UDP/RTP流加扰转发

当利用UDP/RTP在互联网上传播实时流时，为了保证安全性，避免被恶意插播，除了安全策略，通常需要采用VPN等手段保证实时流安全。然而，随着行为管理软件的布署，采用证书加密的实时流越来越不安全，在人员管理不严的情况下很容易受到行为管理软件的攻击，因此对传输的内容必须进行二次加密，以保证流内容的安全。

有条件的情况下，应采用CA。

#include 
    
    
     
     
#include 
     
     
      
      
#include 
      
      
       
       
#include 
       
       
        
        
#include 
        
        
          #include 
         
           #include 
          
            #define clean_up() {close(sfd_in); close(sfd_out); } int sfd_in, sfd_out; int sin_size; socklen_t size; struct sockaddr_in addr_in, addr_out, addr_serv; int addr_in_len = sizeof(addr_in); int addr_out_len = sizeof(addr_out); int addr_serv_len = sizeof(addr_serv); int encrypt_before_send = 0; int MTU = 1400; char IP_FROM[20] = "127.0.0.1"; char IP_OUT[20] = "127.0.0.1"; uint16_t PORT_IN = 1234; uint16_t PORT_OUT = 1244; void sp_fgets(FILE *fp, char *buf, int limit) { int i = 0; char ch; while(!feof(fp)) { ch = fgetc(fp); if(ch == 0x0a || ch == 0x0d || ch== 0x00 || ch == '#') break; else { if(i < limit-1) { buf[i] = ch; } } i++; } buf[i] = 0; } void sp_strcpy(char *s1, const char *s2, int limit) { int i; for(i=0; i<(limit-1); i++) { if(s2[i] == 0) break; else s1[i] = s2[i]; } s1[i]=0; } void encrypt_stream1(char *buf, int buf_len) { int i; for(i=0; i 
           
             1510) printf("Invalid MTU configuration. Use default MTU=1400.\n");} if(strcmp(buf1,"encrypt") == 0){ if(strcmp(buf2,"clean")==0) { encrypt_before_send = 0; } } } addr_in.sin_family = AF_INET; addr_in.sin_port = htons(PORT_IN); addr_in.sin_addr.s_addr = htonl(INADDR_ANY); bzero(&(addr_in.sin_zero),8); addr_out.sin_family = AF_INET; addr_out.sin_port = htons(PORT_OUT); addr_out.sin_addr.s_addr = inet_addr(IP_OUT); bzero(&(addr_out.sin_zero),8); addr_serv.sin_family = AF_INET; addr_serv.sin_port = htons(0); addr_serv.sin_addr.s_addr = htonl(INADDR_ANY); bzero(&(addr_serv.sin_zero),8); fclose(fp); } int main(int argc, char *argv[]) { int err; int recv_in_len, recv_out_len; int recv_pass_total=0; int recv_drop_total=0; char buf [MTU]; memset(&addr_in, 0, sizeof(addr_in)); memset(&addr_out, 0, sizeof(addr_out)); memset(&addr_serv, 0, sizeof(addr_serv)); init_handler(); printf("UDP Scrambler / Descrambler v0.11\n"); printf("----------------------------------\n"); if(argc!=2) { printf("Usage: %s [config]\n",argv[0]); exit(1);} else read_config(argv[1]); printf("Input: udp://127.0.0.1:%d\n", PORT_IN); printf("From IP: %s MTU: %d\n", IP_FROM, MTU); printf("Output: udp://%s:%d\n", IP_OUT,PORT_OUT); sfd_in = socket(AF_INET, SOCK_DGRAM, 0); sfd_out = socket(AF_INET, SOCK_DGRAM, 0); if (sfd_in == -1) {perror("Error: Fail in opening sfd_in.\n\n"); clean_up(); exit(1);} if (sfd_out == -1) {perror("Error: Fail in opening sfd_out.\n\n"); clean_up(); exit(1);} err = bind(sfd_in, (struct sockaddr *)(&addr_in), sizeof(struct sockaddr)); if (err == -1) {perror("Error: Fail in binding sfd_in.\n\n"); clean_up(); exit(1);} printf("\033[?25l"); printf("\033[s"); while (1) { int i; printf("\033[uPass=%7.0fkB, Rejected=%7.0fkB", (double)recv_pass_total / 1024, (double)recv_drop_total / 1024); if (recv_in_len > 0 && addr_serv.sin_addr.s_addr == inet_addr(IP_FROM)) { sendto(sfd_out, buf, sizeof(buf), 0, (struct sockaddr *)(&addr_out), sizeof(struct sockaddr)); recv_pass_total += recv_in_len; recv_in_len = 0; } recv_in_len = recvfrom(sfd_in, buf, MTU, 0, (struct sockaddr *)(&addr_serv), &addr_serv_len); if (recv_in_len > 0 && addr_serv.sin_addr.s_addr == inet_addr(IP_FROM)) { if(encrypt_before_send != 0) encrypt_stream(buf, sizeof(buf)); } else { recv_drop_total += recv_in_len; } } clean_up(); }