6 changed files with 514 additions and 15 deletions
@ -0,0 +1,417 @@
|
||||
/*
|
||||
* ZeroTier One - Global Peer to Peer Ethernet |
||||
* Copyright (C) 2011-2014 ZeroTier Networks LLC |
||||
* |
||||
* This program is free software: you can redistribute it and/or modify |
||||
* it under the terms of the GNU General Public License as published by |
||||
* the Free Software Foundation, either version 3 of the License, or |
||||
* (at your option) any later version. |
||||
* |
||||
* This program is distributed in the hope that it will be useful, |
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
* GNU General Public License for more details. |
||||
* |
||||
* You should have received a copy of the GNU General Public License |
||||
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
* |
||||
* -- |
||||
* |
||||
* ZeroTier may be used and distributed under the terms of the GPLv3, which |
||||
* are available at: http://www.gnu.org/licenses/gpl-3.0.html
|
||||
* |
||||
* If you would like to embed ZeroTier into a commercial application or |
||||
* redistribute it in a modified binary form, please contact ZeroTier Networks |
||||
* LLC. Start here: http://www.zerotier.com/
|
||||
*/ |
||||
|
||||
#include <stdint.h> |
||||
#include <stdio.h> |
||||
#include <stdlib.h> |
||||
#include <string.h> |
||||
#include <errno.h> |
||||
|
||||
#include <unistd.h> |
||||
#include <signal.h> |
||||
|
||||
#include <fcntl.h> |
||||
#include <sys/types.h> |
||||
#include <sys/stat.h> |
||||
#include <sys/ioctl.h> |
||||
#include <sys/wait.h> |
||||
#include <sys/select.h> |
||||
#include <sys/cdefs.h> |
||||
#include <sys/uio.h> |
||||
#include <sys/param.h> |
||||
#include <sys/sysctl.h> |
||||
#include <sys/ioctl.h> |
||||
#include <sys/socket.h> |
||||
#include <netinet/in.h> |
||||
#include <arpa/inet.h> |
||||
#include <net/if.h> |
||||
#include <ifaddrs.h> |
||||
#include <net/if_arp.h> |
||||
#include <net/if_dl.h> |
||||
#include <net/if_media.h> |
||||
#include <net/route.h> |
||||
|
||||
#include <string> |
||||
#include <map> |
||||
#include <set> |
||||
#include <algorithm> |
||||
|
||||
#include "../node/Constants.hpp" |
||||
#include "../node/Utils.hpp" |
||||
#include "../node/Mutex.hpp" |
||||
#include "BSDEthernetTap.hpp" |
||||
|
||||
#define ZT_BASE32_CHARS "0123456789abcdefghijklmnopqrstuv" |
||||
|
||||
// ff:ff:ff:ff:ff:ff with no ADI
|
||||
static const ZeroTier::MulticastGroup _blindWildcardMulticastGroup(ZeroTier::MAC(0xff),0); |
||||
|
||||
namespace ZeroTier { |
||||
|
||||
BSDEthernetTap::BSDEthernetTap( |
||||
const MAC &mac, |
||||
unsigned int mtu, |
||||
unsigned int metric, |
||||
uint64_t nwid, |
||||
const char *desiredDevice, |
||||
const char *friendlyName, |
||||
void (*handler)(void *,const MAC &,const MAC &,unsigned int,const Buffer<4096> &), |
||||
void *arg) : |
||||
EthernetTap("BSDEthernetTap",mac,mtu,metric), |
||||
_handler(handler), |
||||
_arg(arg), |
||||
_mtu(mtu), |
||||
_metric(metric), |
||||
_fd(0), |
||||
_enabled(true) |
||||
{ |
||||
static Mutex globalTapCreateLock; |
||||
char devpath[64],ethaddr[64],mtustr[32],metstr[32],tmpdevname[32]; |
||||
struct stat stattmp; |
||||
|
||||
// On FreeBSD at least we can rename, so use nwid to generate a deterministic unique zt#### name using base32
|
||||
// As a result we don't use desiredDevice
|
||||
