feat(launcher): добавить скрипты GEO и blocking для MikroTik 7.22+

Пробы выполняются на роутере через /tool fetch и уходят в те же ingest API. Ежедневный запуск ставит scheduler, который каждый день заново качает .rsc со свежим токеном. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-25 17:47:04 +07:00
parent b03318800f
commit c844874b0a
13 changed files with 729 additions and 10 deletions
@@ -0,0 +1,176 @@
+# VPS Tracker — blocking launcher for RouterOS 7.22+
+# /tool fetch url="__VT_API_URL__/cc.rsc" dst-path=vt-cc.rsc; /import file-name=vt-cc.rsc
+# HTTPS GET only (no DPI/SNI). Ingest: POST /api/integrations/censorcheck/runs
+
+:local vtApi "__VT_API_URL__"
+:local vtToken "__VT_INGEST_TOKEN__"
+:local vtDaily "__VT_DAILY__"
+:local vtRemove "__VT_REMOVE_DAILY__"
+:local launcherVer "ros-1"
+:local schedName "vt-cc"
+:local dstFile "vt-cc.rsc"
+
+:local ver [/system resource get version]
+:local dot [:find $ver "."]
+:if ([:typeof $dot] = "nil") do={
+  :error ("Need RouterOS 7.22+ (got " . $ver . ")")
+}
+:local major [:tonum [:pick $ver 0 $dot]]
+:local rest [:pick $ver ($dot + 1) [:len $ver]]
+:local cut [:len $rest]
+:local d2 [:find $rest "."]
+:local sp [:find $rest " "]
+:if ([:typeof $d2] != "nil") do={ :set cut $d2 }
+:if (([:typeof $sp] != "nil") and (($cut = [:len $rest]) or ($sp < $cut))) do={ :set cut $sp }
+:local minor [:tonum [:pick $rest 0 $cut]]
+:if (($major < 7) or (($major = 7) and ($minor < 22))) do={
+  :error ("Need RouterOS 7.22+ (got " . $ver . ")")
+}
+
+:if ($vtRemove = "yes") do={
+  :do { /system scheduler remove [find name=$schedName] } on-error={}
+  :put ("Ежедневная проверка снята (" . $schedName . ")")
+} else={
+
+:put ("censorcheck launcher " . $launcherVer . " (RouterOS)")
+
+:local r
+:local publicIp ""
+:do {
+  :set r [/tool fetch url="https://api.ipify.org" output=user as-value]
+  :if (($r->"status") = "finished") do={
+    :set publicIp ($r->"data")
+  }
+} on-error={}
+:local cr [:find $publicIp "\r"]
+:if ([:typeof $cr] != "nil") do={ :set publicIp [:pick $publicIp 0 $cr] }
+:local lf [:find $publicIp "\n"]
+:if ([:typeof $lf] != "nil") do={ :set publicIp [:pick $publicIp 0 $lf] }
+:if ([:len $publicIp] = 0) do={
+  :do {
+    :set r [/tool fetch url="https://ifconfig.me/ip" output=user as-value]
+    :if (($r->"status") = "finished") do={
+      :set publicIp ($r->"data")
+    }
+  } on-error={}
+  :set cr [:find $publicIp "\r"]
+  :if ([:typeof $cr] != "nil") do={ :set publicIp [:pick $publicIp 0 $cr] }
+  :set lf [:find $publicIp "\n"]
+  :if ([:typeof $lf] != "nil") do={ :set publicIp [:pick $publicIp 0 $lf] }
+}
+:if ([:len $publicIp] = 0) do={
+  :error "Не удалось определить публичный IP"
+}
+
+:local hoster ""
+:do {
+  :set r [/tool fetch url=("https://ipwho.is/" . $publicIp) output=user as-value]
+  :if (($r->"status") = "finished") do={
+    :local j [:deserialize from=json value=($r->"data")]
+    :local isp ($j->"connection"->"isp")
+    :if ([:typeof $isp] = "str") do={ :set hoster $isp }
+    :if ([:len $hoster] = 0) do={
+      :local org ($j->"org")
+      :if ([:typeof $org] = "str") do={ :set hoster $org }
+    }
+  }
+} on-error={}
+
+:local runId ("mt-" . [:rndstr length=16])
+:put ("probe IP: " . $publicIp)
+:if ([:len $hoster] > 0) do={ :put ("хостер: " . $hoster) }
+:put ("runId: " . $runId)
+:put "Проверяю сайты (HTTPS GET, без DPI)..."
