Compare commits

...

60 Commits

Author SHA1 Message Date
Adrien Gallouët
0664fc3b21 Update mud 2017-01-18 15:27:18 +00:00
Adrien Gallouët
2cb24c0523 Update mud 2017-01-16 16:11:18 +00:00
Adrien Gallouët
65be22202c Update mud 2017-01-12 13:26:35 +00:00
Adrien Gallouët
6cc32bafd9 Code cleanup 2017-01-12 13:26:23 +00:00
Adrien Gallouët
6c268e658f Reset default MTU to 1500 2017-01-06 13:17:46 +00:00
Adrien Gallouët
33e24632d0 Update mud 2017-01-06 11:50:31 +00:00
Adrien Gallouët
e1b4c6aafc Add debug.bin 2017-01-06 11:02:09 +00:00
Adrien Gallouët
09d1932588 Code cleanup 2017-01-06 10:16:13 +00:00
Adrien Gallouët
4988479df4 Drop packets with bad length (too small) 2017-01-05 16:45:14 +00:00
Adrien Gallouët
7779e61c15 Update mud 2017-01-04 14:37:51 +00:00
Adrien Gallouët
2cc8caec35 Don't try to send empty packet 2017-01-04 14:35:26 +00:00
Adrien Gallouët
8c8715187b Code cleanup 2017-01-04 14:27:55 +00:00
Adrien Gallouët
c591a4d3cc Drop too large packets 2017-01-04 14:15:18 +00:00
Adrien Gallouët
76cd7ed4b8 Don't handle errors in tun.c 2017-01-04 14:07:30 +00:00
Adrien Gallouët
a8595c36b4 Update mud 2016-12-22 13:44:31 +00:00
Adrien Gallouët
1dfe105bd0 Don't modify mtu from mud_get_mtu() 2016-12-22 10:25:34 +00:00
Adrien Gallouët
f2ead2e4e2 Set nonblock to all fds 2016-12-22 10:22:16 +00:00
Adrien Gallouët
234f0d8592 Update and fix MTU 2016-12-21 16:14:40 +00:00
Adrien Gallouët
bd102c5fb0 Don't use linux/if_tun.h
This allows to build easily with other libc.
2016-12-21 11:43:19 +00:00
Adrien Gallouët
521d02e6e8 Code cleanup 2016-12-20 16:29:40 +00:00
Adrien Gallouët
91efdfe4e8 Exit only on EBADF for select() 2016-12-20 11:44:42 +00:00
Adrien Gallouët
deba26a7cb Code cleanup 2016-12-20 10:57:42 +00:00
Adrien Gallouët
b2f01687a8 Ignore SIGUSR2 2016-12-20 10:25:00 +00:00
Adrien Gallouët
dc295f9dc0 Remove old gt.info 2016-12-20 10:24:20 +00:00
Adrien Gallouët
04f7c20494 Remove fd_read*() 2016-12-20 10:19:05 +00:00
Adrien Gallouët
cd1f122a59 Add gt_print_secretkey() 2016-12-20 10:06:24 +00:00
Adrien Gallouët
8ecd24564f Remove old fd_write*() 2016-12-20 10:00:24 +00:00
Adrien Gallouët
577938432a Remove buffer.h 2016-12-20 08:51:11 +00:00
Adrien Gallouët
89f8379c73 Remove statefile option 2016-12-20 08:49:43 +00:00
Adrien Gallouët
5934e3b94d Update mud 2016-12-19 16:46:17 +00:00
Adrien Gallouët
0e5974aea2 Update README.md and mud 2016-12-15 10:10:05 +00:00
Adrien Gallouët
3675820555 Add mtu-auto option 2016-12-14 14:56:53 +00:00
Adrien Gallouët
3ba1b914d6 Update mud 2016-12-13 13:54:33 +00:00
Adrien Gallouët
1dbf3fcc80 Update mud 2016-12-12 16:41:28 +00:00
Adrien Gallouët
6167145454 Update mud 2016-12-12 15:11:52 +00:00
Adrien Gallouët
97ae583707 Update mud 2016-12-08 11:24:15 +00:00
Adrien Gallouët
0d97df6b50 Reformat 2016-12-05 15:05:54 +00:00
Adrien Gallouët
0645f0d4d0 Update mud 2016-12-02 11:19:21 +00:00
Adrien Gallouët
3656ab9e2a Add bind-backup option 2016-11-28 11:02:06 +00:00
Adrien Gallouët
adb791d3ba Update mud 2016-11-25 16:44:00 +00:00
Adrien Gallouët
f1a5d55613 Update mud 2016-11-18 18:03:12 +00:00
Adrien Gallouët
f46305847e Rework buffer 2016-11-18 11:55:21 +00:00
Adrien Gallouët
a75f3b0fd8 Remove STARTED and STOPPED 2016-11-07 15:08:25 +00:00
Adrien Gallouët
2934228005 Remove pull/push of mud 2016-10-27 15:04:11 +00:00
Adrien Gallouët
d599e545f7 Update mud 2016-10-25 09:15:34 +00:00
Frank Denis
048870e280 <linux/if.h> is not required any more (#19) 2016-10-24 11:19:43 +02:00
Frank Denis
31045456fe include <net/if.h> for the ifreq structure (#18)
Required on BSD. Doesn't break anything elsewhere.
2016-10-23 12:38:32 +02:00
Adrien Gallouët
0bb5be63b9 Get ICMP type 3 to set the next-hop MTU 2016-10-18 16:44:20 +00:00
Adrien Gallouët
c9f737197c Remove multiqueue (not used with mud) 2016-10-05 09:49:14 +00:00
Adrien Gallouët
d4e70feddc Update mud 2016-10-05 08:02:48 +00:00
Adrien Gallouët
726a3eed13 Add MTU negotiation 2016-10-04 15:27:37 +00:00
Adrien Gallouët
caeed75918 Update mud 2016-09-21 16:17:20 +00:00
Adrien Gallouët
9a6795125d Update mud 2016-09-16 15:13:18 +00:00
Adrien Gallouët
db26fc5676 Update mud 2016-09-06 08:46:23 +00:00
Adrien Gallouët
05cc7b1087 Be more verbose when mud fails 2016-09-06 08:45:53 +00:00
Adrien Gallouët
6df1f9e243 Update mud 2016-09-05 09:31:34 +00:00
Adrien Gallouët
73ce84ccf7 Fixes #15 2016-08-26 11:19:52 +00:00
Adrien Gallouët
91bb0b1231 Forward tos/tclass to mud 2016-07-25 15:15:27 +00:00
Adrien Gallouët
84156a9eba Update mud 2016-07-20 15:15:11 +00:00
Adrien Gallouët
b13501b9fb Update mud 2016-07-19 16:53:53 +00:00
16 changed files with 556 additions and 662 deletions

View File

@@ -11,5 +11,8 @@ cd ..
[ -x glorytun ] || exit 1 [ -x glorytun ] || exit 1
mkdir -p deploy mkdir -p deploy
cp glorytun deploy/glorytun-$(cat VERSION)-$(uname -m).debug.bin
strip -s glorytun strip -s glorytun
mv glorytun deploy/glorytun-$(cat VERSION)-$(uname -m).bin cp glorytun deploy/glorytun-$(cat VERSION)-$(uname -m).bin

View File

@@ -7,7 +7,6 @@ glorytun_LDADD = $(libsodium_LIBS)
glorytun_SOURCES = \ glorytun_SOURCES = \
src/common.h \ src/common.h \
src/common.c \ src/common.c \
src/buffer.h \
src/ip.h \ src/ip.h \
src/str.h \ src/str.h \
src/main.c \ src/main.c \
@@ -16,11 +15,8 @@ glorytun_SOURCES = \
src/tun.c \ src/tun.c \
src/tun.h \ src/tun.h \
src/db.c \ src/db.c \
src/db.h \ src/db.h
src/state.c \
src/state.h
glorytun_CFLAGS += -I$(srcdir)/mud
glorytun_SOURCES += \ glorytun_SOURCES += \
mud/mud.h \ mud/mud.h \
mud/mud.c mud/mud.c

