X-Git-Url: http://git.meshlink.io/?a=blobdiff_plain;f=src%2Fnet_packet.c;h=162dcef2075ea571d467a1ac3b7d18f9de24f18e;hb=fc7a1cc27751514e3175c9c50781d724a91d0f0e;hp=3eea0517e5a7a4287d93980576fb06758392eec1;hpb=3f48dfcb372ccf940ae077bf220adf957a926c82;p=meshlink diff --git a/src/net_packet.c b/src/net_packet.c index 3eea0517..162dcef2 100644 --- a/src/net_packet.c +++ b/src/net_packet.c @@ -1,6 +1,6 @@ /* net_packet.c -- Handles in- and outgoing VPN packets - Copyright (C) 2014 Guus Sliepen + Copyright (C) 2014-2017 Guus Sliepen This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by @@ -19,10 +19,6 @@ #include "system.h" -#ifdef HAVE_ZLIB -#include -#endif - #include "conf.h" #include "connection.h" #include "crypto.h" @@ -66,7 +62,7 @@ static void send_mtu_probe_handler(event_loop_t *loop, void *data) { n->mtuprobes++; if(!n->status.reachable || !n->status.validkey) { - logger(mesh, MESHLINK_INFO, "Trying to send MTU probe to unreachable or rekeying node %s (%s)", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "Trying to send MTU probe to unreachable or rekeying node %s", n->name); n->mtuprobes = 0; return; } @@ -78,7 +74,7 @@ static void send_mtu_probe_handler(event_loop_t *loop, void *data) { goto end; } - logger(mesh, MESHLINK_INFO, "%s (%s) did not respond to UDP ping, restarting PMTU discovery", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "%s did not respond to UDP ping, restarting PMTU discovery", n->name); n->status.udp_confirmed = false; n->mtuprobes = 1; n->minmtu = 0; @@ -86,40 +82,47 @@ static void send_mtu_probe_handler(event_loop_t *loop, void *data) { } if(n->mtuprobes >= 10 && n->mtuprobes < 32 && !n->minmtu) { - logger(mesh, MESHLINK_INFO, "No response to MTU probes from %s (%s)", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "No response to MTU probes from %s", n->name); n->mtuprobes = 31; } if(n->mtuprobes == 30 || (n->mtuprobes < 30 && n->minmtu >= n->maxmtu)) { - if(n->minmtu > n->maxmtu) + if(n->minmtu > n->maxmtu) { n->minmtu = n->maxmtu; - else + } else { n->maxmtu = n->minmtu; + } + n->mtu = n->minmtu; - logger(mesh, MESHLINK_INFO, "Fixing MTU of %s (%s) to %d after %d probes", n->name, n->hostname, n->mtu, n->mtuprobes); + logger(mesh, MESHLINK_INFO, "Fixing MTU of %s to %d after %d probes", n->name, n->mtu, n->mtuprobes); n->mtuprobes = 31; } if(n->mtuprobes == 31) { timeout = mesh->pinginterval; goto end; - } else if(n->mtuprobes == 32) + } else if(n->mtuprobes == 32) { timeout = mesh->pingtimeout; + } for(int i = 0; i < 4 + mesh->localdiscovery; i++) { int len; if(i == 0) { - if(n->mtuprobes < 30 || n->maxmtu + 8 >= MTU) + if(n->mtuprobes < 30 || n->maxmtu + 8 >= MTU) { continue; + } + len = n->maxmtu + 8; - } else if(n->maxmtu <= n->minmtu) + } else if(n->maxmtu <= n->minmtu) { len = n->maxmtu; - else + } else { len = n->minmtu + 1 + rand() % (n->maxmtu - n->minmtu); + } - if(len < 64) + if(len < 64) { len = 64; + } vpn_packet_t packet; packet.probe = true; @@ -128,7 +131,7 @@ static void send_mtu_probe_handler(event_loop_t *loop, void *data) { packet.len = len; n->status.broadcast = i >= 4 && n->mtuprobes <= 10 && n->prevedge; - logger(mesh, MESHLINK_DEBUG, "Sending MTU probe length %d to %s (%s)", len, n->name, n->hostname); + logger(mesh, MESHLINK_DEBUG, "Sending MTU probe length %d to %s", len, n->name); send_udppacket(mesh, n, &packet); } @@ -149,7 +152,7 @@ void send_mtu_probe(meshlink_handle_t *mesh, node_t *n) { } static void mtu_probe_h(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet, uint16_t len) { - logger(mesh, MESHLINK_DEBUG, "Got MTU probe length %d from %s (%s)", packet->len, n->name, n->hostname); + logger(mesh, MESHLINK_DEBUG, "Got MTU probe length %d from %s", packet->len, n->name); if(!packet->data[0]) { /* It's a probe request, send back a reply */ @@ -174,44 +177,39 @@ static void mtu_probe_h(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet if(n->mtuprobes > 30) { if(len == n->maxmtu + 