X-Git-Url: http://git.meshlink.io/?a=blobdiff_plain;f=src%2Fnet_packet.c;h=e4f3295af941bdd92335298c30b9c776e9b9c8dd;hb=f31267783fccb4e17d914c64243b0cba4e5632c4;hp=e0b364311cf8d18d3e3e6cee91733e9d90c811c4;hpb=76c7550c8ab0e9c0ee14a9c396baa008cfb9bc42;p=meshlink diff --git a/src/net_packet.c b/src/net_packet.c index e0b36431..e4f3295a 100644 --- a/src/net_packet.c +++ b/src/net_packet.c @@ -1,6 +1,6 @@ /* net_packet.c -- Handles in- and outgoing VPN packets - Copyright (C) 2014 Guus Sliepen + Copyright (C) 2014-2017 Guus Sliepen This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by @@ -19,10 +19,6 @@ #include "system.h" -#ifdef HAVE_ZLIB -#include -#endif - #include "conf.h" #include "connection.h" #include "crypto.h" @@ -66,7 +62,7 @@ static void send_mtu_probe_handler(event_loop_t *loop, void *data) { n->mtuprobes++; if(!n->status.reachable || !n->status.validkey) { - logger(mesh, MESHLINK_INFO, "Trying to send MTU probe to unreachable or rekeying node %s (%s)", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "Trying to send MTU probe to unreachable or rekeying node %s", n->name); n->mtuprobes = 0; return; } @@ -74,52 +70,62 @@ static void send_mtu_probe_handler(event_loop_t *loop, void *data) { if(n->mtuprobes > 32) { if(!n->minmtu) { n->mtuprobes = 31; - timeout = mesh->pinginterval; + timeout = mesh->dev_class_traits[n->devclass].pinginterval; goto end; } - logger(mesh, MESHLINK_INFO, "%s (%s) did not respond to UDP ping, restarting PMTU discovery", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "%s did not respond to UDP ping, restarting PMTU discovery", n->name); n->status.udp_confirmed = false; n->mtuprobes = 1; n->minmtu = 0; n->maxmtu = MTU; + + update_node_pmtu(mesh, n); } if(n->mtuprobes >= 10 && n->mtuprobes < 32 && !n->minmtu) { - logger(mesh, MESHLINK_INFO, "No response to MTU probes from %s (%s)", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "No response to MTU probes from %s", n->name); n->mtuprobes = 31; } if(n->mtuprobes == 30 || (n->mtuprobes < 30 && n->minmtu >= n->maxmtu)) { - if(n->minmtu > n->maxmtu) + if(n->minmtu > n->maxmtu) { n->minmtu = n->maxmtu; - else + update_node_pmtu(mesh, n); + } else { n->maxmtu = n->minmtu; + } + n->mtu = n->minmtu; - logger(mesh, MESHLINK_INFO, "Fixing MTU of %s (%s) to %d after %d probes", n->name, n->hostname, n->mtu, n->mtuprobes); + logger(mesh, MESHLINK_INFO, "Fixing MTU of %s to %d after %d probes", n->name, n->mtu, n->mtuprobes); n->mtuprobes = 31; } if(n->mtuprobes == 31) { - timeout = mesh->pinginterval; + timeout = mesh->dev_class_traits[n->devclass].pinginterval; goto end; - } else if(n->mtuprobes == 32) - timeout = mesh->pingtimeout; + } else if(n->mtuprobes == 32) { + timeout = mesh->dev_class_traits[n->devclass].pingtimeout; + } - for(int i = 0; i < 4 + mesh->localdiscovery; i++) { + for(int i = 0; i < 5; i++) { int len; if(i == 0) { - if(n->mtuprobes < 30 || n->maxmtu + 8 >= MTU) + if(n->mtuprobes < 30 || n->maxmtu + 8 >= MTU) { continue; + } + len = n->maxmtu + 8; - } else if(n->maxmtu <= n->minmtu) + } else if(n->maxmtu <= n->minmtu) { len = n->maxmtu; - else - len = n->minmtu + 1 + rand() % (n->maxmtu - n->minmtu); + } else { + len = n->minmtu + 1 + prng(mesh, n->maxmtu - n->minmtu); + } - if(len < 64) + if(len < 64) { len = 64; + } vpn_packet_t packet; packet.probe = true; @@ -128,7 +134,7 @@ static void send_mtu_probe_handler(event_loop_t *loop, void *data) { packet.len = len; n->status.broadcast = i >= 4 && n->mtuprobes <= 10 && n->prevedge; - logger(mesh, MESHLINK_DEBUG, "Sending MTU probe length %d to %s (%s)", len, n->name, n->hostname); + logger(mesh, MESHLINK_DEBUG, "Sending MTU probe length %d to %s", len, n->name); send_udppacket(mesh, n, &packet); } @@ -137,7 +143,7 @@ static void send_mtu_probe_handler(event_loop_t *loop, void *data) { end: timeout_set(&mesh->loop, &n->mtutimeout, &(struct timeval) { - timeout, rand() % 100000 + timeout, prng(mesh, TIMER_FUDGE) }); } @@ -149,7 +155,12 @@ void send_mtu_probe(meshlink_handle_t *mesh, node_t *n) { } static void mtu_probe_h(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet, uint16_t len) { - logger(mesh, MESHLINK_DEBUG, "Got MTU probe length %d from %s (%s)", packet->len, n->name, n->hostname); + if(len < 64) { + logger(mesh, MESHLINK_WARNING, "Got too short MTU probe length %d from %s", packet->len, n->name); + return; + } + + logger(mesh, MESHLINK_DEBUG, "Got MTU probe length %d from %s", packet->len, n->name); if(!packet->data[0]) { /* It's a probe request, send back a reply */ @@ -174,44 +185,40 @@ static void mtu_probe_h(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet if(n->mtuprobes > 30) { if(len == n->maxmtu + 8) { - logger(mesh, MESHLINK_INFO, "Increase in PMTU to %s (%s) detected, restarting PMTU discovery", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "Increase in PMTU to %s detected, restarting PMTU discovery", n->name); n->maxmtu = MTU; n->mtuprobes = 10; return; } - if(n->minmtu) + if(n->minmtu) { n->mtuprobes = 30; - else + } else { n->mtuprobes = 1; + } } /* If applicable, raise the minimum supported MTU */ - if(len > n->maxmtu) + if(len > n->maxmtu) { len = n->maxmtu; - if(n->minmtu < len) + } + + if(n->minmtu < len) { n->minmtu = len; + update_node_pmtu(mesh, n); + } } } -static uint16_t compress_packet(uint8_t *dest, const uint8_t *source, uint16_t len, int level) { - abort(); -} - -static uint16_t uncompress_packet(uint8_t *dest, const uint8_t *source, uint16_t len, int level) { - abort(); -} - /* VPN packet I/O */ static void receive_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet) { - logger(mesh, MESHLINK_DEBUG, "Received packet of %d bytes from %s (%s)", - packet->len, n->name, n->hostname); + logger(mesh, MESHLINK_DEBUG, "Received packet of %d bytes from %s", packet->len, n->name); - if(n->status.blacklisted) + if(n->status.blacklisted) { logger(mesh, MESHLINK_WARNING, "Dropping packet from blacklisted node %s", n->name); - else { + } else { n->in_packets++; n->in_bytes += packet->len; @@ -220,45 +227,38 @@ static void receive_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *pac } static bool try_mac(meshlink_handle_t *mesh, node_t *n, const vpn_packet_t *inpkt) { + (void)mesh; return sptps_verify_datagram(&n->sptps, inpkt->data, inpkt->len); } static void receive_udppacket(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *inpkt) { if(!n->sptps.state) { if(!n->status.waitingforkey) { - logger(mesh, MESHLINK_DEBUG, "Got