View File

@@ -1,15 +1,10 @@
# π₁(Glorytun)=ℤ² # π₁(Glorytun)=0
Small, Simple and Stupid VPN over [mud](https://github.com/angt/mud). Small, Simple and Stupid VPN over [mud](https://github.com/angt/mud).
#### Work In Progress
This code will probably format your harddisk!
#### Build and Install #### Build and Install
Glorytun depends on [libsodium](https://github.com/jedisct1/libsodium) version >= 1.0.4 Glorytun depends on [libsodium](https://github.com/jedisct1/libsodium) version >= 1.0.4.
and needs an AES-NI capable CPU.
To build and install the latest version: To build and install the latest version:

2
mud

Submodule mud updated: df67357d36...f6b6610980

View File

@@ -1,66 +0,0 @@
#pragma once
#include "common.h"
typedef struct buffer buffer_t;
struct buffer {
uint8_t *data;
uint8_t *read;
uint8_t *write;
uint8_t *end;
};
static inline void buffer_setup (buffer_t *buffer, void *data, size_t size)
{
if (!data)
data = malloc(ALIGN(size));
buffer->data = data;
buffer->read = data;
buffer->write = data;
buffer->end = data;
buffer->end += size;
}
static inline void buffer_format (buffer_t *buffer)
{
buffer->write = buffer->data;
buffer->read = buffer->data;
}
_pure_
static inline size_t buffer_size (buffer_t *buffer)
{
return buffer->end-buffer->data;
}
_pure_
static inline size_t buffer_write_size (buffer_t *buffer)
{
return buffer->end-buffer->write;
}
_pure_
static inline size_t buffer_read_size (buffer_t *buffer)
{
return buffer->write-buffer->read;
}
static inline void buffer_shift (buffer_t *buffer)
{
if (buffer->read==buffer->data)
return;
if (buffer->read==buffer->write) {
buffer_format(buffer);
return;
}
const size_t size = buffer_read_size(buffer);
memmove(buffer->data, buffer->read, size);
buffer->read = buffer->data;
buffer->write = buffer->data+size;
}

View File

@@ -1,22 +1,24 @@
#include "common.h" #include "common.h"
#include <stdio.h>
#include <stdarg.h> #include <stdarg.h>
#include <stdio.h>
int gt_print (const char *fmt, ...) int
gt_print(const char *fmt, ...)
{ {
va_list ap; va_list ap;
va_start(ap, fmt); va_start(ap, fmt);
int ret = vfprintf(stdout, fmt, ap); int ret = vfprintf(stdout, fmt, ap);
va_end(ap); va_end(ap);
if (ret<0) if (ret < 0)
return 0; return 0;
return ret; return ret;
} }
void gt_log (const char *fmt, ...) void
gt_log(const char *fmt, ...)
{ {
va_list ap; va_list ap;
va_start(ap, fmt); va_start(ap, fmt);
@@ -24,7 +26,8 @@ void gt_log (const char *fmt, ...)
va_end(ap); va_end(ap);
} }
void gt_fatal (const char *fmt, ...) void
gt_fatal(const char *fmt, ...)
{ {
va_list ap; va_list ap;
va_start(ap, fmt); va_start(ap, fmt);
@@ -34,24 +37,26 @@ void gt_fatal (const char *fmt, ...)
exit(EXIT_FAILURE); exit(EXIT_FAILURE);
} }
void gt_na (const char *name) void
gt_na(const char *name)
{ {
gt_log("%s is not available on your platform\n", name); gt_log("%s is not available on your platform\n", name);
} }
int gt_tohex (char *dst, size_t dst_size, const uint8_t *src, size_t src_size) int
gt_tohex(char *dst, size_t dst_size, const uint8_t *src, size_t src_size)
{ {
if _0_(!dst_size) if (_0_(!dst_size))
return -1; return -1;
if _0_(((dst_size-1)/2)<src_size) if (_0_(((dst_size - 1) / 2) < src_size))
return -1; return -1;
static const char tbl[] = "0123456789ABCDEF"; static const char tbl[] = "0123456789ABCDEF";
for (size_t i=0; i<src_size; i++) { for (size_t i = 0; i < src_size; i++) {
*dst++ = tbl[0xF&(src[i]>>4)]; *dst++ = tbl[0xF & (src[i] >> 4)];
*dst++ = tbl[0xF&(src[i])]; *dst++ = tbl[0xF & (src[i])];
} }
*dst = 0; *dst = 0;
@@ -59,37 +64,38 @@ int gt_tohex (char *dst, size_t dst_size, const uint8_t *src, size_t src_size)
return 0; return 0;
} }
_const_ _const_ static inline int
static inline int fromhex (const char c) fromhex(const char c)
{ {
if (c>='0' && c<='9') if (c >= '0' && c <= '9')
return c-'0'; return c - '0';
if (c>='A' && c<='F') if (c >= 'A' && c <= 'F')
return c-'A'+10; return c - 'A' + 10;
if (c>='a' && c<='f') if (c >= 'a' && c <= 'f')
return c-'a'+10; return c - 'a' + 10;
return -1; return -1;
} }
int gt_fromhex (uint8_t *dst, size_t dst_size, const char *src, size_t src_size) int
gt_fromhex(uint8_t *dst, size_t dst_size, const char *src, size_t src_size)
{ {
if _0_(src_size&1) if (_0_(src_size & 1))
return -1; return -1;
if _0_(dst_size<(src_size/2)) if (_0_(dst_size < (src_size / 2)))
return -1; return -1;
for (size_t i=0; i<src_size; i+=2) { for (size_t i = 0; i < src_size; i += 2) {
const int a = fromhex(src[i]); const int a = fromhex(src[i]);
const int b = fromhex(src[i+1]); const int b = fromhex(src[i + 1]);
if _0_(a==-1 || b==-1) if (_0_(a == -1 || b == -1))
return -1; return -1;
*dst++ = (a<<4)|b; *dst++ = (a << 4) | b;
} }
return 0; return 0;

View File

@@ -29,6 +29,12 @@
#define _const_ __attribute__ ((const)) #define _const_ __attribute__ ((const))
#define _align_(...) __attribute__ ((aligned(__VA_ARGS__))) #define _align_(...) __attribute__ ((aligned(__VA_ARGS__)))
#undef MAX
#define MAX(x,y) ({ __typeof__(x) X=(x); __typeof__(y) Y=(y); X > Y ? X : Y; })
#undef MIN
#define MIN(x,y) ({ __typeof__(x) X=(x); __typeof__(y) Y=(y); X < Y ? X : Y; })
int gt_print (const char *, ...) _printf_(1,2); int gt_print (const char *, ...) _printf_(1,2);
void gt_log (const char *, ...) _printf_(1,2); void gt_log (const char *, ...) _printf_(1,2);
void gt_fatal (const char *, ...) _printf_(1,2) _noreturn_; void gt_fatal (const char *, ...) _printf_(1,2) _noreturn_;

