PHP Socket 客戶端開發完整指南：阻塞/非阻塞、SSL/TLS、超時控制、協議解析與健壯封裝

<?php
class SecureTcpClient extends TcpClient {
    private $sslOptions = [];
    
    public function __construct(string $host, int $port, array $sslOptions = [], float $timeout = 5.0) {
        parent::__construct($host, $port, $timeout);
        $this->sslOptions = array_merge([
            'verify_peer'       => true,      // 生產環境必須 true
            'verify_peer_name'  => true,      // 驗證 CN/SAN
            'allow_self_signed' => false,     // 生產禁用自簽名
            'cafile'            => null,      // CA 證書路徑 (驗證私有 CA)
            'local_cert'        => null,      // 客戶端證書 (雙向認證)
            'local_pk'          => null,      // 客戶端私鑰
            'ciphers'           => 'HIGH:!aNULL:!MD5:!3DES', // 加密套件
            'disable_compression' => true,    // 防 CRIME 攻擊
        ], $sslOptions);
    }

    public function connect(bool $persistent = false): bool {
        $this->close();
        $flags = $persistent ? STREAM_CLIENT_PERSISTENT : 0;
        
        // 先建立 TCP 連接
        $this->socket = @stream_socket_client(
            "tcp://{$this->host}:{$this->port}",
            $errno, $errstr,
            $this->timeout,
            $flags | STREAM_CLIENT_CONNECT
        );
        if (!$this->socket) { /* 錯誤處理 */ return false; }
        
        // 設置超時
        stream_set_timeout($this->socket, (int)$this->timeout, ($this->timeout - (int)$this->timeout) * 1e6);
        
        // 啟用 SSL/TLS 加密 (非阻塞握手需配合 select，此處阻塞模式)
        $cryptoMethod = STREAM_CRYPTO_METHOD_TLS_CLIENT; // 或 TLSv1_2_CLIENT 等
        $success = @stream_socket_enable_crypto($this->socket, true, $cryptoMethod, $this->sslOptions);
        
        if (!$success) {
            $err = error_get_last();
            $this->lastError = "SSL 握手失敗: " . ($err['message'] ?? 'Unknown');
            $this->close();
            return false;
        }
        
        $this->connected = true;
        return true;
    }
}

// 使用：連接 HTTPS API (驗證系統 CA)
$client = new SecureTcpClient('api.example.com', 443, [
    'cafile' => '/etc/ssl/certs/ca-certificates.crt', // Linux 系統 CA 捆綁包
]);
if ($client->connect()) {
    $client->write("GET /v1/data HTTP/1.1\r\nHost: api.example.com\r\nConnection: close\r\n\r\n");
    $response = '';
    while (!feof($client->socket)) $response .= fread($client->socket, 8192);
    echo $response;
}
?>

非阻塞 I/O 多路復用 (高併發客戶端/服務端核心)

<?php
class NonBlockingClient {
    private $sockets = []; // fd => ['socket'=>, 'host'=>, 'port'=>, 'buffer'=>'', 'callbacks'=>[]]
    
    public function addConnection(string $host, int $port, callable $onConnect, callable $onData, callable $onClose, float $timeout = 5.0): int {
        $socket = stream_socket_client(
            "tcp://$host:$port",
            $errno, $errstr,
            $timeout,
            STREAM_CLIENT_CONNECT | STREAM_CLIENT_ASYNC_CONNECT // 關鍵：非阻塞連接
        );
        if (!$socket) throw new RuntimeException("非阻塞連接啟動失敗: $errstr");
        
        stream_set_blocking($socket, false); // 確保非阻塞
        $fd = (int)$socket;
        $this->sockets[$fd] = [
            'socket' => $socket,
            'host' => $host,
            'port' => $port,
            'state' => 'connecting',
            'write_buffer' => '',
            'read_buffer' => '',
            'on_connect' => $onConnect,
            'on_data' => $onData,
            'on_close' => $onClose,
            'timeout' => $timeout,
            'last_activity' => microtime(true),
        ];
        return $fd;
    }
    
    public function send(int $fd, string $data): bool {
        if (!isset($this->sockets[$fd])) return false;
        $this->sockets[$fd]['write_buffer'] .= $data;
        return true;
    }
    
    public function runOnce(float $selectTimeout = 0.1): void {
        $read = $write = $except = [];
        $now = microtime(true);
        
        foreach ($this->sockets as $fd => &$conn) {
            $sock = $conn['socket'];
            // 連接中/有數據待發送 -> 關注可寫
            if ($conn['state'] === 'connecting' || $conn['write_buffer'] !== '') {
                $write[] = $sock;
            }
            // 已連接 -> 關注可讀
            if ($conn['state'] === 'connected') {
                $read[] = $sock;
            }
            $except[] = $sock; // 關注異常
            
            // 空閒超時檢查
            if ($now - $conn['last_activity'] > $conn['timeout']) {
                $this->closeConnection($fd, 'timeout');
                continue;
            }
        }
        
        if (empty($read) && empty($write) && empty($except)) return;
        
