367 lines
13 KiB
TypeScript
367 lines
13 KiB
TypeScript
/**
|
|
* WireGuard config codecs: native .conf ↔ MikroTik .rsc
|
|
*/
|
|
|
|
export type WgParsedPeer = {
|
|
publicKey: string
|
|
allowedAddresses: string[]
|
|
endpointAddress?: string
|
|
endpointPort?: number
|
|
persistentKeepalive?: number
|
|
comment?: string
|
|
name?: string
|
|
privateKey?: "auto" | "none" | string
|
|
clientAddress?: string
|
|
clientDns?: string
|
|
clientEndpoint?: string
|
|
disabled?: boolean
|
|
}
|
|
|
|
export type WgParsedInterface = {
|
|
name: string
|
|
listenPort?: number
|
|
mtu?: number
|
|
privateKey?: string
|
|
comment?: string
|
|
address?: string
|
|
disabled?: boolean
|
|
}
|
|
|
|
export type WgParsedConfig = {
|
|
format: "rsc" | "conf"
|
|
interface: WgParsedInterface
|
|
peers: WgParsedPeer[]
|
|
}
|
|
|
|
export type WgExportIface = {
|
|
name: string
|
|
listenPort?: number
|
|
mtu: number
|
|
comment?: string
|
|
enabled?: boolean
|
|
privateKey?: string
|
|
publicKey?: string
|
|
address?: string
|
|
serverName?: string
|
|
peers: Array<{
|
|
publicKey: string
|
|
allowedIps: string[]
|
|
endpoint?: string
|
|
persistentKeepalive?: number
|
|
persistent?: boolean
|
|
comment?: string
|
|
name?: string
|
|
clientAddress?: string
|
|
clientDns?: string
|
|
clientEndpoint?: string
|
|
}>
|
|
}
|
|
|
|
function stripQuotes(v: string): string {
|
|
const t = v.trim()
|
|
if ((t.startsWith('"') && t.endsWith('"')) || (t.startsWith("'") && t.endsWith("'"))) {
|
|
return t.slice(1, -1)
|
|
}
|
|
return t
|
|
}
|
|
|
|
function parseKvLine(line: string): Record<string, string> {
|
|
const out: Record<string, string> = {}
|
|
// Match key=value pairs; values may be quoted
|
|
const re = /([a-zA-Z0-9_-]+)=("(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*'|[^\s\\]+)/g
|
|
let m: RegExpExecArray | null
|
|
while ((m = re.exec(line)) !== null) {
|
|
out[m[1]] = stripQuotes(m[2])
|
|
}
|
|
return out
|
|
}
|
|
|
|
function joinContinuedLines(text: string): string[] {
|
|
const raw = text.replace(/\r\n/g, "\n").replace(/\r/g, "\n").split("\n")
|
|
const lines: string[] = []
|
|
let buf = ""
|
|
for (const line of raw) {
|
|
const trimmedEnd = line.replace(/\s+$/, "")
|
|
if (trimmedEnd.endsWith("\\")) {
|
|
buf += trimmedEnd.slice(0, -1).trimEnd() + " "
|
|
continue
|
|
}
|
|
buf += trimmedEnd
|
|
if (buf.trim()) lines.push(buf.trim())
|
|
buf = ""
|
|
}
|
|
if (buf.trim()) lines.push(buf.trim())
|
|
return lines
|
|
}
|
|
|
|
export function detectWgConfigFormat(content: string): "rsc" | "conf" {
|
|
const t = content.trim()
|
|
if (/\[Interface\]/i.test(t) || /\[Peer\]/i.test(t)) return "conf"
|
|
if (/\/interface\s+wireguard/i.test(t) || /\/interface\/wireguard/i.test(t)) return "rsc"
|
|
if (/PrivateKey\s*=/i.test(t) || /PublicKey\s*=/i.test(t)) return "conf"
|
|
return "rsc"
|
|
}
|
|
|
|
export function parseNativeConf(content: string): WgParsedConfig {
|
|
const lines = content.replace(/\r\n/g, "\n").split("\n")
|
|
let section: "interface" | "peer" | null = null
|
|
const iface: WgParsedInterface = { name: "wg0" }
|
|
const peers: WgParsedPeer[] = []
|
|
let currentPeer: WgParsedPeer | null = null
|
|
|
|
const flushPeer = () => {
|
|
if (currentPeer?.publicKey) peers.push(currentPeer)