View File

@@ -3,56 +3,57 @@
#include "db.h" #include "db.h"
#include "str.h" #include "str.h"
#define CBIT(X) (1&(intptr_t)(X)) #define CBIT(X) (1 & (intptr_t)(X))
#define CBIT_PTR(X) (uint8_t *)(1|(intptr_t)(X)) #define CBIT_PTR(X) (uint8_t *)(1 | (intptr_t)(X))
#define CBIT_NODE(X) (struct node *)(1^(intptr_t)(X)) #define CBIT_NODE(X) (struct node *)(1 ^ (intptr_t)(X))
struct node { struct node {
uint8_t *child[2]; uint8_t *child[2];
uint32_t point; uint32_t point;
}; };
_pure_ _pure_ static inline size_t
static inline size_t db_size (const uint8_t *a) db_size(const uint8_t *a)
{ {
return (a[0]?:str_len((char *)a+1))+1; return (a[0] ?: str_len((char *)a + 1)) + 1;
} }
_pure_ _pure_ static inline size_t
static inline size_t db_cmp (const uint8_t *a, const uint8_t *b) db_cmp(const uint8_t *a, const uint8_t *b)
{ {
const size_t size = a[0]; const size_t size = a[0];
if (size!=b[0]) if (size != b[0])
return 1; return 1;
if (!size) { if (!size) {
size_t i = str_cmp((char *)a+1, (char *)b+1); size_t i = str_cmp((char *)a + 1, (char *)b + 1);
return i?i+1:0; return i ? i + 1 : 0;
} }
for (size_t i=1; i<=size; i++) { for (size_t i = 1; i <= size; i++) {
if (a[i]!=b[i]) if (a[i] != b[i])
return i+1; return i + 1;
} }
return 0; return 0;
} }
_pure_ _pure_ static inline int
static inline int db_dir (const uint32_t point, uint8_t *data, const size_t size) db_dir(const uint32_t point, uint8_t *data, const size_t size)
{ {
const size_t pos = point>>8; const size_t pos = point >> 8;
if (pos>=size) if (pos >= size)
return 0; return 0;
return ((point|data[pos])&255)==255; return ((point | data[pos]) & 255) == 255;
} }
uint8_t *db_search (uint8_t **p, uint8_t *data) uint8_t *
db_search(uint8_t **p, uint8_t *data)
{ {
if _0_(!*p) if (_0_(!*p))
return NULL; return NULL;
uint8_t *r = *p; uint8_t *r = *p;
@@ -69,12 +70,13 @@ uint8_t *db_search (uint8_t **p, uint8_t *data)
return NULL; return NULL;
} }
uint8_t *db_insert (uint8_t **p, uint8_t *data) uint8_t *
db_insert(uint8_t **p, uint8_t *data)
{ {
if _0_(CBIT(data)) if (_0_(CBIT(data)))
return NULL; return NULL;
if _0_(!*p) { if (_0_(!*p)) {
*p = data; *p = data;
return data; return data;
} }
@@ -89,31 +91,31 @@ uint8_t *db_insert (uint8_t **p, uint8_t *data)
const size_t diff = db_cmp(r, data); const size_t diff = db_cmp(r, data);
if _0_(!diff) if (_0_(!diff))
return r; return r;
const size_t pos = diff-1; const size_t pos = diff - 1;
const uint8_t mask = ~((1u<<31)>>CLZ(r[pos]^data[pos])); const uint8_t mask = ~((1u << 31) >> CLZ(r[pos] ^ data[pos]));
const size_t point = (pos<<8)|mask; const size_t point = (pos << 8) | mask;
while (CBIT(*p)) { while (CBIT(*p)) {
struct node *node = CBIT_NODE(*p); struct node *node = CBIT_NODE(*p);
if (node->point>point) if (node->point > point)
break; break;
p = node->child+db_dir(node->point, data, size); p = node->child + db_dir(node->point, data, size);
} }
struct node *node = malloc(sizeof(struct node)); struct node *node = malloc(sizeof(struct node));
if _0_(!node) if (_0_(!node))
return NULL; return NULL;
const int dir = (mask|r[pos])==255; const int dir = (mask | r[pos]) == 255;
node->child[dir] = *p; node->child[dir] = *p;
node->child[1-dir] = data; node->child[1 - dir] = data;
node->point = point; node->point = point;
*p = CBIT_PTR(node); *p = CBIT_PTR(node);
@@ -121,9 +123,10 @@ uint8_t *db_insert (uint8_t **p, uint8_t *data)
return data; return data;
} }
uint8_t *db_remove (uint8_t **p, uint8_t *data) uint8_t *
db_remove(uint8_t **p, uint8_t *data)
{ {
if _0_(!*p) if (_0_(!*p))
return NULL; return NULL;
const size_t size = db_size(data); const size_t size = db_size(data);
@@ -136,16 +139,16 @@ uint8_t *db_remove (uint8_t **p, uint8_t *data)
p_old = p; p_old = p;
node = CBIT_NODE(*p); node = CBIT_NODE(*p);
dir = db_dir(node->point, data, size); dir = db_dir(node->point, data, size);
p = node->child+dir; p = node->child + dir;
} }
if _0_(db_cmp(data, *p)) if (_0_(db_cmp(data, *p)))
return NULL; return NULL;
uint8_t *r = *p; uint8_t *r = *p;
if (p_old) { if (p_old) {
*p_old = node->child[1-dir]; *p_old = node->child[1 - dir];
free(node); free(node);
} else { } else {
*p = NULL; *p = NULL;

View File

@@ -4,34 +4,40 @@
struct ip_common { struct ip_common {
uint8_t version; uint8_t version;
uint8_t tc;
uint8_t proto; uint8_t proto;
uint8_t hdr_size; uint8_t hdr_size;
uint16_t size; uint16_t size;
}; };
_pure_ _pure_ static inline uint8_t
static inline uint8_t ip_get_version (const uint8_t *data, size_t size) ip_get_version(const uint8_t *data, size_t size)
{ {
if (size<20) if (size < 20)
return 0; return 0;
return data[0]>>4; return data[0] >> 4;
} }
static inline int ip_get_common (struct ip_common *ic, const uint8_t *data, size_t size) static inline int
ip_get_common(struct ip_common *ic, const uint8_t *data, size_t size)
{ {
ic->version = ip_get_version(data, size); ic->version = ip_get_version(data, size);
switch (ic->version) { switch (ic->version) {
case 4: case 4:
ic->tc = data[1];
ic->proto = data[9]; ic->proto = data[9];
ic->hdr_size = (data[0]&0xF)<<2; ic->hdr_size = (data[0] & 0xF) << 2;
ic->size = ((data[2]<<8)|data[3]); ic->size = ((data[2] << 8) | data[3]);
return 0; if (ic->size >= 20)
return 0;
break;
case 6: case 6:
ic->tc = ((data[0] & 0xF) << 4) | (data[1] >> 4);
ic->proto = data[6]; ic->proto = data[6];
ic->hdr_size = 40; ic->hdr_size = 40;
ic->size = ((data[4]<<8)|data[5])+40; ic->size = ((data[4] << 8) | data[5]) + 40;
return 0; return 0;
} }

