feat(http-proxy): add HTTP reverse proxy with multi-source r2h-token auth

Add HTTP reverse proxy feature for proxying upstream HTTP servers,
primarily for HLS/DASH streaming. Key features:

- URL format: /http/host[:port]/path with default port 80
- Full request passthrough (GET/POST/PUT/DELETE)
- Complete header forwarding (User-Agent, Accept, Cookie, Authorization)
- Response passthrough with chunked encoding support
- Configurable upstream interface (upstream-interface-http)

Add multi-source r2h-token authentication to solve HLS segment auth:
- URL query parameter: ?r2h-token=xxx (highest priority)
- Cookie header: Cookie: r2h-token=xxx
- User-Agent: R2HTOKEN/xxx format

When token is provided via URL query, server sends Set-Cookie header
so subsequent requests (HLS segments) automatically authenticate.

Update OpenWrt support with LuCI UI and init script changes.
Update documentation with HTTP proxy usage and r2h-token explanation.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: stackia

README.md

@@ -12,6 +12,7 @@ rtp2httpd 支持将组播 RTP/UDP 流、RTSP 流转换为 HTTP 单播流，并
 - **UDPxy 兼容性**：完全兼容 UDPxy URL 格式
 - **RTSP 转 HTTP 视频流**：完整支持 RTSP/RTP 协议栈，包括 TCP 和 UDP 传输模式
   - 可以实现 IPTV RTSP 时移源的回看
+- **HTTP 反向代理**：可以反向代理 IPTV 内网 HLS 源，方便在局域网、公网观看
 - **M3U 播放列表集成**：支持 M3U/M3U8 格式，自动识别并转换节目地址，提供标准化的播放列表
   - 支持外部 M3U URL
   - 智能识别 RTP/RTSP URL 并转换为 HTTP 代理格式

docs/configuration.md

@@ -20,8 +20,9 @@ rtp2httpd [选项]
 - `-f, --upstream-interface-fcc <接口>` - FCC 上游接口（覆盖 `-i` 设置）
 - `-t, --upstream-interface-rtsp <接口>` - RTSP 上游接口（覆盖 `-i` 设置）
 - `-r, --upstream-interface-multicast <接口>` - 组播上游接口（覆盖 `-i` 设置）
+- `-y, --upstream-interface-http <接口>` - HTTP 代理上游接口（覆盖 `-i` 设置）
 
-**优先级规则**：`upstream-interface-{fcc,rtsp,multicast}` > `upstream-interface` > 系统路由表
+**优先级规则**：`upstream-interface-{fcc,rtsp,multicast,http}` > `upstream-interface` > 系统路由表
 
 ### 性能优化
 
@@ -127,12 +128,13 @@ upstream-interface = eth0
 # upstream-interface-multicast = eth0  # 组播流量 (RTP/UDP)
 # upstream-interface-fcc = eth1        # FCC
 # upstream-interface-rtsp = eth2       # RTSP
+# upstream-interface-http = eth3       # HTTP 代理
 #
 # 混合配置示例：默认使用 eth0，但 FCC 使用更快的 eth1
 # upstream-interface = eth0
 # upstream-interface-fcc = eth1
 #
-# 优先级：upstream-interface-{multicast,fcc,rtsp} > upstream-interface > 系统路由表
+# 优先级：upstream-interface-{multicast,fcc,rtsp,http} > upstream-interface > 系统路由表
 
 # 外部 M3U 配置（支持 file://, http://, https://）
 # 注意：HTTP/HTTPS 需要安装 curl 命令

docs/url-formats.md

@@ -74,6 +74,58 @@ http://192.168.1.1:5140/rtsp/iptv.example.com:554/channel1?seek=20240101120000&r
 
