadd_test(NAME ApiClientTest COMMAND ApiClientTest)\n" }, { "path": "tests/fptnlib/api_client/ApiClientTest.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2026 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"fptn-protocol-lib/https/api_client/api_client.h\"\n\n// TEST(ApiClientTest, GitHubReleasesConnection) {\n// fptn::protocol::https::ApiClient client(\"api.github.com\", 443,\n// \"api.github.com\",\n// fptn::protocol::https::CensorshipStrategy::kSniRealityModeChrome147);\n//\n// auto response = client.Get(\"/repos/batchar2/fptn/releases/latest\", 30);\n//\n// EXPECT_EQ(response.code, 200);\n// EXPECT_FALSE(response.body.empty());\n//\n// auto release_info = response.Json();\n// EXPECT_TRUE(release_info.contains(\"tag_name\"));\n// EXPECT_TRUE(release_info.contains(\"name\"));\n// EXPECT_TRUE(release_info.contains(\"html_url\"));\n// }\n\nTEST(ApiClientTest, GitHubHandshakeTest) {\n fptn::protocol::https::ApiClient client(\"api.github.com\", 443,\n \"api.github.com\",\n fptn::protocol::https::CensorshipStrategy::kSni);\n\n bool handshake_success = client.TestHandshake(10);\n EXPECT_TRUE(handshake_success);\n}\n\n// TEST(ApiClientTest, GitHubResponseStructure) {\n// fptn::protocol::https::ApiClient client(\"api.github.com\", 443,\n// \"api.github.com\", fptn::protocol::https::CensorshipStrategy::kSni);\n//\n// auto response = client.Get(\"/repos/batchar2/fptn/releases/latest\", 30);\n//\n// ASSERT_EQ(response.code, 200);\n//\n// auto release_info = response.Json();\n// EXPECT_TRUE(release_info.contains(\"id\"));\n// EXPECT_TRUE(release_info.contains(\"tag_name\"));\n// EXPECT_TRUE(release_info.contains(\"assets\"));\n//\n// if (release_info.contains(\"assets\") && release_info[\"assets\"].is_array()) {\n// auto assets = release_info[\"assets\"];\n// if (!assets.empty()) {\n// // auto asset = assets[0];\n// // EXPECT_TRUE(asset.contains(\"name\"));\n// // EXPECT_TRUE(asset.contains(\"browser_download_url\"));\n// }\n// }\n// }\n" }, { "path": "tests/server/CMakeLists.txt", "content": "find_package(GTest REQUIRED)\nfind_package(Boost REQUIRED)\nfind_package(OpenSSL REQUIRED)\nfind_package(spdlog REQUIRED)\nfind_package(fmt REQUIRED)\nfind_package(PcapPlusPlus REQUIRED)\nfind_package(nlohmann_json REQUIRED)\nfind_package(jwt-cpp REQUIRED)\nfind_package(prometheus-cpp REQUIRED)\n\nif(WIN32)\n set(TUNTAP_LIB Wintun rpcrt4)\nelse()\n set(TUNTAP_LIB tuntap++)\nendif()\n\nset(LIBS\n GTest::gtest\n GTest::gtest_main\n Boost::boost\n OpenSSL::SSL\n OpenSSL::Crypto\n nlohmann_json::nlohmann_json\n jwt-cpp::jwt-cpp\n spdlog::spdlog\n fmt::fmt\n PcapPlusPlus::PcapPlusPlus\n fptn-protocol-lib_static\n prometheus-cpp::prometheus-cpp\n ${TUNTAP_LIB})\n\ninclude_directories(${FPTN_SERVER_PATH})\n\n# --- MetricTest test ---\nadd_executable(MetricTest statistic/MetricTest.cpp ${FPTN_SERVER_PATH}/statistic/metrics.h ${FPTN_SERVER_PATH}/statistic/metrics.cpp)\ntarget_link_libraries(MetricTest PRIVATE ${LIBS})\nadd_test(NAME MetricTest COMMAND MetricTest)\n\n# --- AntiScan test ---\nadd_executable(AntiScanTest filter/antiscan/AntiScanTest.cpp ${FPTN_SERVER_PATH}/filter/filters/antiscan/antiscan.h\n ${FPTN_SERVER_PATH}/filter/filters/antiscan/antiscan.cpp)\ntarget_link_libraries(AntiScanTest PRIVATE ${LIBS})\nadd_test(NAME AntiScanTest COMMAND AntiScanTest)\n" }, { "path": "tests/server/filter/antiscan/AntiScanTest.