Cert works

src/services/xray/mod.rs

@@ -5,6 +5,7 @@ use std::collections::HashMap;
 use std::sync::Arc;
 use tokio::sync::RwLock;
 use tokio::time::{Duration, Instant};
+use tracing::error;
 
 pub mod client;
 pub mod config;
@@ -15,24 +16,71 @@ pub mod users;
 pub use client::XrayClient;
 pub use config::XrayConfig;
 
+/// Cached connection with TTL
+#[derive(Clone)]
+struct CachedConnection {
+    client: XrayClient,
+    created_at: Instant,
+}
+
+impl CachedConnection {
+    fn new(client: XrayClient) -> Self {
+        Self {
+            client,
+            created_at: Instant::now(),
+        }
+    }
+    
+    fn is_expired(&self, ttl: Duration) -> bool {
+        self.created_at.elapsed() > ttl
+    }
+}
+
 /// Service for managing Xray servers via gRPC
 #[derive(Clone)]
-pub struct XrayService {}
+pub struct XrayService {
+    connection_cache: Arc<RwLock<HashMap<String, CachedConnection>>>,
+    connection_ttl: Duration,
+}
 
 #[allow(dead_code)]
 impl XrayService {
     pub fn new() -> Self {
-        Self {}
+        Self {
+            connection_cache: Arc::new(RwLock::new(HashMap::new())),
+            connection_ttl: Duration::from_secs(300), // 5 minutes TTL
+        }
+    }
+    
+    /// Get or create cached client for endpoint
+    async fn get_or_create_client(&self, endpoint: &str) -> Result<XrayClient> {
+        // Check cache first
+        {
+            let cache = self.connection_cache.read().await;
+            if let Some(cached) = cache.get(endpoint) {
+                if !cached.is_expired(self.connection_ttl) {
+                    return Ok(cached.client.clone());
+                }
+            }
+        }
+        
+        // Create new connection
+        let client = XrayClient::connect(endpoint).await?;
+        let cached_connection = CachedConnection::new(client.clone());
+        
+        // Update cache
+        {
+            let mut cache = self.connection_cache.write().await;
+            cache.insert(endpoint.to_string(), cached_connection);
+        }
+        
+        Ok(client)
     }
 
-    /// Create a client for the specified server
-    async fn create_client(&self, endpoint: &str) -> Result<XrayClient> {
-        XrayClient::connect(endpoint).await
-    }
 
     /// Test connection to Xray server
     pub async fn test_connection(&self, _server_id: Uuid, endpoint: &str) -> Result<bool> {
-        match self.create_client(endpoint).await {
+        match self.get_or_create_client(endpoint).await {
             Ok(_client) => {
                 // Instead of getting stats (which might fail), just test connection
                 // If we successfully created the client, connection is working
@@ -44,7 +92,7 @@ impl XrayService {
 
     /// Apply full configuration to Xray server
     pub async fn apply_config(&self, _server_id: Uuid, endpoint: &str, config: &XrayConfig) -> Result<()> {
-        let client = self.create_client(endpoint).await?;
+        let client = self.get_or_create_client(endpoint).await?;
         client.restart_with_config(config).await
     }
 
@@ -98,25 +146,25 @@ impl XrayService {
 
     /// Add inbound to running Xray instance
     pub async fn add_inbound(&self, _server_id: Uuid, endpoint: &str, inbound: &Value) -> Result<()> {
-        let client = self.create_client(endpoint).await?;
+        let client = self.get_or_create_client(endpoint).await?;
         client.add_inbound(inbound).await
     }
 
     /// Add inbound with certificate to running Xray instance
     pub async fn add_inbound_with_certificate(&self, _server_id: Uuid, endpoint: &str, inbound: &Value, cert_pem: Option<&str>, key_pem: Option<&str>) -> Result<()> {
-        let client = self.create_client(endpoint).await?;
+        let client = self.get_or_create_client(endpoint).await?;
         client.add_inbound_with_certificate(inbound, cert_pem, key_pem).await
     }
 
     /// Add inbound with users and certificate to running Xray instance
     pub async fn add_inbound_with_users_and_certificate(&self, _server_id: Uuid, endpoint: &str, inbound: &Value, users: &[Value], cert_pem: Option<&str>, key_pem: Option<&str>) -> Result<()> {
-        let client = self.create_client(endpoint).await?;
+        let client = self.get_or_create_client(endpoint).await?;
         client.add_inbound_with_users_and_certificate(inbound, users, cert_pem, key_pem).await
     }
 
     /// Remove inbound from running Xray instance
     pub async fn remove_inbound(&self, _server_id: Uuid, endpoint: &str, tag: &str) -> Result<()> {
-        let client = self.create_client(endpoint).await?;
+        let client = self.get_or_create_client(endpoint).await?;
         client.remove_inbound(tag).await
     }
 
@@ -187,21 +235,70 @@ impl XrayService {
 
     /// Remove user from inbound
     pub async fn remove_user(&self, _server_id: Uuid, endpoint: &str, inbound_tag: &str, email: &str) -> Result<()> {
-        let client = self.create_client(endpoint).await?;
+        let client = self.get_or_create_client(endpoint).await?;
         client.remove_user(inbound_tag, email).await
     }
 
     /// Get server statistics
     pub async fn get_stats(&self, _server_id: Uuid, endpoint: &str) -> Result<Value> {
-        let client = self.create_client(endpoint).await?;
+        let client = self.get_or_create_client(endpoint).await?;
         client.get_stats().await
     }
 
     /// Query specific statistics
     pub async fn query_stats(&self, _server_id: Uuid, endpoint: &str, pattern: &str, reset: bool) -> Result<Value> {
-        let client = self.create_client(endpoint).await?;
+        let client = self.get_or_create_client(endpoint).await?;
         client.query_stats(pattern, reset).await
     }
+    
+    /// Sync entire server with batch operations using single client
+    pub async fn sync_server_inbounds_optimized(
+        &self,
+        server_id: Uuid,
+        endpoint: &str,
+        desired_inbounds: &HashMap<String, crate::services::tasks::DesiredInbound>,
+    ) -> Result<()> {
+        // Get single client for all operations
+        let client = self.get_or_create_client(endpoint).await?;
+        
+        // Perform all operations with the same client
+        for (tag, desired) in desired_inbounds {
+            // Always try to remove inbound first (ignore errors if it doesn't exist)
+            let _ = client.remove_inbound(tag).await;
+            
+            // Create inbound with users
+            let users_json: Vec<Value> = desired.users.iter().map(|user| {
+                serde_json::json!({
+                    "id": user.id,
+                    "email": user.email,
+                    "level": user.level
+                })
+            }).collect();
+            
+            // Build inbound config
+            let inbound_config = serde_json::json!({
+                "tag": desired.tag,
+                "port": desired.port,
+                "protocol": desired.protocol,
+                "settings": desired.settings,
+                "streamSettings": desired.stream_settings
+            });
+            
+            match client.add_inbound_with_users_and_certificate(
+                &inbound_config,
+                &users_json,
+                desired.cert_pem.as_deref(),
+                desired.key_pem.as_deref(),
+            ).await {
+                Err(e) => {
+                    error!("Failed to create inbound {}: {}", tag, e);
+                }
+                _ => {}
+            }
+        }
+        
+        Ok(())
+    }
 }
 
 impl Default for XrayService {