 关于时移回看的参数处理（时区、偏移），详见 [RTSP 时间处理与时区转换](rtsp-time-processing.md)。
 
+## HTTP 代理
+
+```url
+http://服务器地址:端口/http/上游服务器[:端口]/路径[?参数]
+```
+
+**示例**：
+
+```url
+# 代理 HLS 流（指定端口）
+http://192.168.1.1:5140/http/upstream.example.com:8080/live/stream.m3u8
+
+# 代理 HTTP 请求（省略端口，默认 80）
+http://192.168.1.1:5140/http/api.example.com/video?auth=xxx&quality=hd
+```
+
+### 参数说明
+
+- **上游服务器**：目标 HTTP 服务器地址
+- **端口**（可选）：目标服务器端口，默认 80
+- **路径**：请求路径，包括查询参数
+
+### 使用场景
+
+- 代理上游 HLS/DASH 流媒体，统一认证和访问控制
+- 为不支持直接访问的内网服务提供 HTTP 代理
+- 绕过防火墙限制，通过 rtp2httpd 转发 HTTP 请求
+
+### 注意事项
+
+- 仅支持 HTTP 上游（不支持 HTTPS）
+- 可通过 `upstream-interface-http` 配置指定上游网络接口
+
+### r2h-token 认证
+
+当配置了 r2h-token 时，HTTP 代理支持从多个来源获取认证令牌：
+
+1. **URL 查询参数**（最高优先级）：`?r2h-token=xxx`
+2. **Cookie**：`Cookie: r2h-token=xxx`
+3. **User-Agent**：`User-Agent: ... R2HTOKEN/xxx`
+
+**为什么需要多来源认证？**
+
+HTTP 代理的典型用途是代理上游 HLS 流媒体。HLS 协议的工作方式是：播放器先请求 `.m3u8` 索引文件，然后根据索引文件中的 URL 请求后续的 `.ts` 媒体分片。
+
+问题在于：rtp2httpd 不会改写 m3u8 内容，因此索引文件中的分片 URL 不会包含 `r2h-token` 参数。如果只支持 URL 参数认证，播放器在请求后续分片时就会因为缺少 token 而被拒绝。
+
+多来源认证解决了这个问题：
+
+- **网页播放器**：首次请求 `/playlist.m3u?r2h-token=xxx` 时，服务器下发 `Set-Cookie: r2h-token=xxx`，浏览器后续请求自动携带 Cookie
+- **客户端播放器**：大多数客户端都允许修改 User-Agent，在 User-Agent 中添加 `R2HTOKEN/yourtoken`，所有请求都会自动认证
+
 ## M3U 播放列表访问
 
 ```url

openwrt-support/luci-app-rtp2httpd/htdocs/luci-static/resources/view/rtp2httpd.js

@@ -314,6 +314,19 @@ return view.extend({
     o.datatype = "interface";
     o.depends({ use_config_file: "0", advanced_interface_settings: "1" });
 
+    o = s.taboption(
+      "network",
+      widgets.DeviceSelect,
+      "upstream_interface_http",
+      _("Upstream HTTP Proxy Interface"),
+      _(
+        "Interface to use for HTTP proxy upstream requests (default: use routing table)"
+      )
+    );
+    o.noaliases = true;
+    o.datatype = "interface";
+    o.depends({ use_config_file: "0", advanced_interface_settings: "1" });
+
     o = s.taboption(
       "network",
       form.Value,

openwrt-support/luci-app-rtp2httpd/po/zh_Hans/rtp2httpd.po

@@ -289,6 +289,16 @@ msgstr "上游组播接口"
 msgid "Upstream RTSP Interface"
 msgstr "上游 RTSP 接口"
 
+#: htdocs/luci-static/resources/view/rtp2httpd.js:321
+msgid "Upstream HTTP Proxy Interface"
+msgstr "上游 HTTP 代理接口"
+
+#: htdocs/luci-static/resources/view/rtp2httpd.js:323
+msgid ""
+"Interface to use for HTTP proxy upstream requests (default: use routing "
+"table)"
+msgstr "用于 HTTP 代理上游请求的接口（默认：使用路由表）"
+
 #: htdocs/luci-static/resources/view/rtp2httpd.js:198
 msgid "Use Config File"
 msgstr "使用配置文件"

openwrt-support/rtp2httpd/files/rtp2httpd.conf

@@ -16,6 +16,7 @@ config rtp2httpd
 	# option upstream_interface_multicast 'eth0'
 	# option upstream_interface_fcc 'eth1'
 	# option upstream_interface_rtsp 'eth2'
+	# option upstream_interface_http 'eth3'
 
 	# option maxclients '5'
 	# option workers '1'

openwrt-support/rtp2httpd/files/rtp2httpd.init

@@ -43,6 +43,7 @@ start_instance() {
             append_arg "$cfg" upstream_interface_multicast "--upstream-interface-multicast"
             append_arg "$cfg" upstream_interface_fcc "--upstream-interface-fcc"
             append_arg "$cfg" upstream_interface_rtsp "--upstream-interface-rtsp"
+            append_arg "$cfg" upstream_interface_http "--upstream-interface-http"
         else
             # Simple mode - use default interface for all
             append_arg "$cfg" upstream_interface "--upstream-interface"

src/Makefile.am

@@ -20,6 +20,7 @@ rtp2httpd_SOURCES = \
 	fcc_huawei.c \
 	stream.c \
 	rtsp.c \
+	http_proxy.c \
 	stun.c \
 	snapshot.c \
 	timezone.c \
@@ -53,6 +54,7 @@ noinst_HEADERS = \
 	fcc_huawei.h \
 	stream.h \
 	rtsp.h \
+	http_proxy.h \
 	stun.h \
 	snapshot.h \
 	timezone.h \