_dev = "zt"; |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 60) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 55) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 50) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 45) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 40) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 35) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 30) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 25) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 20) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 15) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 10) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)((nwid >> 5) & 0x1f)]); |
||||
_dev.push_back(ZT_BASE32_CHARS[(unsigned long)(nwid & 0x1f)]); |
||||
|
||||
Mutex::Lock _gl(globalTapCreateLock); |
||||
|
||||
if (mtu > 2800) |
||||
throw std::runtime_error("max tap MTU is 2800"); |
||||
|
||||
// On BSD we create taps and they can have high numbers, so use ones starting
|
||||
// at 9993 to not conflict with other stuff. Then we rename it to zt<base32 of nwid>
|
||||
for(int i=9993;i<500;++i) { |
||||
Utils::snprintf(tmpdevname,sizeof(tmpdevname),"tap%d",i); |
||||
Utils::snprintf(devpath,sizeof(devpath),"/dev/%s",tmpdevname); |
||||
if (stat(devpath,&stattmp)) { |
||||
long cpid = (long)vfork(); |
||||
if (cpid == 0) { |
||||
::execl("/sbin/ifconfig","/sbin/ifconfig",tmpdevname,"create",(const char *)0); |
||||
::_exit(-1); |
||||
} else if (cpid > 0) { |
||||
int exitcode = -1; |
||||
::waitpid(cpid,&exitcode,0); |
||||
} else throw std::runtime_error("fork() failed"); |
||||
|
||||
if (!stat(devpath,&stattmp)) { |
||||
cpid = (long)vfork(); |
||||
if (cpid == 0) { |
||||
::execl("/sbin/ifconfig","/sbin/ifconfig",tmpdevname,"name",_dev.c_str(),(const char *)0); |
||||
::_exit(-1); |
||||
} else if (cpid > 0) { |
||||
int exitcode = -1; |
||||
::waitpid(cpid,&exitcode,0); |
||||
if (exitcode) |
||||
throw std::runtime_error("ifconfig rename operation failed"); |
||||
} else throw std::runtime_error("fork() failed"); |
||||
|
||||
_fd = ::open(devpath,O_RDWR); |
||||
if (_fd > 0) |
||||
break; |
||||
else throw std::runtime_error("unable to open created tap device"); |
||||
} |
||||
} |
||||
} |
||||
|
||||
if (_fd <= 0) |
||||
throw std::runtime_error("unable to open TAP device or no more devices available"); |
||||
|
||||
if (fcntl(_fd,F_SETFL,fcntl(_fd,F_GETFL) & ~O_NONBLOCK) == -1) { |
||||
::close(_fd); |
||||
throw std::runtime_error("unable to set flags on file descriptor for TAP device"); |
||||
} |
||||
|
||||
// Configure MAC address and MTU, bring interface up
|
||||
Utils::snprintf(ethaddr,sizeof(ethaddr),"%.2x:%.2x:%.2x:%.2x:%.2x:%.2x",(int)mac[0],(int)mac[1],(int)mac[2],(int)mac[3],(int)mac[4],(int)mac[5]); |
||||
Utils::snprintf(mtustr,sizeof(mtustr),"%u",_mtu); |
||||
Utils::snprintf(metstr,sizeof(metstr),"%u",_metric); |
||||
long cpid = (long)vfork(); |
||||
if (cpid == 0) { |
||||
::execl("/sbin/ifconfig","/sbin/ifconfig",_dev.c_str(),"lladdr",ethaddr,"mtu",mtustr,"metric",metstr,"up",(const char *)0); |
||||
::_exit(-1); |
||||
} else if (cpid > 0) { |
||||
int exitcode = -1; |
||||
::waitpid(cpid,&exitcode,0); |
||||
if (exitcode) { |
||||
::close(_fd); |
||||
throw std::runtime_error("ifconfig failure setting link-layer address and activating tap interface"); |
||||
} |
||||
} |
||||
|
||||
// Set close-on-exec so that devices cannot persist if we fork/exec for update
|
||||
fcntl(_fd,F_SETFD,fcntl(_fd,F_GETFD) | FD_CLOEXEC); |
||||
|
||||
::pipe(_shutdownSignalPipe); |
||||
|