|
|
currentPeer = null
|
|
}
|
|
|
|
for (const raw of lines) {
|
|
const line = raw.trim()
|
|
if (!line || line.startsWith("#") || line.startsWith(";")) continue
|
|
if (/^\[Interface\]$/i.test(line)) {
|
|
flushPeer()
|
|
section = "interface"
|
|
continue
|
|
}
|
|
if (/^\[Peer\]$/i.test(line)) {
|
|
flushPeer()
|
|
section = "peer"
|
|
currentPeer = { publicKey: "", allowedAddresses: [] }
|
|
continue
|
|
}
|
|
const eq = line.indexOf("=")
|
|
if (eq < 0) continue
|
|
const key = line.slice(0, eq).trim().toLowerCase()
|
|
const value = line.slice(eq + 1).trim()
|
|
|
|
if (section === "interface") {
|
|
if (key === "privatekey") iface.privateKey = value
|
|
else if (key === "address") iface.address = value.split(",")[0]?.trim()
|
|
else if (key === "listenport") iface.listenPort = Number(value)
|
|
else if (key === "mtu") iface.mtu = Number(value)
|
|
else if (key === "name") iface.name = value || iface.name
|
|
} else if (section === "peer" && currentPeer) {
|
|
if (key === "publickey") currentPeer.publicKey = value
|
|
else if (key === "allowedips") {
|
|
currentPeer.allowedAddresses = value
|
|
.split(",")
|
|
.map((s) => s.trim())
|
|
.filter(Boolean)
|
|
} else if (key === "endpoint") {
|
|
const lastColon = value.lastIndexOf(":")
|
|
if (lastColon > 0 && !value.includes("]:")) {
|
|
currentPeer.endpointAddress = value.slice(0, lastColon)
|
|
currentPeer.endpointPort = Number(value.slice(lastColon + 1))
|
|
} else if (value.startsWith("[") && value.includes("]:")) {
|
|
const idx = value.indexOf("]:")
|
|
currentPeer.endpointAddress = value.slice(1, idx)
|
|
currentPeer.endpointPort = Number(value.slice(idx + 2))
|
|
} else {
|
|
currentPeer.endpointAddress = value
|
|
}
|
|
} else if (key === "persistentkeepalive") {
|
|
currentPeer.persistentKeepalive = Number(value)
|
|
} else if (key === "presharedkey") {
|
|
// ignore PSK for ROS import for now
|
|
}
|
|
}
|
|
}
|
|
flushPeer()
|
|
|
|
if (!iface.name) iface.name = "wg0"
|
|
return { format: "conf", interface: iface, peers }
|
|
}
|
|
|
|
export function parseMikrotikRsc(content: string): WgParsedConfig {
|
|
const lines = joinContinuedLines(content)
|
|
const iface: WgParsedInterface = { name: "wg0" }
|
|
const peers: WgParsedPeer[] = []
|
|
let foundIface = false
|
|
|
|
for (const line of lines) {
|
|
if (line.startsWith("#")) continue
|
|
const lower = line.toLowerCase()
|
|
|
|
if (
|
|
lower.startsWith("/interface wireguard add") ||
|
|
lower.startsWith("/interface/wireguard add")
|
|
) {
|
|
const kv = parseKvLine(line)
|
|
if (kv.name) iface.name = kv.name
|
|
if (kv["listen-port"]) iface.listenPort = Number(kv["listen-port"])
|
|
if (kv.mtu) iface.mtu = Number(kv.mtu)
|
|
if (kv["private-key"]) iface.privateKey = kv["private-key"]
|
|
if (kv.comment) iface.comment = kv.comment
|
|
if (kv.disabled === "yes") iface.disabled = true
|
|
foundIface = true
|
|
continue
|
|
}
|
|
|
|
if (
|
|
lower.startsWith("/interface wireguard peers add") ||
|
|
lower.startsWith("/interface/wireguard/peers add")
|
|
) {
|
|
const kv = parseKvLine(line)
|
|
const allowed = (kv["allowed-address"] ?? "")
|
|
.split(",")
|
|
.map((s) => s.trim())
|
|
.filter(Boolean)
|
|
peers.push({
|
|
publicKey: kv["public-key"] ?? "",
|
|
allowedAddresses: allowed,