+
+:local hosts {\
+  "youtube.com";"redirector.googlevideo.com";"discord.com";"instagram.com";"facebook.com";\
+  "x.com";"linkedin.com";"rutracker.org";"digitalocean.com";"amnezia.org";"getoutline.org";\
+  "mailfence.com";"flibusta.is";"rezka.ag";"api.telegram.org";"play.google.com";\
+  "spotify.com";"netflix.com";"patreon.com";"swagger.io";"snyk.io";"mongodb.com";\
+  "autodesk.com";"graylog.org";"redis.io";"copilot.microsoft.com"\
+}
+
+:local results ({})
+:local code 0
+:local data
+:local line
+:local nl
+:local cr2
+:local sp1
+:local rest2
+:local sp2
+:local codeStr
+:local n
+:local item
+:foreach host in=$hosts do={
+  :set code 0
+  :do {
+    :set r [/tool fetch url=("https://" . $host . "/") output=user-with-headers as-value]
+    :if (($r->"status") != "finished") do={
+      :set code -1
+    } else={
+      :set data ($r->"data")
+      :set line $data
+      :set nl [:find $data "\n"]
+      :if ([:typeof $nl] != "nil") do={ :set line [:pick $data 0 $nl] }
+      :set cr2 [:find $line "\r"]
+      :if ([:typeof $cr2] != "nil") do={ :set line [:pick $line 0 $cr2] }
+      :if ([:pick $line 0 4] = "HTTP") do={
+        :set sp1 [:find $line " "]
+        :if ([:typeof $sp1] != "nil") do={
+          :set rest2 [:pick $line ($sp1 + 1) [:len $line]]
+          :set sp2 [:find $rest2 " "]
+          :set codeStr $rest2
+          :if ([:typeof $sp2] != "nil") do={ :set codeStr [:pick $rest2 0 $sp2] }
+          :set n [:tonum $codeStr]
+          :if ([:typeof $n] = "num") do={ :set code $n } else={ :set code 200 }
+        } else={ :set code 200 }
+      } else={ :set code 200 }
+    }
+  } on-error={
+    :set code 0
+  }
+  :put ($host . " " . $code)
+  :set item { service=$host; raw={ https={ ipv4={ status=$code } } } }
+  :set ($results->[:len $results]) $item
+}
+
+:local probe { publicIp=$publicIp }
+:if ([:len $hoster] > 0) do={ :set ($probe->"hoster") $hoster }
+
+:local payload {\
+  schemaVersion=1;\
+  runId=$runId;\
+  probe=$probe;\
+  launcherVersion=$launcherVer;\
+  censorcheck={ version="ros"; mode="https" };\
+  results=$results\
+}
+:local json [:serialize to=json value=$payload]
+:local hdrs ("Content-Type: application/json,Authorization: Bearer " . $vtToken)
+:put "Отправляю ingest..."