||||
_thread = Thread::start(this); |
||||
} |
||||
|
||||
BSDEthernetTap::~BSDEthernetTap() |
||||
{ |
||||
::write(_shutdownSignalPipe[1],"\0",1); // causes thread to exit
|
||||
Thread::join(_thread); |
||||
::close(_fd); |
||||
::close(_shutdownSignalPipe[0]); |
||||
::close(_shutdownSignalPipe[1]); |
||||
} |
||||
|
||||
void BSDEthernetTap::setEnabled(bool en) |
||||
{ |
||||
_enabled = en; |
||||
// TODO: interface status change
|
||||
} |
||||
|
||||
bool BSDEthernetTap::enabled() const |
||||
{ |
||||
return _enabled; |
||||
} |
||||
|
||||
static bool ___removeIp(const std::string &_dev,const InetAddress &ip) |
||||
{ |
||||
long cpid = (long)vfork(); |
||||
if (cpid == 0) { |
||||
execl("/sbin/ifconfig","/sbin/ifconfig",_dev.c_str(),"inet",ip.toIpString().c_str(),"-alias",(const char *)0); |
||||
_exit(-1); |
||||
} else if (cpid > 0) { |
||||
int exitcode = -1; |
||||
waitpid(cpid,&exitcode,0); |
||||
return (exitcode == 0); |
||||
} |
||||
return false; // never reached, make compiler shut up about return value
|
||||
} |
||||
|
||||
bool BSDEthernetTap::addIP(const InetAddress &ip) |
||||
{ |
||||
if (!ip) |
||||
return false; |
||||
|
||||
std::set<InetAddress> allIps(ips()); |
||||
if (allIps.count(ip) > 0) |
||||
return true; // IP/netmask already assigned
|
||||
|
||||
// Remove and reconfigure if address is the same but netmask is different
|
||||
for(std::set<InetAddress>::iterator i(allIps.begin());i!=allIps.end();++i) { |
||||
if ((i->ipsEqual(ip))&&(i->netmaskBits() != ip.netmaskBits())) { |
||||
if (___removeIp(_dev,*i)) |
||||
break; |
||||
} |
||||
} |
||||
|
||||
long cpid = (long)vfork(); |
||||
if (cpid == 0) { |
||||
::execl("/sbin/ifconfig","/sbin/ifconfig",_dev.c_str(),ip.isV4() ? "inet" : "inet6",ip.toString().c_str(),"alias",(const char *)0); |
||||
::_exit(-1); |
||||
} else if (cpid > 0) { |
||||
int exitcode = -1; |
||||
::waitpid(cpid,&exitcode,0); |
||||
return (exitcode == 0); |
||||
} |
||||
return false; |
||||
} |
||||
|
||||
bool BSDEthernetTap::removeIP(const InetAddress &ip) |
||||
{ |
||||
if (ips().count(ip) > 0) { |
||||
if (___removeIp(_dev,ip)) |
||||
return true; |
||||
} |
||||
return false; |
||||
} |
||||
|
||||
std::set<InetAddress> BSDEthernetTap::ips() const |
||||
{ |
||||
struct ifaddrs *ifa = (struct ifaddrs *)0; |
||||
if (getifaddrs(&ifa)) |
||||
return std::set<InetAddress>(); |
||||
|
||||
std::set<InetAddress> r; |
||||
|
||||
struct ifaddrs *p = ifa; |
||||
while (p) { |
||||
if ((!strcmp(p->ifa_name,_dev.c_str()))&&(p->ifa_addr)&&(p->ifa_netmask)&&(p->ifa_addr->sa_family == p->ifa_netmask->sa_family)) { |
||||
switch(p->ifa_addr->sa_family) { |
||||
case AF_INET: { |
||||
struct sockaddr_in *sin = (struct sockaddr_in *)p->ifa_addr; |
||||
struct sockaddr_in *nm = (struct sockaddr_in *)p->ifa_netmask; |
||||
r.insert(InetAddress(&(sin->sin_addr.s_addr),4,Utils::countBits((uint32_t)nm->sin_addr.s_addr))); |
||||
} break; |
||||
case AF_INET6: { |
||||
struct sockaddr_in6 *sin = (struct sockaddr_in6 *)p->ifa_addr; |
||||
struct sockaddr_in6 *nm = (struct sockaddr_in6 *)p->ifa_netmask; |
||||
uint32_t b[4]; |
||||
memcpy(b,nm->sin6_addr.s6_addr,sizeof(b)); |
||||
r.insert(InetAddress(sin->sin6_addr.s6_addr,16,Utils::countBits(b[0]) + Utils::countBits(b[1]) + Utils::countBits(b[2]) + Utils::countBits(b[3]))); |
||||
} break; |
||||
} |
||||
} |
||||
p = p->ifa_next; |
||||
} |
||||
|
||||
if (ifa) |
||||
freeifaddrs(ifa); |
||||
|
||||
return r; |