        // select 系統調用 (微秒級超時)
        $tv_sec = (int)$selectTimeout;
        $tv_usec = ($selectTimeout - $tv_sec) * 1e6;
        $num = @stream_select($read, $write, $except, $tv_sec, $tv_usec);
        
        if ($num === false) return; // 信號中斷等
        
        // 處理可寫 (連接建立/發送緩衝)
        foreach ($write as $sock) {
            $fd = (int)$sock;
            if (!isset($this->sockets[$fd])) continue;
            $conn = &$this->sockets[$fd];
            
            if ($conn['state'] === 'connecting') {
                // 檢查連接是否完成 (getsockopt SO_ERROR)
                $err = socket_get_option($sock, SOL_SOCKET, SO_ERROR); // 需 ext-sockets 或 stream_socket_get_name 技巧
                // Stream API 簡易判斷：嘗試寫入空串或獲取 peer name
                if (@stream_socket_get_name($sock, true) !== false) {
                    $conn['state'] = 'connected';
                    $conn['last_activity'] = $now;
                    ($conn['on_connect'])($fd, true);
                } else {
                    $this->closeConnection($fd, 'connect_failed');
                }
            } elseif ($conn['write_buffer'] !== '') {
                $written = @fwrite($sock, $conn['write_buffer']);
                if ($written > 0) {
                    $conn['write_buffer'] = substr($conn['write_buffer'], $written);
                    $conn['last_activity'] = $now;
                } elseif ($written === false) {
                    $this->closeConnection($fd, 'write_error');
                }
            }
        }
        
        // 處理可讀
        foreach ($read as $sock) {
            $fd = (int)$sock;
            if (!isset($this->sockets[$fd])) continue;
            $conn = &$this->sockets[$fd];
            
            $data = @fread($sock, 8192);
            if ($data === '' || $data === false) { // EOF 或錯誤
                $this->closeConnection($fd, $data === false ? 'read_error' : 'eof');
            } else {
                $conn['read_buffer'] .= $data;
                $conn['last_activity'] = $now;
                // 簡易：直接回調原始數據，實際應按協議幀解析
                ($conn['on_data'])($fd, $data);
            }
        }
        
        // 處理異常
        foreach ($except as $sock) {
            $this->closeConnection((int)$sock, 'exception');
        }
    }
    
    private function closeConnection(int $fd, string $reason): void {
        if (isset($this->sockets[$fd])) {
            $conn = $this->sockets[$fd];
            @fclose($conn['socket']);
            ($conn['on_close'])($fd, $reason);
            unset($this->sockets[$fd]);
        }
    }
}

// 使用：同時連接 100 個服務
$nb = new NonBlockingClient();
for ($i = 1; $i <= 100; $i++) {
    $nb->addConnection("10.0.0.$i", 9501,
        fn($fd, $ok) => $ok ? $nb->send($fd, "PING\n") : null,
        fn($fd, $data) => echo "FD$fd: $data",
        fn($fd, $reason) => echo "FD$fd closed: $reason"
    );
}
// 事件循環
while (!empty($nb->sockets)) { $nb->runOnce(0.5); }
?>

應用層協議解析框架 (解決 TCP 粘包/拆包)

TCP 是流式協議，**無消息邊界**。必須在應用層定義幀格式：

• 定長：固定 Header + Body 長度字段 (如 4 字節網絡序長度)。
• 分隔符：\n, \r\n, \0, | 等。
• 長度前綴 + 內容：[Len:4bytes][Body:Len bytes] (最通用、高效)。

<?php
class ProtocolParser {
    // 解析「長度前綴(4字節大端)+JSON體」協議
    public static function parseLengthPrefixedJson(string &$buffer): ?array {
        if (strlen($buffer) < 4) return null; // Header 不全
        $len = unpack('N', substr($buffer, 0, 4))[1]; // 大端無符號 32位
        if ($len > 10 * 1024 * 1024) throw new RuntimeException("封包過大: $len");
        if (strlen($buffer) < 4 + $len) return null; // Body 不全
        
        $json = substr($buffer, 4, $len);
        $buffer = substr($buffer, 4 + $len); // 消費掉
        $data = json_decode($json, true);
        if (json_last_error() !== JSON_ERROR_NONE) throw new RuntimeException("JSON 解析失敗");
        return $data;
    }
    
    // 編碼
    public static function encodeLengthPrefixedJson(array $data): string {
        $json = json_encode($data, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
        $len = strlen($json);
        return pack('N', $len) . $json; // 大端長度 + JSON
    }
}

// 在 NonBlockingClient 中集成：
$conn['parser'] = function(string &$buf) {
    while (($msg = ProtocolParser::parseLengthPrefixedJson($buf)) !== null) {
        ($conn['on_message'])($fd, $msg); // 回調完整消息對象
    }
};
// on_data 回調改為：
'on_data' => function($fd, $data) use ($nb) {
    $nb->sockets[$fd]['read_buffer'] .= $data;
    $nb->sockets[$fd]['parser']($nb->sockets[$fd]['read_buffer']);
}

生產級錯誤處理與監控清單

總結

PHP Socket 客戶端開發的核心層次：

1. 傳輸層：優先使用 Stream API (stream_socket_client)，原生支援超時、SSL、非阻塞連接、上下文選項，語義清晰、跨平台一致。
2. I/O 模型：
   • 低併發/簡單交互 → **同步阻塞** + 循環讀寫封裝。
   • 高併發/長連接/多連接 → **非阻塞 + stream_select 多路復用** (單進程管理萬級連接)。
   • 極高併發/複雜業務 → **Swoole/OpenSwoole/RoadRunner** (協程/異步引擎，C 底層 epoll/kqueue/IOCP)。
3. 安全層：**強制 TLS 1.2+**，驗證證書鏈、主機名、撤銷狀態；雙向認證保護敏感服務。
4. 協議層：**定義明確幀格式 (長度前綴推薦)**，實現緩衝區解析器徹底解決粘包/拆包。
5. 可靠性：重試策略、熔斷器、心跳保活、優雅關閉、錯誤分類處理、監控指標 (延遲、錯誤率、連接數、吞吐)。

掌握上述體系，即可用 PHP 構建高性能、安全、可維護的網絡客戶端，對接微服務、物聯網、即時通訊、金融交易等多元場景。