View File

@@ -1,71 +1,90 @@
#include "common.h" #include "common.h"
#include "buffer.h"
#include "ip.h"
#include "str.h"
#include "option.h"
#include "tun.h"
#include "db.h" #include "db.h"
#include "state.h" #include "ip.h"
#include "option.h"
#include "str.h"
#include "tun.h"
#include <fcntl.h>
#include <inttypes.h> #include <inttypes.h>
#include <limits.h> #include <limits.h>
#include <stdio.h>
#include <signal.h>
#include <poll.h> #include <poll.h>
#include <fcntl.h> #include <signal.h>
#include <stdio.h>
#include <sys/socket.h> #include <sys/socket.h>
#include <sys/time.h> #include <sys/time.h>
#include <arpa/inet.h> #include <arpa/inet.h>
#include <netdb.h> #include <netdb.h>
#include "mud.h" #include "../mud/mud.h"
#ifndef O_CLOEXEC #ifndef O_CLOEXEC
#define O_CLOEXEC 0 #define O_CLOEXEC 0
#endif #endif
#define GT_MTU(X) ((X)-28)
static struct { static struct {
volatile sig_atomic_t quit; volatile sig_atomic_t quit;
volatile sig_atomic_t info; char *dev;
int timeout; char *keyfile;
int state_fd; char *host;
} gt; long port;
struct {
char *list;
char *backup;
long port;
} bind;
long mtu;
long timeout;
long time_tolerance;
int ipv4;
int ipv6;
int mtu_auto;
int chacha20;
int version;
} gt = {
.port = 5000,
.bind = {
.port = 5000,
},
.mtu = 1500,
.timeout = 5000,
.ipv4 = 1,
#ifdef __linux__
.ipv6 = 1,
#endif
};
static void fd_set_nonblock (int fd) static void
fd_set_nonblock(int fd)
{ {
int ret; int ret;
do { do {
ret = fcntl(fd, F_GETFL, 0); ret = fcntl(fd, F_GETFL, 0);
} while (ret==-1 && errno==EINTR); } while (ret == -1 && errno == EINTR);
int flags = (ret==-1)?0:ret; int flags = (ret == -1) ? 0 : ret;
do { do {
ret = fcntl(fd, F_SETFL, flags|O_NONBLOCK); ret = fcntl(fd, F_SETFL, flags | O_NONBLOCK);
} while (ret==-1 && errno==EINTR); } while (ret == -1 && errno == EINTR);
if (ret==-1) if (ret == -1)
perror("fcntl O_NONBLOCK"); perror("fcntl O_NONBLOCK");
} }
static void gt_sa_handler (int sig) static void
gt_quit_handler(int sig)
{ {
switch (sig) { gt.quit = 1;
case SIGINT:
case SIGQUIT:
case SIGTERM:
gt.quit = 1;
break;
case SIGUSR1:
gt.info = 1;
break;
}
} }
static void gt_set_signal (void) static void
gt_set_signal(void)
{ {
struct sigaction sa = { struct sigaction sa = {
.sa_flags = 0, .sa_flags = 0,
@@ -73,150 +92,66 @@ static void gt_set_signal (void)
sigemptyset(&sa.sa_mask); sigemptyset(&sa.sa_mask);
sa.sa_handler = gt_sa_handler; sa.sa_handler = gt_quit_handler;
sigaction(SIGINT, &sa, NULL); sigaction(SIGINT, &sa, NULL);
sigaction(SIGQUIT, &sa, NULL); sigaction(SIGQUIT, &sa, NULL);
sigaction(SIGTERM, &sa, NULL); sigaction(SIGTERM, &sa, NULL);
sigaction(SIGUSR1, &sa, NULL);
sa.sa_handler = SIG_IGN; sa.sa_handler = SIG_IGN;
sigaction(SIGHUP, &sa, NULL); sigaction(SIGHUP, &sa, NULL);
sigaction(SIGPIPE, &sa, NULL); sigaction(SIGPIPE, &sa, NULL);
sigaction(SIGUSR1, &sa, NULL);
sigaction(SIGUSR2, &sa, NULL);
} }
static ssize_t fd_read (int fd, void *data, size_t size) static void
{ gt_print_secretkey(struct mud *mud)
if ((fd==-1) || !size)
return -1;
ssize_t ret = read(fd, data, size);
if (ret==-1) {
if (errno==EAGAIN || errno==EINTR)
return -1;
if (errno)
perror("read");
return 0;
}
return ret;
}
static ssize_t fd_write (int fd, const void *data, size_t size)
{
if ((fd==-1) || !size)
return -1;
ssize_t ret = write(fd, data, size);
if (ret==-1) {
if (errno==EAGAIN || errno==EINTR)
return -1;
if (errno==EPIPE || errno==ECONNRESET)
return 0;
if (errno)
perror("write");
return 0;
}
return ret;
}
static size_t fd_read_all (int fd, void *data, size_t size)
{
size_t done = 0;
while (done<size) {
ssize_t ret = fd_read(fd, (uint8_t *)data+done, size-done);
if (!ret)
break;
if (ret<0) {
struct pollfd pollfd = {
.fd = fd,
.events = POLLIN,
};
if (!poll(&pollfd, 1, gt.timeout))
break;
continue;
}
done += ret;
}
return done;
}
static size_t fd_write_all (int fd, const void *data, size_t size)
{
size_t done = 0;
while (done<size) {
ssize_t ret = fd_write(fd, (const uint8_t *)data+done, size-done);
if (!ret)
break;
if (ret<0) {
struct pollfd pollfd = {
.fd = fd,
.events = POLLOUT,
};
if (!poll(&pollfd, 1, gt.timeout))
break;
continue;
}
done += ret;
}
return done;
}
static int gt_setup_secretkey (struct mud *mud, char *keyfile)
{ {
unsigned char key[32]; unsigned char key[32];
size_t size = sizeof(key);
if (str_empty(keyfile)) { if (mud_get_key(mud, key, &size))
char buf[2*sizeof(key)+1]; return;
size_t size = sizeof(key);
if (mud_get_key(mud, key, &size)) char buf[2 * sizeof(key) + 1];
return -1;
gt_tohex(buf, sizeof(buf), key, size); gt_tohex(buf, sizeof(buf), key, size);
state_send(gt.state_fd, "SECRETKEY", buf); gt_print("secret key: %s\n", buf);
}
return 0;
}
static int
gt_setup_secretkey(struct mud *mud, char *keyfile)
{
int fd; int fd;
do { do {
fd = open(keyfile, O_RDONLY|O_CLOEXEC); fd = open(keyfile, O_RDONLY | O_CLOEXEC);
} while (fd==-1 && errno==EINTR); } while (fd == -1 && errno == EINTR);
if (fd==-1) { if (fd == -1) {
perror("open keyfile"); perror("open keyfile");
return -1; return -1;
} }
char buf[2*sizeof(key)]; unsigned char key[32];
size_t r = fd_read_all(fd, buf, sizeof(buf)); char buf[2 * sizeof(key)];
size_t size = 0;
while (size < sizeof(buf)) {
ssize_t r = read(fd, &buf[size], sizeof(buf) - size);
if (r <= (ssize_t)0) {
if (r && (errno == EAGAIN || errno == EINTR))
continue;
break;
}
size += r;
}
close(fd); close(fd);
if (r!=sizeof(buf)) { if (size != sizeof(buf)) {
gt_log("unable to read secret key\n"); gt_log("unable to read secret key\n");
return -1; return -1;
} }
@@ -231,252 +166,301 @@ static int gt_setup_secretkey (struct mud *mud, char *keyfile)
return 0; return 0;
} }
int main (int argc, char **argv) static int
gt_setup_option(int argc, char **argv)
{ {
gt_set_signal(); // clang-format off
char *host = NULL;
long port = 5000;
char *bind_list = NULL;
long bind_port = 5000;
char *dev = NULL;
char *keyfile = NULL;
char *statefile = NULL;
long mtu = 1450;
gt.timeout = 5000;
long time_tolerance = 0;
int v4 = 1;
int v6 = 0;
#ifdef __linux__
v6 = 1;
#endif
struct option opts[] = { struct option opts[] = {
{ "host", &host, option_str }, { "host", &gt.host, option_str },
{ "port", &port, option_long }, { "port", &gt.port, option_long },
{ "bind", &bind_list, option_str }, { "bind", &gt.bind.list, option_str },
{ "bind-port", &bind_port, option_long }, { "bind-backup", &gt.bind.backup, option_str },
{ "dev", &dev, option_str }, { "bind-port", &gt.bind.port, option_long },
{ "mtu", &mtu, option_long }, { "dev", &gt.dev, option_str },
{ "keyfile", &keyfile, option_str }, { "mtu", &gt.mtu, option_long },
{ "multiqueue", NULL, option_option }, { "mtu-auto", NULL, option_option },
{ "statefile", &statefile, option_str }, { "keyfile", &gt.keyfile, option_str },
{ "timeout", &gt.timeout, option_long }, { "timeout", &gt.timeout, option_long },
{ "time-tolerance", &time_tolerance, option_long }, { "time-tolerance", &gt.time_tolerance, option_long },
{ "v4only", NULL, option_option }, { "v4only", NULL, option_option },
{ "v6only", NULL, option_option }, { "v6only", NULL, option_option },
{ "chacha20", NULL, option_option }, { "chacha20", NULL, option_option },
{ "version", NULL, option_option }, { "version", NULL, option_option },
{ NULL }, { NULL },
}; };
// clang-format on
if (option(opts, argc, argv)) if (option(opts, argc, argv))
return 1; return 1;