||||
} |
||||
|
||||
void BSDEthernetTap::put(const MAC &from,const MAC &to,unsigned int etherType,const void *data,unsigned int len) |
||||
{ |
||||
char putBuf[4096]; |
||||
if ((_fd > 0)&&(len <= _mtu)&&(_enabled)) { |
||||
to.copyTo(putBuf,6); |
||||
from.copyTo(putBuf + 6,6); |
||||
*((uint16_t *)(putBuf + 12)) = htons((uint16_t)etherType); |
||||
memcpy(putBuf + 14,data,len); |
||||
len += 14; |
||||
::write(_fd,putBuf,len); |
||||
} |
||||
} |
||||
|
||||
std::string BSDEthernetTap::deviceName() const |
||||
{ |
||||
return _dev; |
||||
} |
||||
|
||||
void BSDEthernetTap::setFriendlyName(const char *friendlyName) |
||||
{ |
||||
} |
||||
|
||||
bool BSDEthernetTap::updateMulticastGroups(std::set<MulticastGroup> &groups) |
||||
{ |
||||
std::set<MulticastGroup> newGroups; |
||||
struct ifmaddrs *ifmap = (struct ifmaddrs *)0; |
||||
if (!getifmaddrs(&ifmap)) { |
||||
struct ifmaddrs *p = ifmap; |
||||
while (p) { |
||||
if (p->ifma_addr->sa_family == AF_LINK) { |
||||
struct sockaddr_dl *in = (struct sockaddr_dl *)p->ifma_name; |
||||
struct sockaddr_dl *la = (struct sockaddr_dl *)p->ifma_addr; |
||||
if ((la->sdl_alen == 6)&&(in->sdl_nlen <= _dev.length())&&(!memcmp(_dev.data(),in->sdl_data,in->sdl_nlen))) |
||||
newGroups.insert(MulticastGroup(MAC(la->sdl_data + la->sdl_nlen,6),0)); |
||||
} |
||||
p = p->ifma_next; |
||||
} |
||||
freeifmaddrs(ifmap); |
||||
} |
||||
|
||||
{ |
||||
std::set<InetAddress> allIps(ips()); |
||||
for(std::set<InetAddress>::const_iterator i(allIps.begin());i!=allIps.end();++i) |
||||
newGroups.insert(MulticastGroup::deriveMulticastGroupForAddressResolution(*i)); |
||||
} |
||||
|
||||
bool changed = false; |
||||
|
||||
for(std::set<MulticastGroup>::iterator mg(newGroups.begin());mg!=newGroups.end();++mg) { |
||||
if (!groups.count(*mg)) { |
||||
groups.insert(*mg); |
||||
changed = true; |
||||
} |
||||
} |
||||
for(std::set<MulticastGroup>::iterator mg(groups.begin());mg!=groups.end();) { |
||||
if ((!newGroups.count(*mg))&&(*mg != _blindWildcardMulticastGroup)) { |
||||
groups.erase(mg++); |
||||
changed = true; |
||||
} else ++mg; |
||||
} |
||||
|
||||
return changed; |
||||
} |
||||
|
||||
bool BSDEthernetTap::injectPacketFromHost(const MAC &from,const MAC &to,unsigned int etherType,const void *data,unsigned int len) |
||||
{ |
||||
return false; |
||||
} |
||||
|
||||
void BSDEthernetTap::threadMain() |
||||
throw() |
||||
{ |
||||
fd_set readfds,nullfds; |
||||
MAC to,from; |
||||
int n,nfds,r; |
||||
char getBuf[8194]; |
||||
Buffer<4096> data; |
||||
|
||||
// Wait for a moment after startup -- wait for Network to finish
|
||||
// constructing itself.
|
||||
Thread::sleep(500); |
||||
|
||||
FD_ZERO(&readfds); |
||||
FD_ZERO(&nullfds); |
||||
nfds = (int)std::max(_shutdownSignalPipe[0],_fd) + 1; |
||||
|
||||
r = 0; |
||||
for(;;) { |
||||
FD_SET(_shutdownSignalPipe[0],&readfds); |
||||
FD_SET(_fd,&readfds); |
||||
select(nfds,&readfds,&nullfds,&nullfds,(struct timeval *)0); |
||||
|
||||
if (FD_ISSET(_shutdownSignalPipe[0],&readfds)) // writes to shutdown pipe terminate thread
|
||||
break; |
||||
|
||||
if (FD_ISSET(_fd,&readfds)) { |
||||
n = (int)::read(_fd,getBuf + r,sizeof(getBuf) - r); |
||||
if (n < 0) { |
||||
if ((errno != EINTR)&&(errno != ETIMEDOUT)) |
||||
break; |
||||
} else { |
||||
// Some tap drivers like to send the ethernet frame and the
|
||||
// payload in two chunks, so handle that by accumulating
|
||||
// data until we have at least a frame.