8) { - logger(mesh, MESHLINK_INFO, "Increase in PMTU to %s (%s) detected, restarting PMTU discovery", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "Increase in PMTU to %s detected, restarting PMTU discovery", n->name); n->maxmtu = MTU; n->mtuprobes = 10; return; } - if(n->minmtu) + if(n->minmtu) { n->mtuprobes = 30; - else + } else { n->mtuprobes = 1; + } } /* If applicable, raise the minimum supported MTU */ - if(len > n->maxmtu) + if(len > n->maxmtu) { len = n->maxmtu; - if(n->minmtu < len) + } + + if(n->minmtu < len) { n->minmtu = len; + } } } -static uint16_t compress_packet(uint8_t *dest, const uint8_t *source, uint16_t len, int level) { - abort(); -} - -static uint16_t uncompress_packet(uint8_t *dest, const uint8_t *source, uint16_t len, int level) { - abort(); -} - /* VPN packet I/O */ static void receive_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet) { - logger(mesh, MESHLINK_DEBUG, "Received packet of %d bytes from %s (%s)", - packet->len, n->name, n->hostname); + logger(mesh, MESHLINK_DEBUG, "Received packet of %d bytes from %s", packet->len, n->name); - if(n->status.blacklisted) + if(n->status.blacklisted) { logger(mesh, MESHLINK_WARNING, "Dropping packet from blacklisted node %s", n->name); - else { + } else { n->in_packets++; n->in_bytes += packet->len; @@ -220,45 +218,38 @@ static void receive_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *pac } static bool try_mac(meshlink_handle_t *mesh, node_t *n, const vpn_packet_t *inpkt) { + (void)mesh; return sptps_verify_datagram(&n->sptps, inpkt->data, inpkt->len); } static void receive_udppacket(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *inpkt) { if(!n->sptps.state) { if(!n->status.waitingforkey) { - logger(mesh, MESHLINK_DEBUG, "Got packet from %s (%s) but we haven't exchanged keys yet", n->name, n->hostname); + logger(mesh, MESHLINK_DEBUG, "Got packet from %s but we haven't exchanged keys yet", n->name); send_req_key(mesh, n); - } else - logger(mesh, MESHLINK_DEBUG, "Got packet from %s (%s) but he hasn't got our key yet", n->name, n->hostname); - return; - } - sptps_receive_data(&n->sptps, inpkt->data, inpkt->len); -} - -void receive_tcppacket(meshlink_handle_t *mesh, connection_t *c, const char *buffer, int len) { - vpn_packet_t outpkt; + } else { + logger(mesh, MESHLINK_DEBUG, "Got packet from %s but he hasn't got our key yet", n->name); + } - if(len > sizeof(outpkt).data) return; + } - outpkt.len = len; - outpkt.tcp = true; - memcpy(outpkt.data, buffer, len); - - receive_packet(mesh, c->node, &outpkt); + sptps_receive_data(&n->sptps, inpkt->data, inpkt->len); } static void send_sptps_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *origpkt) { if(!n->status.validkey) { - logger(mesh, MESHLINK_INFO, "No valid key known yet for %s (%s)", n->name, n->hostname); - if(!n->status.waitingforkey) + logger(mesh, MESHLINK_INFO, "No valid key known yet for %s", n->name); + + if(!n->status.waitingforkey) { send_req_key(mesh, n); - else if(n->last_req_key + 10 < mesh->loop.now.tv_sec) { + } else if(n->last_req_key + 10 < mesh->loop.now.tv_sec) { logger(mesh, MESHLINK_DEBUG, "No key from %s after 10 seconds, restarting SPTPS", n->name); sptps_stop(&n->sptps); n->status.waitingforkey = false; send_req_key(mesh, n); } + return; } @@ -270,17 +261,9 @@ static void send_sptps_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t * return; } - vpn_packet_t outpkt; - if(n->outcompression) { - int len = compress_packet(outpkt.data, origpkt->data, origpkt->len, n->outcompression); - if(len < 0) - logger(mesh, MESHLINK_ERROR, "Error while compressing packet to %s (%s)", n->name, n->hostname); - else if(len < origpkt->len) { - outpkt.len = len; - origpkt = &outpkt; - type |= PKT_COMPRESSED; - } + logger(mesh, MESHLINK_ERROR, "Error while compressing packet to %s", n->name); + return; } sptps_send_record(&n->sptps, type, origpkt->data, origpkt->len); @@ -293,14 +276,16 @@ static void choose_udp_address(meshlink_handle_t *mesh, const node_t *n, const s *sock = n->sock; /* If the UDP address is confirmed, use it. */ - if(n->status.udp_confirmed) + if(n->status.udp_confirmed) { return; + } /* Send every third packet to n->address; that could be set to the node's reflexive UDP address discovered during key exchange. */ static int x = 0; + if(++x >= 3) { x = 0; return; @@ -377,11 +362,11 @@ static void choose_broadcast_address(meshlink_handle_t *mesh, const node_t *n, c static void send_udppacket(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *origpkt) { if(!n->status.reachable) { - logger(mesh, MESHLINK_INFO, "Trying to send UDP packet to unreachable node %s (%s)", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "Trying to send UDP packet to unreachable node %s", n->name); return; } - return send_sptps_packet(mesh, n, origpkt); + send_sptps_packet(mesh, n, origpkt); } bool send_sptps_data(void *handle, uint8_t type, const void *data, size_t len) { @@ -393,13 +378,15 @@ bool send_sptps_data(void *handle, uint8_t type, const void *data, size_t len) { if(type >= SPTPS_HANDSHAKE || ((mesh->self->options | to->options) & OPTION_TCPONLY) || (type != PKT_PROBE && len > to->minmtu)) { char buf[len * 4 / 3 + 5]; b64encode(data, buf, len); + /* If no valid key is known yet, send the packets using ANS_KEY requests, to ensure we get to learn the reflexive UDP address. */ if(!to->status.validkey) { to->incompression = mesh->self->incompression; return send_request(mesh, to->nexthop->connection, "%d %s %s %s -1 -1 -1 %d", ANS_KEY, mesh->self->name, to->name, buf, to->incompression); - } else + } else { return send_request(mesh, to->nexthop->connection, "%d %s %s %d %s", REQ_KEY, mesh->self->name, to->name, REQ_SPTPS, buf); + } } /* Otherwise, send the packet via UDP */ @@ -407,19 +394,23 @@ bool send_sptps_data(void *handle, uint8_t type, const void *data, size_t len) { const sockaddr_t *sa; int sock; - if(to->status.broadcast) + if(to->status.broadcast) { choose_broadcast_address(mesh, to, &sa, &sock); - else + } else { choose_udp_address(mesh, to, &sa, &sock); + } if(sendto(mesh->listen_socket[sock].udp.fd, data, len, 0, &sa->sa, SALEN(sa->sa)) < 0 && !sockwouldblock(sockerrno)) { if(sockmsgsize(sockerrno)) { - if(to->maxmtu >= len) + if(to->maxmtu >= len) { to->maxmtu = len - 1; - if(to->mtu >= len) + } + + if(to->mtu >= len) { to->mtu = len - 1; + } } else { - logger(mesh, MESHLINK_WARNING, "Error sending UDP SPTPS packet to %s (%s): %s", to->name, to->hostname, sockstrerror(sockerrno)); + logger(mesh, MESHLINK_WARNING, "Error sending UDP SPTPS packet to %s: %s", to->name, sockstrerror(sockerrno)); return false; } } @@ -433,17 +424,20 @@ bool receive_sptps_record(void *handle, uint8_t type, const void *data, uint16_t if(type == SPTPS_HANDSHAKE) { if(!from->status.validkey) { - logger(mesh, MESHLINK_INFO, "SPTPS key exchange with %s (%s) succesful", from->name, from->hostname); + logger(mesh, MESHLINK_INFO, "SPTPS key exchange with %s succesful", from->name); from->status.validkey = true; from->status.waitingforkey = false; - if(from->utcp) + + if(from->utcp) { utcp_reset_timers(from->utcp); + } } + return true; } if(len > MTU) { - logger(mesh, MESHLINK_ERROR, "Packet from %s (%s) larger than maximum supported size (%d > %d)", from->name, from->hostname, len, MTU); + logger(mesh, MESHLINK_ERROR, "Packet from %s larger than maximum supported size (%d > %d)", from->name, len, MTU); return false; } @@ -455,27 +449,23 @@ bool receive_sptps_record(void *handle, uint8_t type, const void *data, uint16_t memcpy(inpkt.data, data, len); mtu_probe_h(mesh, from, &inpkt, len); return true; - } else + } else { inpkt.probe = false; + } if(type & ~(PKT_COMPRESSED)) { - logger(mesh, MESHLINK_ERROR, "Unexpected SPTPS record type %d len %d from %s (%s)", type, len, from->name, from->hostname); + logger(mesh, MESHLINK_ERROR, "Unexpected SPTPS record type %d len %d from %s", type, len, from->name); return