+:do {
+  :set r [/tool fetch url=($vtApi . "/api/integrations/censorcheck/runs") http-method=post http-header-field=$hdrs http-data=$json output=user as-value]
+  :put ($r->"data")
+} on-error={
+  :put "API недоступен (fetch error)"
+}
+
+:if ($vtDaily = "yes") do={
+  :local ident [/system identity get name]
+  :local h ([:len $ident] + [:len [/system resource get architecture-name]])
+  :local hour (3 + ($h % 4))
+  :local minute (($h * 17) % 60)
+  :local hh $hour
+  :local mm $minute
+  :if ($hour < 10) do={ :set hh ("0" . $hour) }
+  :if ($minute < 10) do={ :set mm ("0" . $minute) }
+  :local startTime ($hh . ":" . $mm . ":00")
+  :local ev ("/tool fetch url=" . $vtApi . "/cc.rsc dst-path=" . $dstFile . "; /import file-name=" . $dstFile)
+  :do { /system scheduler remove [find name=$schedName] } on-error={}
+  /system scheduler add name=$schedName interval=1d start-time=$startTime on-event=$ev policy=read,write,test,policy comment="vps-tracker vt-cc"
+  :put ("Ежедневная проверка: каждый день в " . $startTime . " (" . $schedName . ")")
+  :put ("Снять: /tool fetch url=" . $vtApi . "/cc.rsc?remove=daily dst-path=" . $dstFile . "; /import file-name=" . $dstFile)
+}
+
+}
@@ -0,0 +1,293 @@
+# VPS Tracker — GeoIP launcher for RouterOS 7.22+
+# /tool fetch url="__VT_API_URL__/ic.rsc" dst-path=vt-ic.rsc; /import file-name=vt-ic.rsc
+# Primary GeoIP JSON + Cloudflare CDN. Ingest: POST /api/integrations/ipregion/runs
+
+:local vtApi "__VT_API_URL__"
+:local vtToken "__VT_INGEST_TOKEN__"
+:local vtDaily "__VT_DAILY__"
+:local vtRemove "__VT_REMOVE_DAILY__"
+:local launcherVer "ros-1"
+:local schedName "vt-ic"
+:local dstFile "vt-ic.rsc"
+
+:local ver [/system resource get version]
+:local dot [:find $ver "."]
+:if ([:typeof $dot] = "nil") do={
+  :error ("Need RouterOS 7.22+ (got " . $ver . ")")
+}
+:local major [:tonum [:pick $ver 0 $dot]]
+:local rest [:pick $ver ($dot + 1) [:len $ver]]
+:local cut [:len $rest]
+:local d2 [:find $rest "."]
+:local sp [:find $rest " "]
+:if ([:typeof $d2] != "nil") do={ :set cut $d2 }
+:if (([:typeof $sp] != "nil") and (($cut = [:len $rest]) or ($sp < $cut))) do={ :set cut $sp }
+:local minor [:tonum [:pick $rest 0 $cut]]
+:if (($major < 7) or (($major = 7) and ($minor < 22))) do={
+  :error ("Need RouterOS 7.22+ (got " . $ver . ")")
+}
+
+:if ($vtRemove = "yes") do={
+  :do { /system scheduler remove [find name=$schedName] } on-error={}
+  :put ("Ежедневная проверка снята (" . $schedName . ")")
+} else={
+
+:put ("ipregion launcher " . $launcherVer . " (RouterOS)")
+
+:local r
+:local j
+:local isp
+:local org
+:local publicIp ""
+:do {
+  :set r [/tool fetch url="https://api.ipify.org" output=user as-value]
+  :if (($r->"status") = "finished") do={
+    :set publicIp ($r->"data")
+  }
+} on-error={}
+:local cr [:find $publicIp "\r"]
+:if ([:typeof $cr] != "nil") do={ :set publicIp [:pick $publicIp 0 $cr] }
+:local lf [:find $publicIp "\n"]
+:if ([:typeof $lf] != "nil") do={ :set publicIp [:pick $publicIp 0 $lf] }
+:if ([:len $publicIp] = 0) do={
+  :do {
+    :set r [/tool fetch url="https://ifconfig.me/ip" output=user as-value]
+    :if (($r->"status") = "finished") do={
+      :set publicIp ($r->"data")
+    }
+  } on-error={}
+  :set cr [:find $publicIp "\r"]
+  :if ([:typeof $cr] != "nil") do={ :set publicIp [:pick $publicIp 0 $cr] }
+  :set lf [:find $publicIp "\n"]
+  :if ([:typeof $lf] != "nil") do={ :set publicIp [:pick $publicIp 0 $lf] }
+}
+:if ([:len $publicIp] = 0) do={
+  :error "Не удалось определить публичный IP"
+}
+
+:local hoster ""
+:do {
+  :set r [/tool fetch url=("https://ipwho.is/" . $publicIp) output=user as-value]
+  :if (($r->"status") = "finished") do={
+    :set j [:deserialize from=json value=($r->"data")]
+    :set isp ($j->"connection"->"isp")
+    :if ([:typeof $isp] = "str") do={ :set hoster $isp }
+    :if ([:len $hoster] = 0) do={
+      :set org ($j->"org")
+      :if ([:typeof $org] = "str") do={ :set hoster $org }
+    }
+  }
+} on-error={}
+
+:local runId ("mt-" . [:rndstr length=16])
+:put ("probe IP: " . $publicIp)
+:if ([:len $hoster] > 0) do={ :put ("хостер: " . $hoster) }
+:put ("runId: " . $runId)
+:put "Проверяю GeoIP (JSON, IPv4)..."