|
||||
r += n; |
||||
if (r > 14) { |
||||
if (r > ((int)_mtu + 14)) // sanity check for weird TAP behavior on some platforms
|
||||
r = _mtu + 14; |
||||
|
||||
if (_enabled) { |
||||
to.setTo(getBuf,6); |
||||
from.setTo(getBuf + 6,6); |
||||
unsigned int etherType = ntohs(((const uint16_t *)getBuf)[6]); |
||||
data.copyFrom(getBuf + 14,(unsigned int)r - 14); |
||||
_handler(_arg,from,to,etherType,data); |
||||
} |
||||
|
||||
r = 0; |
||||
} |
||||
} |
||||
} |
||||
} |
||||
} |
||||
|
||||
} // namespace ZeroTier
|
||||
@ -0,0 +1,84 @@
|
||||
/*
|
||||
* ZeroTier One - Global Peer to Peer Ethernet |
||||
* Copyright (C) 2011-2014 ZeroTier Networks LLC |
||||
* |
||||
* This program is free software: you can redistribute it and/or modify |
||||
* it under the terms of the GNU General Public License as published by |
||||
* the Free Software Foundation, either version 3 of the License, or |
||||
* (at your option) any later version. |
||||
* |
||||
* This program is distributed in the hope that it will be useful, |
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
* GNU General Public License for more details. |
||||
* |
||||
* You should have received a copy of the GNU General Public License |
||||
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
* |
||||
* -- |
||||
* |
||||
* ZeroTier may be used and distributed under the terms of the GPLv3, which |
||||
* are available at: http://www.gnu.org/licenses/gpl-3.0.html
|
||||
* |
||||
* If you would like to embed ZeroTier into a commercial application or |
||||
* redistribute it in a modified binary form, please contact ZeroTier Networks |
||||
* LLC. Start here: http://www.zerotier.com/
|
||||
*/ |
||||
|
||||
#ifndef ZT_BSDETHERNETTAP_HPP |
||||
#define ZT_BSDETHERNETTAP_HPP |
||||
|
||||
#include <stdio.h> |
||||
#include <stdlib.h> |
||||
|
||||
#include <stdexcept> |
||||
|
||||
#include "../node/EthernetTap.hpp" |
||||
#include "../node/Thread.hpp" |
||||
|
||||
namespace ZeroTier { |
||||
|
||||
class BSDEthernetTap : public EthernetTap |
||||
{ |
||||
public: |
||||
BSDEthernetTap( |
||||
const MAC &mac, |
||||
unsigned int mtu, |
||||
unsigned int metric, |
||||
uint64_t nwid, |
||||
const char *desiredDevice, |
||||
const char *friendlyName, |
||||
void (*handler)(void *,const MAC &,const MAC &,unsigned int,const Buffer<4096> &), |
||||
void *arg); |
||||
|
||||
virtual ~BSDEthernetTap(); |
||||
|
||||
virtual void setEnabled(bool en); |
||||
virtual bool enabled() const; |
||||
virtual bool addIP(const InetAddress &ip); |
||||
virtual bool removeIP(const InetAddress &ip); |
||||
virtual std::set<InetAddress> ips() const; |
||||
virtual void put(const MAC &from,const MAC &to,unsigned int etherType,const void *data,unsigned int len); |
||||
virtual std::string deviceName() const; |
||||
virtual void setFriendlyName(const char *friendlyName); |
||||
virtual bool updateMulticastGroups(std::set<MulticastGroup> &groups); |
||||
virtual bool injectPacketFromHost(const MAC &from,const MAC &to,unsigned int etherType,const void *data,unsigned int len); |
||||
|
||||
void threadMain() |
||||
throw(); |
||||
|
||||
private: |
||||
void (*_handler)(void *,const MAC &,const MAC &,unsigned int,const Buffer<4096> &); |
||||
void *_arg; |
||||
Thread _thread; |
||||
std::string _dev; |
||||
unsigned int _mtu; |
||||
unsigned int _metric; |
||||
int _fd; |
||||
int _shutdownSignalPipe[2]; |
||||
volatile bool _enabled; |
||||
}; |
||||
|
||||
} // namespace ZeroTier
|
||||
|
||||
#endif |
||||
Loading…
Reference in new issue