packet from %s (%s) but we haven't exchanged keys yet", n->name, n->hostname); + logger(mesh, MESHLINK_DEBUG, "Got packet from %s but we haven't exchanged keys yet", n->name); send_req_key(mesh, n); - } else - logger(mesh, MESHLINK_DEBUG, "Got packet from %s (%s) but he hasn't got our key yet", n->name, n->hostname); - return; - } - sptps_receive_data(&n->sptps, inpkt->data, inpkt->len); -} - -void receive_tcppacket(meshlink_handle_t *mesh, connection_t *c, const char *buffer, int len) { - vpn_packet_t outpkt; + } else { + logger(mesh, MESHLINK_DEBUG, "Got packet from %s but he hasn't got our key yet", n->name); + } - if(len > sizeof(outpkt).data) return; + } - outpkt.len = len; - outpkt.tcp = true; - memcpy(outpkt.data, buffer, len); - - receive_packet(mesh, c->node, &outpkt); + sptps_receive_data(&n->sptps, inpkt->data, inpkt->len); } static void send_sptps_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *origpkt) { if(!n->status.validkey) { - logger(mesh, MESHLINK_INFO, "No valid key known yet for %s (%s)", n->name, n->hostname); - if(!n->status.waitingforkey) + logger(mesh, MESHLINK_INFO, "No valid key known yet for %s", n->name); + + if(!n->status.waitingforkey) { send_req_key(mesh, n); - else if(n->last_req_key + 10 < mesh->loop.now.tv_sec) { + } else if(n->last_req_key + 10 < mesh->loop.now.tv_sec) { logger(mesh, MESHLINK_DEBUG, "No key from %s after 10 seconds, restarting SPTPS", n->name); sptps_stop(&n->sptps); n->status.waitingforkey = false; send_req_key(mesh, n); } + return; } @@ -270,19 +270,6 @@ static void send_sptps_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t * return; } - vpn_packet_t outpkt; - - if(n->outcompression) { - int len = compress_packet(outpkt.data, origpkt->data, origpkt->len, n->outcompression); - if(len < 0) - logger(mesh, MESHLINK_ERROR, "Error while compressing packet to %s (%s)", n->name, n->hostname); - else if(len < origpkt->len) { - outpkt.len = len; - origpkt = &outpkt; - type |= PKT_COMPRESSED; - } - } - sptps_send_record(&n->sptps, type, origpkt->data, origpkt->len); return; } @@ -293,16 +280,16 @@ static void choose_udp_address(meshlink_handle_t *mesh, const node_t *n, const s *sock = n->sock; /* If the UDP address is confirmed, use it. */ - if(n->status.udp_confirmed) + if(n->status.udp_confirmed) { return; + } /* Send every third packet to n->address; that could be set to the node's reflexive UDP address discovered during key exchange. */ - static int x = 0; - if(++x >= 3) { - x = 0; + if(++mesh->udp_choice >= 3) { + mesh->udp_choice = 0; return; } @@ -310,7 +297,7 @@ static void choose_udp_address(meshlink_handle_t *mesh, const node_t *n, const s So we pick a random edge and a random socket. */ int i = 0; - int j = rand() % n->edge_tree->count; + int j = prng(mesh, n->edge_tree->count); edge_t *candidate = NULL; for splay_each(edge_t, e, n->edge_tree) { @@ -322,7 +309,7 @@ static void choose_udp_address(meshlink_handle_t *mesh, const node_t *n, const s if(candidate) { *sa = &candidate->address; - *sock = rand() % mesh->listen_sockets; + *sock = prng(mesh, mesh->listen_sockets); } /* Make sure we have a suitable socket for the chosen address */ @@ -337,69 +324,48 @@ static void choose_udp_address(meshlink_handle_t *mesh, const node_t *n, const s } static void choose_broadcast_address(meshlink_handle_t *mesh, const node_t *n, const sockaddr_t **sa, int *sock) { - static sockaddr_t broadcast_ipv4 = { - .in = { - .sin_family = AF_INET, - .sin_addr.s_addr = -1, - } - }; - - static sockaddr_t broadcast_ipv6 = { - .in6 = { - .sin6_family = AF_INET6, - .sin6_addr.s6_addr[0x0] = 0xff, - .sin6_addr.s6_addr[0x1] = 0x02, - .sin6_addr.s6_addr[0xf] = 0x01, - } - }; - - *sock = rand() % mesh->listen_sockets; + *sock = prng(mesh, mesh->listen_sockets); + sockaddr_t *broadcast_sa = &mesh->listen_socket[*sock].broadcast_sa; - if(mesh->listen_socket[*sock].sa.sa.sa_family == AF_INET6) { - if(mesh->localdiscovery_address.sa.sa_family == AF_INET6) { - mesh->localdiscovery_address.in6.sin6_port = n->prevedge->address.in.sin_port; - *sa = &mesh->localdiscovery_address; - } else { - broadcast_ipv6.in6.sin6_port = n->prevedge->address.in.sin_port; - broadcast_ipv6.in6.sin6_scope_id = mesh->listen_socket[*sock].sa.in6.sin6_scope_id; - *sa = &broadcast_ipv6; - } + if(broadcast_sa->sa.sa_family == AF_INET6) { + broadcast_sa->in6.sin6_port = n->prevedge->address.in.sin_port; } else { - if(mesh->localdiscovery_address.sa.sa_family == AF_INET) { - mesh->localdiscovery_address.in.sin_port = n->prevedge->address.in.sin_port; - *sa = &mesh->localdiscovery_address; - } else { - broadcast_ipv4.in.sin_port = n->prevedge->address.in.sin_port; - *sa = &broadcast_ipv4; - } + broadcast_sa->in.sin_port = n->prevedge->address.in.sin_port; } + + *sa = broadcast_sa; } static void send_udppacket(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *origpkt) { if(!n->status.reachable) { - logger(mesh, MESHLINK_INFO, "Trying to send UDP packet to unreachable node %s (%s)", n->name, n->hostname); + logger(mesh, MESHLINK_INFO, "Trying to send UDP packet to unreachable node %s", n->name); return; } - return send_sptps_packet(mesh, n, origpkt); + send_sptps_packet(mesh, n, origpkt); } bool send_sptps_data(void *handle, uint8_t type, const void *data, size_t len) { + assert(handle); + assert(data); + assert(len); + node_t *to = handle; meshlink_handle_t *mesh = to->mesh; /* Send it via TCP if it is a handshake packet, TCPOnly is in use, or this packet is larger than the MTU. */ - if(type >= SPTPS_HANDSHAKE || ((mesh->self->options | to->options) & OPTION_TCPONLY) || (type != PKT_PROBE && len > to->minmtu)) { + if(type >= SPTPS_HANDSHAKE || (type != PKT_PROBE && len > to->minmtu)) { char buf[len * 4 / 3 + 5]; b64encode(data, buf, len); + /* If no valid key is known yet, send the packets using ANS_KEY requests, to ensure we get to learn the reflexive UDP address. */ if(!to->status.validkey) { - to->incompression = mesh->self->incompression; - return send_request(mesh, to->nexthop->connection, "%d %s %s %s -1 -1 -1 %d", ANS_KEY, mesh->self->name, to->name, buf, to->incompression); - } else - return send_request(mesh, to->nexthop->connection, "%d %s %s %d %s", REQ_KEY, mesh->self->name, to->name, REQ_SPTPS, buf); + return send_request(mesh, to->nexthop->connection, NULL, "%d %s %s %s -1 -1 -1 %d", ANS_KEY, mesh->self->name, to->name, buf, 