if (option_is_set(opts, "version")) { int v4only = option_is_set(opts, "v4only");
gt_print(PACKAGE_STRING"\n"); int v6only = option_is_set(opts, "v6only");
return 0;
}
if (option_is_set(opts, "v4only")) { if (v4only && v6only) {
v4 = 1; gt_log("v4only and v6only cannot be both set\n");
v6 = 0;
}
if (option_is_set(opts, "v6only")) {
v4 = 0;
v6 = 1;
}
if (option_is_set(opts, "v4only") &&
option_is_set(opts, "v6only")) {
gt_log("v4only and v6only are both set\n");
return 1; return 1;
} }
if (host && !option_is_set(opts, "keyfile")) { if (gt.host && !option_is_set(opts, "keyfile")) {
gt_log("keyfile option must be set\n"); gt_log("keyfile option must be set\n");
return 1; return 1;
} }
if (gt.timeout<=0 || gt.timeout>INT_MAX) { if ((int)gt.timeout <= 0) {
gt_log("bad timeout\n"); gt_log("bad timeout\n");
return 1; return 1;
} }
gt.state_fd = state_create(statefile); if (v4only) {
gt.ipv4 = 1;
gt.ipv6 = 0;
}
if (statefile && gt.state_fd==-1) if (v6only) {
gt.ipv4 = 0;
gt.ipv6 = 1;
}
gt.mtu_auto = option_is_set(opts, "mtu-auto");
gt.chacha20 = option_is_set(opts, "chacha20");
gt.version = option_is_set(opts, "version");
return 0;
}
static void
gt_setup_mtu(struct mud *mud, char *tun_name)
{
int mtu = mud_get_mtu(mud);
if (mtu == (int)gt.mtu)
return;
gt.mtu = mtu;
gt_log("setup MTU to %i on interface %s\n", mtu, tun_name);
if (tun_set_mtu(tun_name, mtu) == -1)
perror("tun_set_mtu");
}
int
main(int argc, char **argv)
{
gt_set_signal();
if (gt_setup_option(argc, argv))
return 1; return 1;
if (gt.version) {
gt_print(PACKAGE_STRING "\n");
return 0;
}
int icmp_fd = -1;
if (gt.ipv4 && gt.mtu_auto) {
icmp_fd = socket(AF_INET, SOCK_RAW, IPPROTO_ICMP);
if (icmp_fd == -1)
gt_log("couldn't create ICMP socket\n");
}
char *tun_name = NULL; char *tun_name = NULL;
int tun_fd = tun_create(dev, &tun_name, option_is_set(opts, "multiqueue")); int tun_fd = tun_create(gt.dev, &tun_name);
if (tun_fd==-1) { if (tun_fd == -1) {
gt_log("couldn't create tun device\n"); gt_log("couldn't create tun device\n");
return 1; return 1;
} }
fd_set_nonblock(tun_fd); struct mud *mud = mud_create(gt.bind.port, gt.ipv4, gt.ipv6,
!gt.chacha20, GT_MTU(gt.mtu));
int chacha = option_is_set(opts, "chacha20");
struct mud *mud = mud_create(bind_port, v4, v6, !chacha);
if (!mud) { if (!mud) {
gt_log("couldn't create mud\n"); gt_log("couldn't create mud\n");
return 1; return 1;
} }
if (gt_setup_secretkey(mud, keyfile)) if (str_empty(gt.keyfile)) {
return 1; gt_print_secretkey(mud);
} else {
mud_set_send_timeout_msec(mud, gt.timeout); if (gt_setup_secretkey(mud, gt.keyfile))
if (time_tolerance > 0)
mud_set_time_tolerance_sec(mud, time_tolerance);
if (host && port && bind_list) {
char tmp[1024];
char *name = &tmp[0];
size_t size = str_cpy(tmp, bind_list, sizeof(tmp)-1);
for (size_t i=0; i<size; i++) {
if (tmp[i]!=',')
continue;
tmp[i] = 0;
if (mud_peer(mud, name, host, port))
return 1;
name = &tmp[i+1];
}
if (name[0] && mud_peer(mud, name, host, port))
return 1; return 1;
} }
mud_set_send_timeout_msec(mud, gt.timeout);
if (gt.time_tolerance > 0)
mud_set_time_tolerance_sec(mud, gt.time_tolerance);
if (gt.host && gt.port) {
if (gt.bind.backup) {
if (mud_peer(mud, gt.bind.backup, gt.host, gt.port, 1)) {
perror("mud_peer (backup)");
return 1;
}
}
if (gt.bind.list) {
char tmp[1024];
char *name = &tmp[0];
str_cpy(tmp, gt.bind.list, sizeof(tmp) - 1);
while (*name) {
char *p = name;
while (*p && *p != ',')
p++;
if (*p)
*p++ = 0;
if (mud_peer(mud, name, gt.host, gt.port, 0)) {
perror("mud_peer");
return 1;
}
name = p;
}
}
}
gt_setup_mtu(mud, tun_name);
int mud_fd = mud_get_fd(mud); int mud_fd = mud_get_fd(mud);
state_send(gt.state_fd, "INITIALIZED", tun_name); fd_set_nonblock(tun_fd);
fd_set_nonblock(mud_fd);
if (icmp_fd != -1)
fd_set_nonblock(icmp_fd);
gt_log("running...\n");
fd_set rfds; fd_set rfds;
FD_ZERO(&rfds); FD_ZERO(&rfds);
int started = 0; unsigned char buf[8 * 1024];
struct { int last_fd = 1 + MAX(tun_fd, MAX(mud_fd, icmp_fd));
unsigned char *buf;
} send, recv;
send.buf = malloc(2*mtu);
recv.buf = malloc(mtu);
size_t send_size = 0;
size_t send_limit = 0;
while (!gt.quit) { while (!gt.quit) {
FD_SET(tun_fd, &rfds); FD_SET(tun_fd, &rfds);
FD_SET(mud_fd, &rfds);
if (mud_can_pull(mud)) { if (icmp_fd != -1)
FD_SET(mud_fd, &rfds); FD_SET(icmp_fd, &rfds);
} else {
FD_CLR(mud_fd, &rfds);
}
struct timeval timeout = { if (select(last_fd, &rfds, NULL, NULL, NULL) == -1) {
.tv_usec = 100000, if (errno != EBADF)
};
if (mud_can_push(mud) || send_size)
timeout.tv_usec = 1000;
if _0_(select(mud_fd+1, &rfds, NULL, NULL, &timeout)==-1) {
if (errno==EINTR)
continue; continue;
perror("select"); perror("select");
return 1; return 1;
} }
if (mud_is_up(mud)) { if (icmp_fd != -1 && FD_ISSET(icmp_fd, &rfds)) {
if (!started) { struct sockaddr_storage ss;
state_send(gt.state_fd, "STARTED", tun_name); socklen_t sl = sizeof(ss);
started = 1; ssize_t r = recvfrom(icmp_fd, buf, sizeof(buf), 0,
} (struct sockaddr *)&ss, &sl);
} else { if (r >= 8) {
if (started) { struct ip_common ic;
state_send(gt.state_fd, "STOPPED", tun_name); if (!ip_get_common(&ic, buf, r) && ic.proto == 1) {
started = 0; unsigned char *data = &buf[ic.hdr_size];
if (data[0] == 3) {
int mtu = (data[6] << 8) | data[7];
if (mtu) {
gt_log("received MTU from ICMP: %i\n", mtu);
mud_set_mtu(mud, GT_MTU(mtu));
}
}
}
} }
} }
if (FD_ISSET(tun_fd, &rfds)) { if (FD_ISSET(tun_fd, &rfds)) {
while (send_size<mtu) { size_t size = 0;
const ssize_t r = tun_read(tun_fd, send.buf+send_size, mtu);
if (r<=0) { while (sizeof(buf) - size >= gt.mtu) {
gt.quit |= !r; const int r = tun_read(tun_fd, &buf[size], sizeof(buf) - size);
if (r <= 0 || r > gt.mtu)
break; break;
}
struct ip_common ic; struct ip_common ic;
if (ip_get_common(&ic, send.buf+send_size, mtu) || ic.size!=r) { if (ip_get_common(&ic, &buf[size], r) || ic.size != r)
gt_log("packet dropped: malformed\n"); break;
continue;
}
send_size += r; size += r;
if (send_size<=mtu)
send_limit = send_size;
} }
}
if (send_limit && mud_send(mud, send.buf, send_limit)==send_limit) {
if (send_size>send_limit)
memmove(&send.buf[0], &send.buf[send_limit], send_size-send_limit);
send_size -= send_limit;
send_limit = send_size;
}
mud_push(mud);
if (FD_ISSET(mud_fd, &rfds))
mud_pull(mud);
while (!gt.quit) {
const int size = mud_recv(mud, recv.buf, mtu);
if (size<=0)
break;
int p = 0; int p = 0;
while (p<size) { while (p < size) {
struct ip_common ic; int tc = 0;
int q = p;
if (ip_get_common(&ic, recv.buf+p, size-p) || ic.size>size-p) while (q < size) {
struct ip_common ic;
if ((ip_get_common(&ic, &buf[q], size - q)) ||
(ic.size > size - q))
break;
if (q + ic.size > p + gt.mtu)
break;
q += ic.size;
if (tc < (ic.tc & 0xFC))
tc = ic.tc & 0xFC;
}
if (p >= q)
break; break;
const ssize_t r = tun_write(tun_fd, recv.buf+p, ic.size); int r = mud_send(mud, &buf[p], q - p, tc);
if (r<=0) { if (r == -1 && errno == EMSGSIZE) {
gt.quit |= !r; gt_setup_mtu(mud, tun_name);
} else {
if (r == -1 && errno != EAGAIN)
perror("mud_send");
}
p = q;
}
}
if (FD_ISSET(mud_fd, &rfds)) {
while (1) {
const int size = mud_recv(mud, buf, sizeof(buf));
if (size <= 0) {
if (size == -1 && errno != EAGAIN)
perror("mud_recv");
break; break;
} }
p += ic.size; int p = 0;
while (p < size) {
struct ip_common ic;
if ((ip_get_common(&ic, &buf[p], size - p)) ||
(ic.size > size - p))
break;
tun_write(tun_fd, &buf[p], ic.size);
p += ic.size;
}
} }
} }
} }