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n#include \n\n#include // NOLINT(build/include_order)\n#include // NOLINT(build/include_order)\n\n#include // NOLINT(build/include_order)\n\n#include \"common/network/ip_address.h\"\n#include \"common/network/ip_packet.h\"\n\n#include \"fptn-server/filter/filters/antiscan/antiscan.h\"\n\nnamespace {\nclass MockIPv4Packet : public fptn::common::network::IPPacket {\n public:\n explicit MockIPv4Packet(const pcpp::IPv4Address& addr) {\n ipv4Layer_.setDstIPv4Address(addr);\n }\n\n bool IsIPv4() const noexcept override { return true; }\n\n bool IsIPv6() const noexcept override { return false; }\n\n pcpp::IPv4Layer* IPv4Layer() noexcept override { return &ipv4Layer_; }\n\n private:\n pcpp::IPv4Layer ipv4Layer_;\n};\n\nclass MockIPv6Packet : public fptn::common::network::IPPacket {\n public:\n explicit MockIPv6Packet(const pcpp::IPv6Address& addr) {\n ipv6_layer_.setDstIPv6Address(addr);\n }\n\n bool IsIPv4() const noexcept override { return false; }\n\n bool IsIPv6() const noexcept override { return true; }\n\n pcpp::IPv6Layer* IPv6Layer() noexcept override { return &ipv6_layer_; }\n\n private:\n pcpp::IPv6Layer ipv6_layer_;\n};\n\n/* IPv4 */\n// cppcheck-suppress syntaxError\nTEST(AntiScanTest, BlockScan) {\n /* IPv4 */\n const fptn::common::network::IPv4Address server_ipv4(\"192.168.1.1\");\n const fptn::common::network::IPv4Address net_ipv4(\"192.168.1.0\");\n const int mask_ipv4 = 24;\n /* IPv6 */\n const fptn::common::network::IPv6Address server_ipv6(\n \"2001:0db8:85a3:0000:0000:8a2e:0370:0001\");\n const fptn::common::network::IPv6Address net_ipv6(\n \"2001:0db8:85a3:0000:0000:8a2e:0370:0000\");\n const int mask_ipv6 = 126;\n\n fptn::filter::AntiScan anti_scan_filter(\n /* IPv4 */\n server_ipv4, net_ipv4, mask_ipv4,\n /* IPv6 */\n server_ipv6, net_ipv6, mask_ipv6);\n\n EXPECT_EQ(anti_scan_filter.apply(\n std::make_unique(net_ipv4.ToString())),\n nullptr)\n << \"Packet in the network should be blocked\";\n\n EXPECT_EQ(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv4Address(\"192.168.1.5\"))),\n nullptr)\n << \"Packet in the network should be blocked\";\n\n EXPECT_EQ(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv4Address(\"192.168.1.255\"))),\n nullptr)\n << \"Packet in the network should be blocked\";\n\n EXPECT_EQ(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv4Address(\"255.255.255.255\"))),\n nullptr);\n}\n\nTEST(AntiScanTest, AllowNonScanPacket) {\n /* IPv4 */\n const fptn::common::network::IPv4Address server_ipv4(\"192.168.1.1\");\n const fptn::common::network::IPv4Address net_ipv4(\"192.168.1.0\");\n const int mask_ipv4 = 24;\n /* IPv6 */\n const fptn::common::network::IPv6Address server_ipv6(\n \"2001:0db8:85a3:0000:0000:8a2e:0370:0001\");\n const fptn::common::network::IPv6Address net_ipv6(\n \"2001:0db8:85a3:0000:0000:8a2e:0370:0000\");\n const int mask_ipv6 = 126;\n\n fptn::filter::AntiScan anti_scan_filter(\n /* IPv4 */\n server_ipv4, net_ipv4, mask_ipv4,\n /* IPv6 */\n server_ipv6, net_ipv6, mask_ipv6);\n\n EXPECT_NE(anti_scan_filter.apply(\n std::make_unique(server_ipv4.ToString())),\n nullptr);\n\n EXPECT_NE(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv4Address(\"192.168.2.1\"))),\n nullptr);\n\n