+
+:local names {\
+  "maxmind.com";"rdap.db.ripe.net";"ipinfo.io";"cloudflare.com";"ipregistry.co";\
+  "ipapi.co";"ifconfig.co";"ip2location.io";"iplocation.com";"country.is";\
+  "geoapify.com";"geojs.io";"ipapi.is";"ipbase.com";"ipquery.io";"ipwho.is";\
+  "ip-api.com";"cloudflare cdn"\
+}
+
+:local results ({})
+:local url ""
+:local method "get"
+:local postData ""
+:local iso "N/A"
+:local httpCode 0
+:local body ""
+:local data
+:local line
+:local nl
+:local cr2
+:local sp1
+:local rest2
+:local sp2
+:local codeStr
+:local n
+:local sep
+:local p
+:local plain
+:local pcr
+:local plf
+:local ctry
+:local colo
+:local iata
+:local ci
+:local item
+:foreach name in=$names do={
+  :set url ""
+  :set method "get"
+  :set postData ""
+  :if ($name = "maxmind.com") do={ :set url "https://geoip.maxmind.com/geoip/v2.1/city/me" }
+  :if ($name = "rdap.db.ripe.net") do={ :set url ("https://rdap.db.ripe.net/ip/" . $publicIp) }
+  :if ($name = "ipinfo.io") do={ :set url ("https://ipinfo.io/widget/demo/" . $publicIp) }
+  :if ($name = "cloudflare.com") do={ :set url "https://speed.cloudflare.com/meta" }
+  :if ($name = "ipregistry.co") do={ :set url ("https://api.ipregistry.co/" . $publicIp . "?hostname=true&key=sb69ksjcajfs4c") }
+  :if ($name = "ipapi.co") do={ :set url ("https://ipapi.co/" . $publicIp . "/json") }
+  :if ($name = "ifconfig.co") do={ :set url ("https://ifconfig.co/country-iso?ip=" . $publicIp) }
+  :if ($name = "ip2location.io") do={ :set url ("https://api.ip2location.io/?ip=" . $publicIp) }
+  :if ($name = "iplocation.com") do={
+    :set url "https://iplocation.com"
+    :set method "post"
+    :set postData ("ip=" . $publicIp)
+  }
+  :if ($name = "country.is") do={ :set url ("https://api.country.is/" . $publicIp) }
+  :if ($name = "geoapify.com") do={ :set url ("https://api.geoapify.com/v1/ipinfo?&ip=" . $publicIp . "&apiKey=b8568cb9afc64fad861a69edbddb2658") }
+  :if ($name = "geojs.io") do={ :set url ("https://get.geojs.io/v1/ip/country.json?ip=" . $publicIp) }
+  :if ($name = "ipapi.is") do={ :set url ("https://api.ipapi.is/?q=" . $publicIp) }
+  :if ($name = "ipbase.com") do={ :set url ("https://api.ipbase.com/v2/info?ip=" . $publicIp) }
+  :if ($name = "ipquery.io") do={ :set url ("https://api.ipquery.io/" . $publicIp) }
+  :if ($name = "ipwho.is") do={ :set url ("https://ipwho.is/" . $publicIp) }
+  :if ($name = "ip-api.com") do={ :set url ("https://demo.ip-api.com/json/" . $publicIp . "?fields=countryCode") }
+  :if ($name = "cloudflare cdn") do={ :set url "https://speed.cloudflare.com/meta" }
+
+  :set iso "N/A"
+  :set httpCode 0
+  :set body ""
+  :do {
+    :if ($method = "post") do={
+      :set r [/tool fetch url=$url http-method=post http-data=$postData http-header-field="Content-Type: application/x-www-form-urlencoded" output=user-with-headers as-value]
+    } else={
+      :set r [/tool fetch url=$url output=user-with-headers as-value]
+    }
+    :if (($r->"status") != "finished") do={