0); + } else { + return send_request(mesh, to->nexthop->connection, NULL, "%d %s %s %d %s", REQ_KEY, mesh->self->name, to->name, REQ_SPTPS, buf); + } } /* Otherwise, send the packet via UDP */ @@ -407,19 +373,23 @@ bool send_sptps_data(void *handle, uint8_t type, const void *data, size_t len) { const sockaddr_t *sa; int sock; - if(to->status.broadcast) + if(to->status.broadcast) { choose_broadcast_address(mesh, to, &sa, &sock); - else + } else { choose_udp_address(mesh, to, &sa, &sock); + } if(sendto(mesh->listen_socket[sock].udp.fd, data, len, 0, &sa->sa, SALEN(sa->sa)) < 0 && !sockwouldblock(sockerrno)) { if(sockmsgsize(sockerrno)) { - if(to->maxmtu >= len) + if(to->maxmtu >= len) { to->maxmtu = len - 1; - if(to->mtu >= len) + } + + if(to->mtu >= len) { to->mtu = len - 1; + } } else { - logger(mesh, MESHLINK_WARNING, "Error sending UDP SPTPS packet to %s (%s): %s", to->name, to->hostname, sockstrerror(sockerrno)); + logger(mesh, MESHLINK_WARNING, "Error sending UDP SPTPS packet to %s: %s", to->name, sockstrerror(sockerrno)); return false; } } @@ -428,20 +398,28 @@ bool send_sptps_data(void *handle, uint8_t type, const void *data, size_t len) { } bool receive_sptps_record(void *handle, uint8_t type, const void *data, uint16_t len) { + assert(handle); + assert(!data || len); + node_t *from = handle; meshlink_handle_t *mesh = from->mesh; if(type == SPTPS_HANDSHAKE) { if(!from->status.validkey) { + logger(mesh, MESHLINK_INFO, "SPTPS key exchange with %s successful", from->name); from->status.validkey = true; from->status.waitingforkey = false; - logger(mesh, MESHLINK_INFO, "SPTPS key exchange with %s (%s) succesful", from->name, from->hostname); + + if(from->utcp) { + utcp_reset_timers(from->utcp); + } } + return true; } if(len > MTU) { - logger(mesh, MESHLINK_ERROR, "Packet from %s (%s) larger than maximum supported size (%d > %d)", from->name, from->hostname, len, MTU); + logger(mesh, MESHLINK_ERROR, "Packet from %s larger than maximum supported size (%d > %d)", from->name, len, MTU); return false; } @@ -453,27 +431,23 @@ bool receive_sptps_record(void *handle, uint8_t type, const void *data, uint16_t memcpy(inpkt.data, data, len); mtu_probe_h(mesh, from, &inpkt, len); return true; - } else + } else { inpkt.probe = false; + } if(type & ~(PKT_COMPRESSED)) { - logger(mesh, MESHLINK_ERROR, "Unexpected SPTPS record type %d len %d from %s (%s)", type, len, from->name, from->hostname); + logger(mesh, MESHLINK_ERROR, "Unexpected SPTPS record type %d len %d from %s", type, len, from->name); return false; } if(type & PKT_COMPRESSED) { - uint16_t ulen = uncompress_packet(inpkt.data, (const uint8_t *)data, len, from->incompression); - if(ulen < 0) - return false; - else - inpkt.len = ulen; - if(inpkt.len > MAXSIZE) - abort(); - } else { - memcpy(inpkt.data, data, len); - inpkt.len = len; + logger(mesh, MESHLINK_ERROR, "Error while decompressing packet from %s", from->name); + return false; } + memcpy(inpkt.data, data, len); // TODO: get rid of memcpy + inpkt.len = len; + receive_packet(mesh, from, &inpkt); return true; } @@ -489,12 +463,10 @@ void send_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet) { return; } - logger(mesh, MESHLINK_DEBUG, "Sending