false; } if(type & PKT_COMPRESSED) { - uint16_t ulen = uncompress_packet(inpkt.data, (const uint8_t *)data, len, from->incompression); - if(ulen < 0) - return false; - else - inpkt.len = ulen; - if(inpkt.len > MAXSIZE) - abort(); - } else { - memcpy(inpkt.data, data, len); - inpkt.len = len; + logger(mesh, MESHLINK_ERROR, "Error while decompressing packet from %s", from->name); + return false; } + memcpy(inpkt.data, data, len); // TODO: get rid of memcpy + inpkt.len = len; + receive_packet(mesh, from, &inpkt); return true; } @@ -491,12 +481,10 @@ void send_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet) { return; } - logger(mesh, MESHLINK_DEBUG, "Sending packet of %d bytes to %s (%s)", - packet->len, n->name, n->hostname); + logger(mesh, MESHLINK_DEBUG, "Sending packet of %d bytes to %s", packet->len, n->name); if(!n->status.reachable) { - logger(mesh, MESHLINK_WARNING, "Node %s (%s) is not reachable", - n->name, n->hostname); + logger(mesh, MESHLINK_WARNING, "Node %s is not reachable", n->name); return; } @@ -511,15 +499,16 @@ void send_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet) { void broadcast_packet(meshlink_handle_t *mesh, const node_t *from, vpn_packet_t *packet) { // Always give ourself a copy of the packet. - if(from != mesh->self) + if(from != mesh->self) { send_packet(mesh, mesh->self, packet); + } - logger(mesh, MESHLINK_INFO, "Broadcasting packet of %d bytes from %s (%s)", - packet->len, from->name, from->hostname); + logger(mesh, MESHLINK_INFO, "Broadcasting packet of %d bytes from %s", packet->len, from->name); for list_each(connection_t, c, mesh->connections) - if(c->status.active && c->status.mst && c != from->nexthop->connection) + if(c->status.active && c->status.mst && c != from->nexthop->connection) { send_packet(mesh, c->node, packet); + } } static node_t *try_harder(meshlink_handle_t *mesh, const sockaddr_t *from, const vpn_packet_t *pkt) { @@ -528,35 +517,41 @@ static node_t *try_harder(meshlink_handle_t *mesh, const sockaddr_t *from, const static time_t last_hard_try = 0; for splay_each(edge_t, e, mesh->edges) { - if(!e->to->status.reachable || e->to == mesh->self) + if(!e->to->status.reachable || e->to == mesh->self) { continue; + } if(sockaddrcmp_noport(from, &e->address)) { - if(last_hard_try == mesh->loop.now.tv_sec) + if(last_hard_try == mesh->loop.now.tv_sec) { continue; + } + hard = true; } - if(!try_mac(mesh, e->to, pkt)) + if(!try_mac(mesh, e->to, pkt)) { continue; + } n = e->to; break; } - if(hard) + if(hard) { last_hard_try = mesh->loop.now.tv_sec; + } last_hard_try = mesh->loop.now.tv_sec; return n; } void handle_incoming_vpn_data(event_loop_t *loop, void *data, int flags) { + (void)flags; meshlink_handle_t *mesh = loop->data; listen_socket_t *ls = data; vpn_packet_t pkt; char *hostname; - sockaddr_t from = {{0}}; + sockaddr_t from = {0}; socklen_t fromlen = sizeof(from); node_t *n; int len; @@ -564,8 +559,10 @@ void handle_incoming_vpn_data(event_loop_t *loop, void *data, int flags) { len = recvfrom(ls->udp.fd, pkt.data, MAXSIZE, 0, &from.sa, &fromlen); if(len <= 0 || len > MAXSIZE) { - if(!sockwouldblock(sockerrno)) + if(!sockwouldblock(sockerrno)) { logger(mesh, MESHLINK_ERROR, "Receiving packet failed: %s", sockstrerror(sockerrno)); + } + return; } @@ -577,21 +574,24 @@ void handle_incoming_vpn_data(event_loop_t *loop, void *data, int flags) { if(!n) { n = try_harder(mesh, &from, &pkt); - if(n) + + if(n) { update_node_udp(mesh, n, &from); - else if(mesh->log_level >= MESHLINK_WARNING) { + } else if(mesh->log_level >= MESHLINK_WARNING) { hostname = sockaddr2hostname(&from); logger(mesh, MESHLINK_WARNING, "Received UDP packet from unknown source %s", hostname); free(hostname); return; - } else + } else { return; + } } if(n->status.blacklisted) { logger(mesh, MESHLINK_WARNING, "Dropping packet from blacklisted node %s", n->name); return; } + n->sock = ls - mesh->listen_socket; receive_udppacket(mesh, n, &pkt);