+      :set httpCode -1
+    } else={
+      :set data ($r->"data")
+      :set line $data
+      :set nl [:find $data "\n"]
+      :if ([:typeof $nl] != "nil") do={ :set line [:pick $data 0 $nl] }
+      :set cr2 [:find $line "\r"]
+      :if ([:typeof $cr2] != "nil") do={ :set line [:pick $line 0 $cr2] }
+      :set httpCode 200
+      :if ([:pick $line 0 4] = "HTTP") do={
+        :set sp1 [:find $line " "]
+        :if ([:typeof $sp1] != "nil") do={
+          :set rest2 [:pick $line ($sp1 + 1) [:len $line]]
+          :set sp2 [:find $rest2 " "]
+          :set codeStr $rest2
+          :if ([:typeof $sp2] != "nil") do={ :set codeStr [:pick $rest2 0 $sp2] }
+          :set n [:tonum $codeStr]
+          :if ([:typeof $n] = "num") do={ :set httpCode $n }
+        }
+      }
+      :set sep "\r\n\r\n"
+      :set p [:find $data $sep]
+      :if ([:typeof $p] = "nil") do={
+        :set sep "\n\n"
+        :set p [:find $data $sep]
+      }
+      :if ([:typeof $p] != "nil") do={
+        :set body [:pick $data ($p + [:len $sep]) [:len $data]]
+      } else={
+        :set body $data
+      }
+    }
+  } on-error={
+    :set httpCode 0
+  }
+
+  :if (($httpCode = 0) or ($httpCode = -1)) do={ :set iso "N/A" }
+  :if (($httpCode = 401) or ($httpCode = 403)) do={ :set iso "Denied" }
+  :if ($httpCode = 429) do={ :set iso "Rate-limit" }
+  :if ($httpCode >= 500) do={ :set iso "Server error" }
+  :if (($httpCode >= 200) and ($httpCode < 400)) do={
+    :if ($name = "ifconfig.co") do={
+      :set plain $body
+      :set pcr [:find $plain "\r"]
+      :if ([:typeof $pcr] != "nil") do={ :set plain [:pick $plain 0 $pcr] }
+      :set plf [:find $plain "\n"]
+      :if ([:typeof $plf] != "nil") do={ :set plain [:pick $plain 0 $plf] }
+      :if ([:len $plain] > 0) do={ :set iso $plain } else={ :set iso "N/A" }
+    } else={
+      :do {
+        :set j [:deserialize from=json value=$body]
+        :if ($name = "maxmind.com") do={ :set iso [:tostr ($j->"country"->"iso_code")] }
+        :if ($name = "rdap.db.ripe.net") do={ :set iso [:tostr ($j->"country")] }
+        :if ($name = "ipinfo.io") do={
+          :set iso [:tostr ($j->"data"->"country")]
+          :if (([:len $iso] = 0) or ($iso = "nil")) do={ :set iso [:tostr ($j->"country")] }
+        }
+        :if ($name = "cloudflare.com") do={ :set iso [:tostr ($j->"country")] }
+        :if ($name = "ipregistry.co") do={ :set iso [:tostr ($j->"location"->"country"->"code")] }
+        :if ($name = "ipapi.co") do={ :set iso [:tostr ($j->"country")] }
+        :if ($name = "ip2location.io") do={ :set iso [:tostr ($j->"country_code")] }
+        :if ($name = "iplocation.com") do={ :set iso [:tostr ($j->"country_code")] }
+        :if ($name = "country.is") do={ :set iso [:tostr ($j->"country")] }
+        :if ($name = "geoapify.com") do={ :set iso [:tostr ($j->"country"->"iso_code")] }
+        :if ($name = "geojs.io") do={ :set iso [:tostr ($j->0->"country")] }