packet of %d bytes to %s (%s)", - packet->len, n->name, n->hostname); + logger(mesh, MESHLINK_DEBUG, "Sending packet of %d bytes to %s", packet->len, n->name); if(!n->status.reachable) { - logger(mesh, MESHLINK_WARNING, "Node %s (%s) is not reachable", - n->name, n->hostname); + logger(mesh, MESHLINK_WARNING, "Node %s is not reachable", n->name); return; } @@ -509,61 +481,70 @@ void send_packet(meshlink_handle_t *mesh, node_t *n, vpn_packet_t *packet) { void broadcast_packet(meshlink_handle_t *mesh, const node_t *from, vpn_packet_t *packet) { // Always give ourself a copy of the packet. - if(from != mesh->self) + if(from != mesh->self) { send_packet(mesh, mesh->self, packet); + } - logger(mesh, MESHLINK_INFO, "Broadcasting packet of %d bytes from %s (%s)", - packet->len, from->name, from->hostname); + logger(mesh, MESHLINK_INFO, "Broadcasting packet of %d bytes from %s", packet->len, from->name); for list_each(connection_t, c, mesh->connections) - if(c->status.active && c->status.mst && c != from->nexthop->connection) + if(c->status.active && c->status.mst && c != from->nexthop->connection) { send_packet(mesh, c->node, packet); + } } static node_t *try_harder(meshlink_handle_t *mesh, const sockaddr_t *from, const vpn_packet_t *pkt) { node_t *n = NULL; bool hard = false; - static time_t last_hard_try = 0; for splay_each(edge_t, e, mesh->edges) { - if(!e->to->status.reachable || e->to == mesh->self) + if(!e->to->status.reachable || e->to == mesh->self) { continue; + } if(sockaddrcmp_noport(from, &e->address)) { - if(last_hard_try == mesh->loop.now.tv_sec) + if(mesh->last_hard_try == mesh->loop.now.tv_sec) { continue; + } + hard = true; } - if(!try_mac(mesh, e->to, pkt)) + if(!try_mac(mesh, e->to, pkt)) { continue; + } n = e->to; break; } - if(hard) - last_hard_try = mesh->loop.now.tv_sec; + if(hard) { + mesh->last_hard_try = mesh->loop.now.tv_sec; + } - last_hard_try = mesh->loop.now.tv_sec; return n; } void handle_incoming_vpn_data(event_loop_t *loop, void *data, int flags) { + (void)flags; meshlink_handle_t *mesh = loop->data; listen_socket_t *ls = data; vpn_packet_t pkt; char *hostname; - sockaddr_t from = {{0}}; + sockaddr_t from; socklen_t fromlen = sizeof(from); node_t *n; int len; + memset(&from, 0, sizeof(from)); + len = recvfrom(ls->udp.fd, pkt.data, MAXSIZE, 0, &from.sa, &fromlen); if(len <= 0 || len > MAXSIZE) { - if(!sockwouldblock(sockerrno)) + if(!sockwouldblock(sockerrno)) { logger(mesh, MESHLINK_ERROR, "Receiving packet failed: %s", sockstrerror(sockerrno)); + } + return; } @@ -575,21 +556,24 @@ void handle_incoming_vpn_data(event_loop_t *loop, void *data, int flags) { if(!n) { n = try_harder(mesh, &from, &pkt); - if(n) + + if(n) { update_node_udp(mesh, n, &from); - else if(mesh->log_level >= MESHLINK_WARNING) { + } else if(mesh->log_level >= MESHLINK_WARNING) { hostname = sockaddr2hostname(&from); logger(mesh, MESHLINK_WARNING, "Received UDP packet from unknown source %s", hostname); free(hostname); return; - } else + } else { return; + } } if(n->status.blacklisted) { logger(mesh, MESHLINK_WARNING, "Dropping packet from blacklisted node %s", n->name); return; } + n->sock = ls - mesh->listen_socket; receive_udppacket(mesh, n, &pkt);