Add TLSMirror bootstrap enrollment and self enrollment feature

[xiaokangwang]

This merge request adds bootstrap enrollment via request roundtripper to support domain fronting based enrollment.

Additionally, self-enrollment is added: tlsmirror now can create primary enrollment connection over TLSMirror, which itself is enrolled by bootstrap enrollment connections.

Example server:

{
  "log": {
    "error": {
      "level": "Debug",
      "type": "Console"
    },
    "access": {
      "type": "None"
    }
  },
  "inbounds": [
    {
      "port": 10293,
      "listen": "127.0.0.1",
      "protocol": "vmess",
      "settings": {
        "users": [
          "*****"
        ]
      },
      "streamSettings": {
        "transport": "tlsmirror",
        "transportSettings": {
          "primary_key": "*****",
          "forward_tag": "direct",
          "forward_port": 443,
          "forward_address": "doubleclick.net",
          "explicit_nonce_ciphersuites": [
            49195
          ],
          "transport_layer_padding": {
            "enabled": true
          },
          "defer_instance_derived_write_time": {
            "base_nanoseconds": 200000000,
            "uniform_random_multiplier_nanoseconds": 100000000
          },
          "connection_enrolment": {
            "primary_ingress_outbound": "tlsmirror_control_ingress",
            "bootstrap_ingress_config": [
              {
                "@type": "types.v2fly.org/v2ray.core.transport.internet.tlsmirror.mirrorenrollment.roundtripperenrollmentconfirmation.ServerConfig",
                "listen": "127.0.0.1:10295",
                "round_tripper_server": {
                  "@type": "types.v2fly.org/v2ray.core.transport.internet.request.roundtripper.httprt.ServerConfig",
                  "http": {
                  }
                }
              }
            ]
          },
          "sequence_watermarking_enabled": true
        }
      }
    },
    {
      "port": 10294,
      "listen": "127.0.0.1",
      "protocol": "dokodemo-door",
      "settings": {
        "networks": [
          "tcp"
        ],
        "address": "*****.tlsmirror-controlconnection.v2fly.arpa",
        "port": 80
      }
    }
  ],
  "outbounds": [
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {
      }
    }
  ],
  "router": {
    "domainStrategy": "AsIs",
    "rule": [
      {
        "tag": "tlsmirror_control_ingress",
        "domain": [
          {
            "type": "RootDomain",
            "value": "*****.tlsmirror-controlconnection.v2fly.arpa"
          }
        ]
      }
    ]
  }
}

Client:

{
  "log": {
    "error": {
      "level": "Debug",
      "type": "Console"
    },
    "access": {
      "type": "None"
    }
  },
  "inbounds": [
    {
      "protocol": "socks",
      "settings": {
        "udpEnabled": true,
        "address": "127.0.0.1",
        "packetEncoding": "Packet"
      },
      "port": 12830,
      "listen": "127.0.0.1"
    }
  ],
  "outbounds": [
    {
      "tag": "tlsmirror_payload",
      "protocol": "vmess",
      "settings": {
        "port": 10293,
        "uuid": "*****",
        "address": "127.0.0.1"
      },
      "streamSettings": {
        "transport": "#v2ray.core.transport.internet.tlsmirror.server.Config",
        "transportSettings": {
          "primary_key": "*****",
          "forward_tag": "direct",
          "forward_port": 443,
          "forward_address": "doubleclick.net",
          "carrier_connection_tag": "tlsmirror_ingress",
          "embedded_traffic_generator": {
            "steps": [
              {
                "host": "doubleclick.net",
                "path": "/robots.txt",
                "method": "GET",
                "connection_ready": true,
                "connection_recall_exit": true,
                "wait_time": {
                  "base_nanoseconds": 200000000,
                  "uniform_random_multiplier_nanoseconds": 600000000
                },
                "next_step": [
                  {
                    "weight": 1,
                    "goto_location": 0
                  }
                ]
              }
            ]
          },
          "explicit_nonce_ciphersuites": [
            49195
          ],
          "transport_layer_padding": {
            "enabled": true
          },
          "connection_enrolment": {
            "primary_egress_outbound": "",
            "bootstrap_egress_config": [
              {
                "@type": "types.v2fly.org/v2ray.core.transport.internet.tlsmirror.mirrorenrollment.roundtripperenrollmentconfirmation.ClientConfig",
                "round_tripper_client": {
                  "@type": "types.v2fly.org/v2ray.core.transport.internet.request.roundtripper.httprt.ClientConfig",
                  "http": {
                    "path": "1234",
                    "urlPrefix": "http://1234.com/"
                  },
                  "allow_http": true,
                  "h2_pool_size": 1
                },
                "dest": "127.0.0.1:10295",
                "outbound_tag": "direct"
              }
            ]
          },
          "sequence_watermarking_enabled": true
        },
        "security": "tls",
        "securitySettings": {
          "serverName": "doubleclick.net",
          "allowInsecure": false,
          "nextProtocol": [
            "h2",
            "http/1.1"
          ],
          "min_version": "TLS1_2",
          "max_version": "TLS1_2",
          "ciphersuites": [
            49195
          ]
        }
      }
    },
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {
      }
    },
    {
      "tag": "tlsmirror_control_egress",
      "protocol": "freedom",
      "settings": {
        "destination_override": {
          "server": {
            "address": "127.0.0.1",
            "port": 10294
          }
        }
      }
    }
  ]
}

[codecov]

Codecov Report

❌ Patch coverage is 0% with 416 lines in your changes missing coverage. Please review.
✅ Project coverage is 22.61%. Comparing base (7227b98) to head (903d44b).
⚠️ Report is 12 commits behind head on master.

Files with missing lines	Patch %	Lines
...nt/roundtripperenrollmentconfirmation/config.pb.go	0.00%	101 Missing ⚠️
...lment/roundtripperenrollmentconfirmation/client.go	0.00%	95 Missing ⚠️
...lment/roundtripperenrollmentconfirmation/server.go	0.00%	75 Missing ⚠️
...port/internet/tlsmirror/mirrorenrollment/client.go	0.00%	49 Missing ⚠️
...llment/httpenrollmentconfirmation/clientbuilder.go	0.00%	31 Missing ⚠️
...port/internet/tlsmirror/mirrorenrollment/server.go	0.00%	27 Missing ⚠️
...nternet/tlsmirror/mirrorcommon/loopback_protect.go	0.00%	16 Missing ⚠️
common/environment/rootcap_impl.go	0.00%	6 Missing ⚠️
transport/internet/tlsmirror/data.pb.go	0.00%	5 Missing ⚠️
transport/internet/tlsmirror/server/client.go	0.00%	5 Missing ⚠️
... and 2 more

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #3541      +/-   ##
==========================================
- Coverage   22.78%   22.61%   -0.18%     
==========================================
  Files         819      824       +5     
  Lines       52429    52831     +402     
==========================================
  Hits        11946    11946              
- Misses      39279    39683     +404     
+ Partials     1204     1202       -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.