+        :if ($name = "ipapi.is") do={ :set iso [:tostr ($j->"location"->"country_code")] }
+        :if ($name = "ipbase.com") do={ :set iso [:tostr ($j->"data"->"location"->"country"->"alpha2")] }
+        :if ($name = "ipquery.io") do={ :set iso [:tostr ($j->"location"->"country_code")] }
+        :if ($name = "ipwho.is") do={ :set iso [:tostr ($j->"country_code")] }
+        :if ($name = "ip-api.com") do={ :set iso [:tostr ($j->"countryCode")] }
+        :if ($name = "cloudflare cdn") do={
+          :set ctry [:tostr ($j->"country")]
+          :set colo ($j->"colo")
+          :set iata ""
+          :if ([:typeof $colo] = "str") do={ :set iata $colo }
+          :if ([:typeof $colo] = "array") do={
+            :set ci ($colo->"iata")
+            :if ([:typeof $ci] = "str") do={ :set iata $ci }
+          }
+          :if (([:len $ctry] > 0) and ($ctry != "nil") and ([:len $iata] > 0)) do={
+            :set iso ($ctry . " (" . $iata . ")")
+          } else={
+            :if (([:len $ctry] > 0) and ($ctry != "nil")) do={ :set iso $ctry } else={ :set iso "N/A" }
+          }
+        }
+        :if (([:len $iso] = 0) or ($iso = "nil")) do={ :set iso "N/A" }
+      } on-error={
+        :set iso "Server error"
+      }
+    }
+  }
+
+  :put ($name . " " . $iso)
+  :set item { service=$name; ipv4=$iso }
+  :set ($results->[:len $results]) $item
+}
+
+:local probe { publicIp=$publicIp }
+:if ([:len $hoster] > 0) do={ :set ($probe->"hoster") $hoster }
+
+:local payload {\
+  schemaVersion=1;\
+  runId=$runId;\
+  probe=$probe;\
+  launcherVersion=$launcherVer;\
+  ipregion={ version="ros" };\
+  results=$results\
+}
+:local json [:serialize to=json value=$payload]
+:local hdrs ("Content-Type: application/json,Authorization: Bearer " . $vtToken)
+:put "Отправляю ingest..."
+:do {
+  :set r [/tool fetch url=($vtApi . "/api/integrations/ipregion/runs") http-method=post http-header-field=$hdrs http-data=$json output=user as-value]
+  :put ($r->"data")
+} on-error={
+  :put "API недоступен (fetch error)"
+}
+
+:if ($vtDaily = "yes") do={
+  :local ident [/system identity get name]
+  :local h ([:len $ident] + [:len [/system resource get architecture-name]])
+  :local hour (3 + ($h % 4))
+  :local minute (($h * 17) % 60)
+  :local hh $hour
+  :local mm $minute
+  :if ($hour < 10) do={ :set hh ("0" . $hour) }
+  :if ($minute < 10) do={ :set mm ("0" . $minute) }
+  :local startTime ($hh . ":" . $mm . ":00")
+  :local ev ("/tool fetch url=" . $vtApi . "/ic.rsc dst-path=" . $dstFile . "; /import file-name=" . $dstFile)
+  :do { /system scheduler remove [find name=$schedName] } on-error={}
+  /system scheduler add name=$schedName interval=1d start-time=$startTime on-event=$ev policy=read,write,test,policy comment="vps-tracker vt-ic"
+  :put ("Ежедневная проверка: каждый день в " . $startTime . " (" . $schedName . ")")
+  :put ("Снять: /tool fetch url=" . $vtApi . "/ic.rsc?remove=daily dst-path=" . $dstFile . "; /import file-name=" . $dstFile)
+}
+
+}