View File

@@ -3,9 +3,10 @@
#include "option.h" #include "option.h"
#include "str.h" #include "str.h"
int option_str (void *data, int argc, char **argv) int
option_str(void *data, int argc, char **argv)
{ {
if (argc<2 || str_empty(argv[1])) { if (argc < 2 || str_empty(argv[1])) {
gt_print("option `%s' need a string argument\n", argv[0]); gt_print("option `%s' need a string argument\n", argv[0]);
return -1; return -1;
} }
@@ -15,9 +16,10 @@ int option_str (void *data, int argc, char **argv)
return 1; return 1;
} }
int option_long (void *data, int argc, char **argv) int
option_long(void *data, int argc, char **argv)
{ {
if (argc<2 || str_empty(argv[1])) { if (argc < 2 || str_empty(argv[1])) {
gt_print("option `%s' need an integer argument\n", argv[0]); gt_print("option `%s' need an integer argument\n", argv[0]);
return -1; return -1;
} }
@@ -26,7 +28,7 @@ int option_long (void *data, int argc, char **argv)
char *end; char *end;
long val = strtol(argv[1], &end, 0); long val = strtol(argv[1], &end, 0);
if (errno || argv[1]==end) { if (errno || argv[1] == end) {
gt_print("argument `%s' is not a valid integer\n", argv[1]); gt_print("argument `%s' is not a valid integer\n", argv[1]);
return -1; return -1;
} }
@@ -36,9 +38,10 @@ int option_long (void *data, int argc, char **argv)
return 1; return 1;
} }
int option_is_set (struct option *opts, const char *name) int
option_is_set(struct option *opts, const char *name)
{ {
for (int k=0; opts[k].name; k++) { for (int k = 0; opts[k].name; k++) {
if (!str_cmp(opts[k].name, name)) if (!str_cmp(opts[k].name, name))
return opts[k].set; return opts[k].set;
} }
@@ -46,20 +49,21 @@ int option_is_set (struct option *opts, const char *name)
return 0; return 0;
} }
int option_option (void *data, int argc, char **argv) int
option_option(void *data, int argc, char **argv)
{ {
if (!data) if (!data)
return 0; return 0;
struct option *opts = (struct option *)data; struct option *opts = (struct option *)data;
for (int k=0; opts[k].name; k++) for (int k = 0; opts[k].name; k++)
opts[k].set = 0; opts[k].set = 0;
for (int i=1; i<argc; i++) { for (int i = 1; i < argc; i++) {
int found = 0; int found = 0;
for (int k=0; opts[k].name; k++) { for (int k = 0; opts[k].name; k++) {
if (str_cmp(opts[k].name, argv[i])) if (str_cmp(opts[k].name, argv[i]))
continue; continue;
@@ -68,9 +72,9 @@ int option_option (void *data, int argc, char **argv)
return -1; return -1;
} }
int ret = opts[k].call(opts[k].data, argc-i, &argv[i]); int ret = opts[k].call(opts[k].data, argc - i, &argv[i]);
if (ret<0) if (ret < 0)
return -1; return -1;
opts[k].set = 1; opts[k].set = 1;
@@ -81,29 +85,30 @@ int option_option (void *data, int argc, char **argv)
} }
if (!found) if (!found)
return i-1; return i - 1;
} }
return argc; return argc;
} }
static int option_usage (struct option *opts, int slen) static int
option_usage(struct option *opts, int slen)
{ {
if (!opts) if (!opts)
return 0; return 0;
int len = 0; int len = 0;
for (int k=0; opts[k].name; k++) { for (int k = 0; opts[k].name; k++) {
if (len>40) { if (len > 40) {
gt_print("\n%*s", slen, ""); gt_print("\n%*s", slen, "");
len = 0; len = 0;
} }
len += gt_print(" [%s", opts[k].name); len += gt_print(" [%s", opts[k].name);
if (opts[k].call==option_option) { if (opts[k].call == option_option) {
len += option_usage((struct option *)opts[k].data, slen+len); len += option_usage((struct option *)opts[k].data, slen + len);
} else { } else {
len += gt_print(" ARG"); len += gt_print(" ARG");
} }
@@ -114,21 +119,22 @@ static int option_usage (struct option *opts, int slen)
return len; return len;
} }
int option (struct option *opts, int argc, char **argv) int
option(struct option *opts, int argc, char **argv)
{ {
int ret = option_option(opts, argc, argv); int ret = option_option(opts, argc, argv);
if (ret==argc) if (ret == argc)
return 0; return 0;
if (ret<0 || ret+1>=argc) if (ret < 0 || ret + 1 >= argc)
return 1; return 1;
gt_print("option `%s' is unknown\n", argv[ret+1]); gt_print("option `%s' is unknown\n", argv[ret + 1]);
int slen = gt_print("usage: %s", argv[0]); int slen = gt_print("usage: %s", argv[0]);
if (slen>40) { if (slen > 40) {
slen = 12; slen = 12;
gt_print("\n%*s", slen, ""); gt_print("\n%*s", slen, "");
} }