src/configuration.c

@@ -39,6 +39,7 @@ int cmd_upstream_interface_set = 0;
 int cmd_upstream_interface_fcc_set = 0;
 int cmd_upstream_interface_rtsp_set = 0;
 int cmd_upstream_interface_multicast_set = 0;
+int cmd_upstream_interface_http_set = 0;
 int cmd_fcc_listen_port_range_set = 0;
 int cmd_status_page_path_set = 0;
 int cmd_player_page_path_set = 0;
@@ -513,6 +514,14 @@ void parse_global_sec(char *line) {
     return;
   }
 
+  if (strcasecmp("upstream-interface-http", param) == 0) {
+    if (set_if_not_cmd_override(cmd_upstream_interface_http_set,
+                                "upstream-interface-http")) {
+      strncpy(config.upstream_interface_http, value, IFNAMSIZ - 1);
+    }
+    return;
+  }
+
   if (strcasecmp("mcast-rejoin-interval", param) == 0) {
     if (set_if_not_cmd_override(cmd_mcast_rejoin_interval_set,
                                 "mcast-rejoin-interval")) {
@@ -858,6 +867,8 @@ void config_init(void) {
     memset(config.upstream_interface_rtsp, 0, IFNAMSIZ);
   if (!cmd_upstream_interface_multicast_set)
     memset(config.upstream_interface_multicast, 0, IFNAMSIZ);
+  if (!cmd_upstream_interface_http_set)
+    memset(config.upstream_interface_http, 0, IFNAMSIZ);
 
   /* External M3U settings (only if not set by command line) */
   if (!cmd_external_m3u_update_interval_set)
@@ -974,6 +985,8 @@ void usage(FILE *f, char *progname) {
       "traffic (overrides -i)\n"
       "\t-r --upstream-interface-multicast <interface>  Interface for "
       "multicast traffic (overrides -i)\n"
+      "\t-y --upstream-interface-http <interface>  Interface for HTTP proxy "
+      "upstream traffic (overrides -i)\n"
       "\t-R --mcast-rejoin-interval <seconds>  Periodic multicast rejoin "
       "interval (0=disabled, default 0)\n"
       "\t-F --ffmpeg-path <path>  Path to ffmpeg executable (default: ffmpeg)\n"
@@ -1048,6 +1061,7 @@ void parse_cmd_line(int argc, char *argv[]) {
       {"upstream-interface-fcc", required_argument, 0, 'f'},
       {"upstream-interface-rtsp", required_argument, 0, 't'},
       {"upstream-interface-multicast", required_argument, 0, 'r'},
+      {"upstream-interface-http", required_argument, 0, 'y'},
       {"mcast-rejoin-interval", required_argument, 0, 'R'},
       {"ffmpeg-path", required_argument, 0, 'F'},
       {"ffmpeg-args", required_argument, 0, 'A'},
@@ -1060,7 +1074,7 @@ void parse_cmd_line(int argc, char *argv[]) {
       {"rtsp-stun-server", required_argument, 0, 'N'},
       {0, 0, 0, 0}};
 
-  const char short_opts[] = "v:qhUm:w:b:B:c:l:P:H:XT:i:f:t:r:R:F:A:s:p:M:I:SCZN:";
+  const char short_opts[] = "v:qhUm:w:b:B:c:l:P:H:XT:i:f:t:r:y:R:F:A:s:p:M:I:SCZN:";
   int option_index, opt;
   int configfile_failed = 1;
 
@@ -1189,6 +1203,10 @@ void parse_cmd_line(int argc, char *argv[]) {
       strncpy(config.upstream_interface_multicast, optarg, IFNAMSIZ - 1);
       cmd_upstream_interface_multicast_set = 1;
       break;
+    case 'y':
+      strncpy(config.upstream_interface_http, optarg, IFNAMSIZ - 1);
+      cmd_upstream_interface_http_set = 1;
+      break;
     case 'R':
       if (atoi(optarg) < 0) {
         logger(LOG_ERROR, "Invalid mcast-rejoin-interval! Ignoring.");

src/configuration.h

@@ -67,6 +67,9 @@ typedef struct {
   char upstream_interface_multicast
       [IFNAMSIZ]; /* Interface for upstream multicast media requests (overrides
                      upstream_interface) */
+  char upstream_interface_http[IFNAMSIZ]; /* Interface for HTTP proxy upstream
+                                             requests (overrides
+                                             upstream_interface) */
 
   /* Multicast settings */
   int mcast_rejoin_interval; /* Periodic multicast rejoin interval in seconds