|
|
endpointAddress: kv["endpoint-address"],
|
|
endpointPort: kv["endpoint-port"]
|
|
? Number(kv["endpoint-port"])
|
|
: undefined,
|
|
persistentKeepalive: kv["persistent-keepalive"]
|
|
? Number(kv["persistent-keepalive"])
|
|
: undefined,
|
|
comment: kv.comment,
|
|
name: kv.name,
|
|
clientAddress: kv["client-address"],
|
|
clientDns: kv["client-dns"],
|
|
clientEndpoint: kv["client-endpoint"],
|
|
disabled: kv.disabled === "yes",
|
|
})
|
|
continue
|
|
}
|
|
|
|
if (lower.startsWith("/ip address add") || lower.startsWith("/ip/address add") || lower.startsWith("/ipv6 address add") || lower.startsWith("/ipv6/address add")) {
|
|
const kv = parseKvLine(line)
|
|
if (iface.address) throw new Error("Импорт нескольких адресов пока не поддерживается")
|
|
if (kv.interface && kv.interface !== iface.name) throw new Error("Адрес относится к другому интерфейсу")
|
|
if (kv["from-pool"] || kv["eui-64"] === "yes" || kv["no-dad"] === "yes" || kv.disabled === "yes" || kv.advertise === "yes") throw new Error("Импорт специальных параметров адреса не поддерживается")
|
|
if (kv.address) iface.address = kv.address
|
|
continue
|
|
}
|
|
}
|
|
|
|
if (!foundIface) {
|
|
throw new Error("Не удалось распознать RouterOS WireGuard .rsc")
|
|
}
|
|
return { format: "rsc", interface: iface, peers }
|
|
}
|
|
|
|
export function parseWgConfig(
|
|
content: string,
|
|
format: "auto" | "rsc" | "conf" = "auto",
|
|
): WgParsedConfig {
|
|
const detected = format === "auto" ? detectWgConfigFormat(content) : format
|
|
if (detected === "conf") return parseNativeConf(content)
|
|
return parseMikrotikRsc(content)
|
|
}
|
|
|
|
export function generateNativeConf(iface: WgExportIface, opts?: { includePrivateKey?: boolean }): string {
|
|
const lines: string[] = []
|
|
lines.push(`[Interface]`)
|
|
if (opts?.includePrivateKey && iface.privateKey) {
|
|
lines.push(`PrivateKey = ${iface.privateKey}`)
|
|
} else if (iface.privateKey) {
|
|
lines.push(`PrivateKey = ${iface.privateKey}`)
|
|
} else {
|
|
lines.push(`# PrivateKey = <заполните приватный ключ с роутера>`)
|
|
}
|
|
if (iface.address) lines.push(`Address = ${iface.address}`)
|
|
if (iface.listenPort) lines.push(`ListenPort = ${iface.listenPort}`)
|
|
if (iface.mtu) lines.push(`MTU = ${iface.mtu}`)
|
|
lines.push(``)
|
|
|
|
for (const p of iface.peers) {
|
|
lines.push(`[Peer]`)
|
|
lines.push(`PublicKey = ${p.publicKey}`)
|
|
lines.push(`AllowedIPs = ${p.allowedIps.join(", ")}`)
|
|
if (p.endpoint) lines.push(`Endpoint = ${p.endpoint}`)
|
|
const ka = p.persistentKeepalive ?? (p.persistent ? 25 : undefined)
|
|
if (ka != null && ka > 0) lines.push(`PersistentKeepalive = ${ka}`)
|
|
if (p.comment) lines.push(`# ${p.comment}`)
|
|
lines.push(``)
|
|
}
|
|
return lines.join("\n").trimEnd() + "\n"
|
|
}
|
|
|
|
export function generatePeerClientConf(args: {
|
|
peerPrivateKey?: string
|
|
peerAddress?: string
|
|
peerDns?: string
|
|
serverPublicKey: string
|
|
allowedIps?: string[]
|
|
endpoint?: string
|
|
persistentKeepalive?: number
|
|
}): string {
|
|
const lines: string[] = []
|
|
lines.push(`[Interface]`)
|
|
lines.push(
|
|
args.peerPrivateKey
|
|
? `PrivateKey = ${args.peerPrivateKey}`
|
|
: `# PrivateKey = <ключ клиента>`,
|
|
)
|
|