View File

@@ -1,62 +0,0 @@
#include "common.h"
#include "state.h"
#include "str.h"
#include <stdio.h>
#include <fcntl.h>
#include <sys/stat.h>
int state_create (const char *filename)
{
if (str_empty(filename))
return -1;
int fd = open(filename, O_WRONLY);
if (fd==-1) {
if (errno!=EINTR)
perror("open");
return -1;
}
struct stat st = {0};
if (fstat(fd, &st)==-1) {
perror("fstat");
close(fd);
return -1;
}
if (!S_ISFIFO(st.st_mode)) {
gt_log("`%s' is not a fifo\n", filename);
close(fd);
return -1;
}
return fd;
}
void state_send (int fd, const char *state, const char *info)
{
if (str_empty(state))
return;
if (fd==-1) {
gt_print("%s %s\n", state, info);
return;
}
const char *strs[] = { state, " ", info, "\n" };
char *str = str_cat(strs, COUNT(strs));
if (!str) {
perror("str_cat");
return;
}
if (write(fd, str, str_len(str))==-1 && errno!=EINTR)
perror("write");
free(str);
}

View File

@@ -1,4 +0,0 @@
#pragma once
int state_create (const char *);
void state_send (int, const char *, const char *);

View File

@@ -2,14 +2,15 @@
#include "common.h" #include "common.h"
static inline size_t str_cpy (char *restrict dst, const char *restrict src, size_t len) static inline size_t
str_cpy(char *restrict dst, const char *restrict src, size_t len)
{ {
if (!dst || !src) if (!dst || !src)
return 0; return 0;
size_t i; size_t i;
for (i=0; i<len && src[i]; i++) for (i = 0; i < len && src[i]; i++)
dst[i] = src[i]; dst[i] = src[i];
dst[i] = 0; dst[i] = 0;
@@ -17,29 +18,29 @@ static inline size_t str_cpy (char *restrict dst, const char *restrict src, size
return i; return i;
} }
_pure_ _pure_ static inline int
static inline int str_empty (const char *restrict str) str_empty(const char *restrict str)
{ {
return !str || !str[0]; return !str || !str[0];
} }
_pure_ _pure_ static inline size_t
static inline size_t str_cmp (const char *restrict sa, const char *restrict sb) str_cmp(const char *restrict sa, const char *restrict sb)
{ {
if (!sa || !sb) if (!sa || !sb)
return 1; return 1;
size_t i = 0; size_t i = 0;
while (sa[i]==sb[i]) while (sa[i] == sb[i])
if (!sa[i++]) if (!sa[i++])
return 0; return 0;
return i+1; return i + 1;
} }
_pure_ _pure_ static inline size_t
static inline size_t str_len (const char *restrict str) str_len(const char *restrict str)
{ {
if (!str) if (!str)
return 0; return 0;
@@ -47,11 +48,12 @@ static inline size_t str_len (const char *restrict str)
return strlen(str); return strlen(str);
} }
static inline char *str_cat (const char **strs, size_t count) static inline char *
str_cat(const char **strs, size_t count)
{ {
size_t size = 1; size_t size = 1;
for (size_t i=0; i<count; i++) for (size_t i = 0; i < count; i++)
size += str_len(strs[i]); size += str_len(strs[i]);
char *str = malloc(size); char *str = malloc(size);
@@ -61,7 +63,7 @@ static inline char *str_cat (const char **strs, size_t count)
char *p = str; char *p = str;
for (size_t i=0; i<count; i++) { for (size_t i = 0; i < count; i++) {
size_t len = str_len(strs[i]); size_t len = str_len(strs[i]);
memcpy(p, strs[i], len); memcpy(p, strs[i], len);
p += len; p += len;