EXPECT_NE(anti_scan_filter.apply(\n std::make_unique(pcpp::IPv4Address(\"8.8.8.8\"))),\n nullptr);\n\n EXPECT_NE(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv4Address(\"192.168.0.1\"))),\n nullptr);\n\n EXPECT_NE(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv4Address(\"192.168.0.255\"))),\n nullptr);\n}\n\n/* IPv6 */\nTEST(AntiScanTest, BlockScanIPv6) {\n /* IPv4 */\n const fptn::common::network::IPv4Address server_ipv4(\"192.168.1.1\");\n const fptn::common::network::IPv4Address net_ipv4(\"192.168.1.0\");\n const int mask_ipv4 = 24;\n /* IPv6 */\n const fptn::common::network::IPv6Address server_ipv6(\n \"2001:0db8:85a3:0000:0000:8a2e:0370:0001\");\n const fptn::common::network::IPv6Address net_ipv6(\n \"2001:0db8:85a3:0000:0000:8a2e:0370:0000\");\n const int mask_ipv6 = 120;\n\n fptn::filter::AntiScan anti_scan_filter(\n /* IPv4 */\n server_ipv4, net_ipv4, mask_ipv4,\n /* IPv6 */\n server_ipv6, net_ipv6, mask_ipv6);\n\n EXPECT_EQ(anti_scan_filter.apply(\n std::make_unique(net_ipv6.ToString())),\n nullptr)\n << \"IPv6 packet in the network should be blocked\";\n\n EXPECT_EQ(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv6Address(\"2001:0db8:85a3:0000:0000:8a2e:0370:0002\"))),\n nullptr);\n\n EXPECT_EQ(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv6Address(\"2001:0db8:85a3:0000:0000:8a2e:0370:00A0\"))),\n nullptr);\n}\n\nTEST(AntiScanTest, AllowNonScanPacketIPv6) {\n /* IPv4 */\n const fptn::common::network::IPv4Address server_ipv4(\"192.168.1.1\");\n const fptn::common::network::IPv4Address net_ipv4(\"192.168.1.0\");\n const int mask_ipv4 = 24;\n /* IPv6 */\n const fptn::common::network::IPv6Address server_ipv6(\n \"2001:0db8:85a3:0000:0000:8a2e:0370:0001\");\n const fptn::common::network::IPv6Address net_ipv6(\n \"2001:0db8:85a3:0000:0000:8a2e:0370:0000\");\n const int mask_ipv6 = 126;\n\n fptn::filter::AntiScan anti_scan_filter(\n /* IPv4 */\n server_ipv4, net_ipv4, mask_ipv4,\n /* IPv6 */\n server_ipv6, net_ipv6, mask_ipv6);\n\n EXPECT_NE(anti_scan_filter.apply(\n std::make_unique(server_ipv6.ToString())),\n nullptr);\n\n EXPECT_NE(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv6Address(\"2001:0db8:85a3:0000:0000:8a2e:0371:1000\"))),\n nullptr);\n\n EXPECT_NE(anti_scan_filter.apply(std::make_unique(\n pcpp::IPv6Address(\"2001:0db8:85a3:0000:0000:8a2e:0370:FFFF\"))),\n nullptr);\n}\n} // namespace\n" }, { "path": "tests/server/statistic/MetricTest.cpp", "content": "/*=============================================================================\nCopyright (c) 2024-2025 Stas Skokov\n\nDistributed under the MIT License (https://opensource.org/licenses/MIT)\n=============================================================================*/\n\n#include \n\n#include // NOLINT(build/include_order)\n\n#include \"fptn-server/statistic/metrics.h\"\n\nTEST(MetricsTest, UpdateTraffic) {\n fptn::statistic::Metrics metrics;\n metrics.UpdateStatistics(1, \"user1\", 1024, 2048);\n\n const std::string metrics_data = metrics.Collect();\n EXPECT_NE(metrics_data.find(\"fptn_user_incoming_traffic_bytes{session_id=\"\n \"\\\"1\\\",username=\\\"user1\\\"} 1024\"),\n std::string::npos);\n EXPECT_NE(metrics_data.find(\"fptn_user_outgoing_traffic_bytes{session_id=\"\n \"\\\"1\\\",username=\\\"user1\\\"} 2048\"),\n std::string::npos);\n}\n" } ]