if (args.peerAddress?.trim()) lines.push(`Address = ${args.peerAddress.trim()}`)
|
|
else lines.push(`# Address = <укажите адрес клиента>`)
|
|
if (args.peerDns) lines.push(`DNS = ${args.peerDns}`)
|
|
lines.push(``)
|
|
lines.push(`[Peer]`)
|
|
lines.push(`PublicKey = ${args.serverPublicKey}`)
|
|
if (args.allowedIps?.length) lines.push(`AllowedIPs = ${args.allowedIps.join(", ")}`)
|
|
else lines.push(`# AllowedIPs = <укажите сети через туннель>`)
|
|
if (args.endpoint) lines.push(`Endpoint = ${args.endpoint}`)
|
|
else lines.push(`# Endpoint = <укажите адрес сервера и порт>`)
|
|
if (args.persistentKeepalive != null && args.persistentKeepalive > 0) {
|
|
lines.push(`PersistentKeepalive = ${args.persistentKeepalive}`)
|
|
}
|
|
lines.push(``)
|
|
return lines.join("\n")
|
|
}
|
|
|
|
export function generateMikrotikRsc(iface: WgExportIface): string {
|
|
const lines: string[] = []
|
|
lines.push(`# WireGuard — ${iface.name}${iface.serverName ? ` · ${iface.serverName}` : ""}`)
|
|
lines.push(`# RouterOS 7.x · MikrotikManager`)
|
|
lines.push(``)
|
|
lines.push(`/interface wireguard add \\`)
|
|
lines.push(` name=${iface.name} \\`)
|
|
lines.push(` listen-port=${iface.listenPort ?? 13231} \\`)
|
|
lines.push(` mtu=${iface.mtu} \\`)
|
|
if (iface.privateKey) lines.push(` private-key="${iface.privateKey}" \\`)
|
|
if (iface.comment) lines.push(` comment="${iface.comment.replace(/"/g, '\\"')}" \\`)
|
|
if (iface.enabled === false) lines.push(` disabled=yes \\`)
|
|
// remove trailing backslash on last iface param by rewriting last line
|
|
if (lines[lines.length - 1]?.endsWith(" \\")) {
|
|
lines[lines.length - 1] = lines[lines.length - 1]!.slice(0, -2)
|
|
}
|
|
lines.push(``)
|
|
|
|
if (iface.address) {
|
|
lines.push(`${iface.address.includes(":") ? "/ipv6" : "/ip"} address add \\`)
|
|
lines.push(` address=${iface.address} \\`)
|
|
if (iface.address.includes(":")) lines.push(` advertise=no \\`)
|
|
lines.push(` interface=${iface.name}`)
|
|
lines.push(``)
|
|
}
|
|
|
|
for (const p of iface.peers) {
|
|
lines.push(`/interface wireguard peers add \\`)
|
|
lines.push(` interface=${iface.name} \\`)
|
|
lines.push(` public-key="${p.publicKey}" \\`)
|
|
lines.push(` allowed-address=${p.allowedIps.join(",")} \\`)
|
|
if (p.endpoint) {
|
|
const host = p.endpoint.includes(":") ? p.endpoint.slice(0, p.endpoint.lastIndexOf(":")) : p.endpoint
|
|
const port = p.endpoint.includes(":")
|
|
? p.endpoint.slice(p.endpoint.lastIndexOf(":") + 1)
|
|
: "13231"
|
|
lines.push(` endpoint-address=${host} \\`)
|
|
lines.push(` endpoint-port=${port} \\`)
|
|
}
|
|
const ka = p.persistentKeepalive ?? (p.persistent ? 25 : undefined)
|
|
if (ka != null && ka > 0) lines.push(` persistent-keepalive=${ka} \\`)
|
|
if (p.name) lines.push(` name=${p.name} \\`)
|
|
if (p.clientAddress) lines.push(` client-address=${p.clientAddress} \\`)
|
|
if (p.clientDns) lines.push(` client-dns=${p.clientDns} \\`)
|
|
if (p.clientEndpoint) lines.push(` client-endpoint=${p.clientEndpoint} \\`)
|
|
if (p.comment) lines.push(` comment="${p.comment.replace(/"/g, '\\"')}" \\`)
|
|
if (lines[lines.length - 1]?.endsWith(" \\")) {
|
|
lines[lines.length - 1] = lines[lines.length - 1]!.slice(0, -2)
|
|
}
|
|
lines.push(``)
|
|
}
|
|
return lines.join("\n")
|
|
}
|