178
src/tun.c
View File

@@ -1,25 +1,28 @@
#include "common.h" #include "common.h"
#include "tun.h"
#include "str.h"
#include "ip.h" #include "ip.h"
#include "str.h"
#include "tun.h"
#include <stdio.h>
#include <fcntl.h> #include <fcntl.h>
#include <stdio.h>
#include <sys/ioctl.h> #include <sys/ioctl.h>
#include <sys/socket.h> #include <sys/socket.h>
#include <sys/uio.h> #include <sys/uio.h>
#include <net/if.h>
#ifdef __linux__ #ifdef __linux__
#include <linux/if.h> #define IFF_TUN 0x0001
#include <linux/if_tun.h> #define IFF_NO_PI 0x1000
#define TUNSETIFF _IOW('T', 202, int)
#endif #endif
#ifdef __APPLE__ #ifdef __APPLE__
#include <sys/sys_domain.h>
#include <sys/kern_control.h>
#include <net/if_utun.h> #include <net/if_utun.h>
#include <sys/kern_control.h>
#include <sys/sys_domain.h>
#endif #endif
#if defined(__APPLE__) || defined(__OpenBSD__) #if defined(__APPLE__) || defined(__OpenBSD__)
@@ -28,20 +31,23 @@
#ifdef __APPLE__ #ifdef __APPLE__
static int tun_create_by_id (char *name, size_t size, unsigned id, _unused_ int mq) static int
tun_create_by_id(char *name, size_t size, unsigned id)
{ {
int fd = socket(PF_SYSTEM, SOCK_DGRAM, SYSPROTO_CONTROL); int fd = socket(PF_SYSTEM, SOCK_DGRAM, SYSPROTO_CONTROL);
if (fd==-1) if (fd == -1)
return -1; return -1;
struct ctl_info ci; struct ctl_info ci;
memset(&ci, 0, sizeof(ci)); memset(&ci, 0, sizeof(ci));
str_cpy(ci.ctl_name, UTUN_CONTROL_NAME, sizeof(ci.ctl_name)-1); str_cpy(ci.ctl_name, UTUN_CONTROL_NAME, sizeof(ci.ctl_name) - 1);
if (ioctl(fd, CTLIOCGINFO, &ci)) { if (ioctl(fd, CTLIOCGINFO, &ci)) {
int err = errno;
close(fd); close(fd);
errno = err;
return -1; return -1;
} }
@@ -50,11 +56,13 @@ static int tun_create_by_id (char *name, size_t size, unsigned id, _unused_ int
.sc_len = sizeof(sc), .sc_len = sizeof(sc),
.sc_family = AF_SYSTEM, .sc_family = AF_SYSTEM,
.ss_sysaddr = AF_SYS_CONTROL, .ss_sysaddr = AF_SYS_CONTROL,
.sc_unit = id+1, .sc_unit = id + 1,
}; };
if (connect(fd, (struct sockaddr *)&sc, sizeof(sc))) { if (connect(fd, (struct sockaddr *)&sc, sizeof(sc))) {
int err = errno;
close(fd); close(fd);
errno = err;
return -1; return -1;
} }
@@ -63,139 +71,132 @@ static int tun_create_by_id (char *name, size_t size, unsigned id, _unused_ int
return fd; return fd;
} }
static int tun_create_by_name (char *name, size_t size, char *dev_name, int mq) static int
tun_create_by_name(char *name, size_t size, char *dev_name)
{ {
unsigned id = 0; unsigned id = 0;
if (sscanf(dev_name, "utun%u", &id)!=1) if (sscanf(dev_name, "utun%u", &id) != 1) {
errno = EINVAL;
return -1; return -1;
}
return tun_create_by_id(name, size, id, mq); return tun_create_by_id(name, size, id);
} }
#else /* not __APPLE__ */ #else /* not __APPLE__ */
#ifdef __linux__ #ifdef __linux__
static int tun_create_by_name (char *name, size_t size, char *dev_name, int mq) static int
tun_create_by_name(char *name, size_t size, char *dev_name)
{ {
int fd = open("/dev/net/tun", O_RDWR); int fd = open("/dev/net/tun", O_RDWR);
if (fd==-1) if (fd == -1)
return -1; return -1;
struct ifreq ifr = { struct ifreq ifr = {
.ifr_flags = IFF_TUN|IFF_NO_PI, .ifr_flags = IFF_TUN | IFF_NO_PI,
}; };
if (mq) { str_cpy(ifr.ifr_name, dev_name, IFNAMSIZ - 1);
#ifdef IFF_MULTI_QUEUE
ifr.ifr_flags |= IFF_MULTI_QUEUE;
#endif
}
str_cpy(ifr.ifr_name, dev_name, IFNAMSIZ-1);
if (ioctl(fd, TUNSETIFF, &ifr)) { if (ioctl(fd, TUNSETIFF, &ifr)) {
close(fd); close(fd);
return -1; return -1;
} }
str_cpy(name, ifr.ifr_name, size-1); str_cpy(name, ifr.ifr_name, size - 1);
return fd; return fd;
} }
#else /* not __linux__ not __APPLE__ */ #else /* not __linux__ not __APPLE__ */
static int tun_create_by_name (char *name, size_t size, char *dev_name, _unused_ int mq) static int
tun_create_by_name(char *name, size_t size, char *dev_name)
{ {
char path[64]; char path[64];
snprintf(path, sizeof(path), "/dev/%s", dev_name); snprintf(path, sizeof(path), "/dev/%s", dev_name);
str_cpy(name, dev_name, size-1); str_cpy(name, dev_name, size - 1);
return open(path, O_RDWR); return open(path, O_RDWR);
} }
#endif /* not __APPLE__ */ #endif /* not __APPLE__ */
static int tun_create_by_id (char *name, size_t size, unsigned id, int mq) static int
tun_create_by_id(char *name, size_t size, unsigned id)
{ {
char dev_name[64]; char dev_name[64];
snprintf(dev_name, sizeof(dev_name), "tun%u", id); snprintf(dev_name, sizeof(dev_name), "tun%u", id);
return tun_create_by_name(name, size, dev_name, mq); return tun_create_by_name(name, size, dev_name);
} }
#endif #endif
int tun_create (char *dev_name, char **ret_name, int mq) int
tun_create(char *dev_name, char **ret_name)
{ {
char name[64] = {0}; char name[64] = {0};
int fd = -1; int fd = -1;
#ifndef IFF_MULTI_QUEUE
if (mq)
gt_na("IFF_MULTI_QUEUE");
#endif
if (str_empty(dev_name)) { if (str_empty(dev_name)) {
for (unsigned id=0; id<32 && fd==-1; id++) for (unsigned id = 0; id < 32 && fd == -1; id++)
fd = tun_create_by_id(name, sizeof(name), id, mq); fd = tun_create_by_id(name, sizeof(name), id);
} else { } else {
fd = tun_create_by_name(name, sizeof(name), dev_name, mq); fd = tun_create_by_name(name, sizeof(name), dev_name);
} }
if (fd!=-1 && ret_name) if (fd != -1 && ret_name)
*ret_name = strdup(name); *ret_name = strdup(name);
return fd; return fd;
} }
ssize_t tun_read (int fd, void *data, size_t size) int
tun_read(int fd, void *data, size_t size)
{ {
if (!size) if (!size)
return -1; return 0;
#ifdef GT_BSD_TUN #ifdef GT_BSD_TUN
uint32_t family; uint32_t family;
struct iovec iov[2] = { struct iovec iov[2] = {
{ .iov_base = &family, .iov_len = sizeof(family) }, {
{ .iov_base = data, .iov_len = size } .iov_base = &family,
.iov_len = sizeof(family),
},
{
.iov_base = data,
.iov_len = size,
},
}; };
ssize_t ret = readv(fd, iov, 2); ssize_t ret = readv(fd, iov, 2);
#else
ssize_t ret = read(fd, data, size);
#endif
if (ret==-1) { if (ret <= (ssize_t)0)
if (errno==EAGAIN || errno==EINTR) return ret;
return -1;
if (errno) if (ret <= (ssize_t)sizeof(family))
perror("tun read");
return 0;
}
#ifdef GT_BSD_TUN
if (ret<(ssize_t) sizeof(family))
return 0; return 0;
return ret-sizeof(family); return ret - sizeof(family);
#else #else
return ret; return read(fd, data, size);
#endif #endif
} }
ssize_t tun_write (int fd, const void *data, size_t size) int
tun_write(int fd, const void *data, size_t size)
{ {
if (!size) if (!size)
return -1; return 0;
#ifdef GT_BSD_TUN #ifdef GT_BSD_TUN
uint32_t family; uint32_t family;
@@ -208,35 +209,54 @@ ssize_t tun_write (int fd, const void *data, size_t size)
family = htonl(AF_INET6); family = htonl(AF_INET6);
break; break;
default: default:
errno = EINVAL;
return -1; return -1;
} }
struct iovec iov[2] = { struct iovec iov[2] = {
{ .iov_base = &family, .iov_len = sizeof(family) }, {
{ .iov_base = (void *) data, .iov_len = size }, .iov_base = &family,
.iov_len = sizeof(family),
},
{
.iov_base = (void *)data,
.iov_len = size,
},
}; };
ssize_t ret = writev(fd, iov, 2); ssize_t ret = writev(fd, iov, 2);
#else
ssize_t ret = write(fd, data, size);
#endif
if (ret==-1) { if (ret <= (ssize_t)0)
if (errno==EAGAIN || errno==EINTR) return ret;
return -1;
if (errno) if (ret <= (ssize_t)sizeof(family))
perror("tun write");
return 0;
}
#ifdef GT_BSD_TUN
if (ret<(ssize_t) sizeof(family))
return 0; return 0;
return ret-sizeof(family); return ret - sizeof(family);
#else #else
return ret; return write(fd, data, size);
#endif #endif
} }
int
tun_set_mtu(char *dev_name, int mtu)
{
struct ifreq ifr = {
.ifr_mtu = mtu,
};
str_cpy(ifr.ifr_name, dev_name, IFNAMSIZ - 1);
int fd = socket(AF_INET, SOCK_DGRAM, 0);
if (fd == -1)
return -1;
int ret = ioctl(fd, SIOCSIFMTU, &ifr);
int err = errno;
close(fd);
errno = err;
return ret;
}

View File

@@ -1,7 +1,6 @@
#pragma once #pragma once
#include <unistd.h> int tun_create (char *, char **);
int tun_read (int, void *, size_t);
int tun_create (char *, char **, int); int tun_write (int, const void *, size_t);
ssize_t tun_read (int, void *, size_t); int tun_set_mtu (char *, int);
ssize_t tun_write (int, const void *, size_t);