添加屏蔽协议到面板，免去手动操作

go-gost/go.mod

@@ -5,7 +5,6 @@ go 1.23.0
 toolchain go1.23.4
 
 require (
-	github.com/apernet/OpenGFW v0.0.0-00010101000000-000000000000
 	github.com/go-gost/core v0.3.1
 	github.com/go-gost/x v0.5.3
 	github.com/judwhite/go-svc v1.2.1
@@ -149,4 +148,3 @@ require (
 
 replace github.com/go-gost/x => ./x
 
-replace github.com/apernet/OpenGFW => ./gfw

go-gost/main.go

@@ -4,7 +4,6 @@ import (
 	"context"
 	"flag"
 	"fmt"
-	//"github.com/apernet/OpenGFW/cmd"
 	"log"
 	_ "net/http/pprof"
 	"os"
@@ -120,7 +119,7 @@ func main() {
 	log := xlogger.NewLogger()
 	logger.SetDefault(log)
 
-	wsReporter := socket.StartWebSocketReporterWithConfig(config.Addr, config.Secret, "1.2.2")
+	wsReporter := socket.StartWebSocketReporterWithConfig(config.Addr, config.Secret, config.Http, config.Tls, config.Socks, "1.2.3")
 	defer wsReporter.Stop()
 	service.SetHTTPReportURL(config.Addr, config.Secret)
 

go-gost/x/service/service.go

@@ -52,6 +52,14 @@ var isSocks = 0
 
 var needWrap = false
 
+// SetProtocolBlock sets protocol blocking switches and recomputes wrapper need
+func SetProtocolBlock(httpOn int, tlsOn int, socksOn int) {
+    isHttp = httpOn
+    isTls = tlsOn
+    isSocks = socksOn
+    needWrap = isTls+isSocks+isHttp > 0
+}
+
 type Option func(opts *options)
 
 func init() {

go-gost/x/socket/websocket_reporter.go

@@ -8,17 +8,20 @@ import (
 	"fmt"
 	"net"
 	"net/url"
+	"strconv"
 	"strings"
 	"sync" // 新增：用于管理连接状态的互斥锁
 	"time"
 
 	"github.com/go-gost/x/config"
+	"github.com/go-gost/x/service"
 	"github.com/go-gost/x/internal/util/crypto"
 	"github.com/gorilla/websocket"
 	"github.com/shirou/gopsutil/v3/cpu"
 	"github.com/shirou/gopsutil/v3/host"
 	"github.com/shirou/gopsutil/v3/mem"
 	psnet "github.com/shirou/gopsutil/v3/net"
+	"os"
 )
 
 // SystemInfo 系统信息结构体
@@ -524,6 +527,11 @@ func (w *WebSocketReporter) routeCommand(cmd CommandMessage) {
 		response.Type = "TcpPingResponse"
 		response.Data = tcpPingResult
 
+	// Protocol blocking switches
+	case "SetProtocol":
+		err = w.handleSetProtocol(cmd.Data)
+		response.Type = "SetProtocolResponse"
+
 	default:
 		err = fmt.Errorf("未知命令类型: %s", cmd.Type)
 		response.Type = "UnknownCommandResponse"
@@ -765,6 +773,85 @@ func (w *WebSocketReporter) handleDeleteLimiter(data interface{}) error {
 	return deleteLimiter(deleteReq)
 }
 
+// handleSetProtocol 处理设置屏蔽协议的命令
+func (w *WebSocketReporter) handleSetProtocol(data interface{}) error {
+    jsonData, err := json.Marshal(data)
+    if err != nil {
+        return fmt.Errorf("序列化协议设置失败: %v", err)
+    }
+
+    // 支持 {"http":0/1, "tls":0/1, "socks":0/1}
+    var req struct {
+        HTTP  *int `json:"http"`
+        TLS   *int `json:"tls"`
+        SOCKS *int `json:"socks"`
+    }
+    if err := json.Unmarshal(jsonData, &req); err != nil {
+        return fmt.Errorf("解析协议设置失败: %v", err)
+    }
+
+    // 读取当前值作为默认
+    httpVal, tlsVal, socksVal := 0, 0, 0
+
+    if req.HTTP != nil {
+        if *req.HTTP != 0 && *req.HTTP != 1 {
+            return fmt.Errorf("http 取值必须为0或1")
+        }
+        httpVal = *req.HTTP
+    }
+    if req.TLS != nil {
+        if *req.TLS != 0 && *req.TLS != 1 {
+            return fmt.Errorf("tls 取值必须为0或1")
+        }
+        tlsVal = *req.TLS
+    }
+    if req.SOCKS != nil {
+        if *req.SOCKS != 0 && *req.SOCKS != 1 {
+            return fmt.Errorf("socks 取值必须为0或1")
+        }
+        socksVal = *req.SOCKS
+    }
+
+    // 设置至 service，全量传递（未提供的值沿用0）
+    service.SetProtocolBlock(httpVal, tlsVal, socksVal)
+
+    // 同步写入本地 config.json
+    if err := updateLocalConfigJSON(httpVal, tlsVal, socksVal); err != nil {
+        return fmt.Errorf("写入config.json失败: %v", err)
+    }
+    return nil
+}
+
+// updateLocalConfigJSON 将 http/tls/socks 写入工作目录下的 config.json
+func updateLocalConfigJSON(httpVal int, tlsVal int, socksVal int) error {
+    path := "config.json"
+
+    // 读取现有配置
+    type LocalConfig struct {
+        Addr   string `json:"addr"`
+        Secret string `json:"secret"`
+        Http   int    `json:"http"`
+        Tls    int    `json:"tls"`
+        Socks  int    `json:"socks"`
+    }
+
+    var cfg LocalConfig
+    if b, err := os.ReadFile(path); err == nil {
+        _ = json.Unmarshal(b, &cfg)
+    }
+
+    cfg.Http = httpVal
+    cfg.Tls = tlsVal
+    cfg.Socks = socksVal
+
+    // 写回
+    data, err := json.MarshalIndent(cfg, "", "  ")
+    if err != nil {
+        return err
+    }
+    return os.WriteFile(path, data, 0644)
+}
+
 // handleCall 处理服务端的call回调消息
 func (w *WebSocketReporter) handleCall(data interface{}) error {
 	// 解析call数据
@@ -931,15 +1018,15 @@ func getMemoryInfo() MemoryInfo {
 	return memInfo
 }
 
-// StartWebSocketReporterWithConfig 使用配置启动WebSocket报告器
-func StartWebSocketReporterWithConfig(Addr string, Secret string, Version string) *WebSocketReporter {
+// StartWebSocketReporterWithConfig 使用配置字段启动WebSocket报告器
+func StartWebSocketReporterWithConfig(addr string, secret string, http int, tls int, socks int, version string) *WebSocketReporter {
 
 	// 构建包含本机IP的WebSocket URL
-	var fullURL = "ws://" + Addr + "/system-info?type=1&secret=" + Secret + "&version=" + Version
+	fullURL := "ws://" + addr + "/system-info?type=1&secret=" + secret + "&version=" + version + "&http=" + strconv.Itoa(http) + "&tls=" + strconv.Itoa(tls) + "&socks=" + strconv.Itoa(socks)
 
 	fmt.Printf("🔗 WebSocket连接URL: %s\n", fullURL)
 
-	reporter := NewWebSocketReporter(fullURL, Secret) // Pass Secret here
+	reporter := NewWebSocketReporter(fullURL, secret)
 	reporter.Start()
 	return reporter
 }