From c24d16e62eb6db70ff8aa8777156a938d1b7b2c0 Mon Sep 17 00:00:00 2001 From: Grant Limberg Date: Thu, 24 May 2018 15:22:11 -0700 Subject: [PATCH] ManagedRoute uses ioctl to add/remove routes on Linux Added LinuxNetLink to talk to the rtnetlink socket for adding interfaces, addresses routes. Not yet complete. Can currently monitor changes on the system. --- make-linux.mk | 11 +- nltest | Bin 0 -> 24872 bytes nltest.cpp | 13 ++ osdep/LinuxNetLink.cpp | 476 +++++++++++++++++++++++++++++++++++++++++ osdep/LinuxNetLink.hpp | 133 ++++++++++++ osdep/ManagedRoute.cpp | 169 +++++++++++++-- 6 files changed, 783 insertions(+), 19 deletions(-) create mode 100755 nltest create mode 100644 nltest.cpp create mode 100644 osdep/LinuxNetLink.cpp create mode 100644 osdep/LinuxNetLink.hpp diff --git a/make-linux.mk b/make-linux.mk index 56096da86..69dc5619e 100644 --- a/make-linux.mk +++ b/make-linux.mk @@ -17,6 +17,10 @@ DESTDIR?= include objects.mk ONE_OBJS+=osdep/LinuxEthernetTap.o +ONE_OBJS+=osdep/LinuxNetLink.o + +NLTEST_OBJS+=osdep/LinuxNetLink.o +NLTEST_OBJS+=nltest.o # Auto-detect miniupnpc and nat-pmp as well and use system libs if present, # otherwise build into binary as done on Mac and Windows. @@ -55,8 +59,8 @@ ifeq ($(ZT_SANITIZE),1) SANFLAGS+=-fsanitize=address -DASAN_OPTIONS=symbolize=1 endif ifeq ($(ZT_DEBUG),1) - override CFLAGS+=-Wall -Wno-deprecated -Werror -g -pthread $(INCLUDES) $(DEFS) - override CXXFLAGS+=-Wall -Wno-deprecated -Werror -g -std=c++11 -pthread $(INCLUDES) $(DEFS) + override CFLAGS+=-Wall -Wno-deprecated -g -pthread $(INCLUDES) $(DEFS) + override CXXFLAGS+=-Wall -Wno-deprecated -g -std=c++11 -pthread $(INCLUDES) $(DEFS) ZT_TRACE=1 STRIP?=echo # The following line enables optimization for the crypto code, since @@ -307,6 +311,9 @@ debug: FORCE make ZT_DEBUG=1 one make ZT_DEBUG=1 selftest +nltest: $(NLTEST_OBJS) + $(CXX) $(CXXFLAGS) $(LDFLAGS) -o nltest $(NLTEST_OBJS) $(LDLIBS) + # Note: keep the symlinks in /var/lib/zerotier-one to the binaries since these # provide backward compatibility with old releases where the binaries actually # lived here. Folks got scripts. diff --git a/nltest b/nltest new file mode 100755 index 0000000000000000000000000000000000000000..8d782c18ad0b8a1e153ac876f6739865e80ca500 GIT binary patch literal 24872 zcmeHv4|G$I_Eo_*dlr!Q|e+tO|iP}&kxQXqNV*2#8Tx-V@^mXNEsDKtrmlQ!u6 zzPU5fm8?rS>7IRW-^ut~ee?b1n{U4P^Ucit<9V>zyR67&lSC+%?v#idxW+&lc!K_E z9sy~P>ZJ+zy!^^X3mto#6f>JwDnBUp4 zsqU8foq>6s9ieFNyx#h{d3Co`_k^o!S-nX=$u3{Dj>IKW!<&NflqN0)T;b1ekm>3I zvR{JoLilP6T(Q9SL3bfNzp^Oz*A{xNvXFnkLjSM@{!{3miM0H%!=l``AXv!$fCZkk z&_lgeNY6o#@?WvQ`z-KZS=hPCqTDtM{B8^VJ`4O|3;eu={;yfs z`EBSaM_PV3Y@z>z1s<`$M=kL0puj@?ew~HVrF=%IPOQ2SKEo;K0{%I3Xl|^NRCRM#IHdMyzKEu(lImHz zQVj$n!Oa~#S}?M9Wn*VJ6kO}u)EP9=3Z`^xTOvVUK=tES3rd2$Kimj;x& zFzi-Uh4JC->L%FFgrH;NTF)4pbBc@vJA=L+G|9%$_AZ{n)BqV<-6mJFFpOL5e<0cs zL3UQ*_DIld7CNZQ=o`c~`~7MUaV|++7uwzt3aD#>J<+Zp^&@X*O0JP2K|d9O_6>zq zR#&Q{=n9{vMbwT^hn9=<1U2-$e``<2&TO|a*+8&Ii-dPb{?0J!*%J%}x_UNKp?<@* zp0IywP?LJPBOM{FUFrx0H8rG#yI}&;sQR~TRoi_Xozmu@*4+`1psq8BMrTz@4tE3I8H|LH55qAcMSD7f!EUL2d!z#+teqFj8xZ5ClWKr6 z*!V&zWGNrjT|NxMo)FKnys=STfc9$Ku))35qq?dWNXxyRrCcS3?>DgTs?j>*`4O7pq=m%i{gwsYg9MVyaL@0dWlsHRMQoAf-l57{Ln zy(p6|_O)U^IxvN#BxyF^zY4sKn6O~gkLb>^G*1u39mKbPF^qStIXCO@!mUSCN&xcPo%z=WIk>rb0-vPpykCS3Flr5!fm7#Nu_Xu>CEP)Ryv!Y7&V zArp=Pml|jLegz^ehd(jvE>f zBYq2|r-suAv+gIJri9cG<2MmcQ$cEw@f(S!DIj%#@oR`D*G~;F{x0IlKw2YGC|y;%O>Q)iC~Q;wKR=GkzlR zD;>jgb1B`!xcyh&5KjVKyJh@=1kMT!{C)Z1LGyXfolgp*r82|UgldGj#82=>k zw8W$u82?q`$>mZtjQ=9>K`FqCVrUl z_Y+U9l^SCFCgRDZQiF`&NIbbx>Hy={5Kk_Y8esfg#M4rf>Sz2?;>nd#eT-jBJh@P+ zoAI^8lk23~82?G|?fu|caJ}h?zj&V#e^rT{z0k7On=F}#x+}@akD*DF{ZImy$ z@O{XyQ>rc@zjEwSu@b+a9MhL5wiC*Wm$V8f{5DrOi4
$`)*r09GlcE@Upts{FT zDTzBC0jEz!59kVhPL#yK+sK?gGVJZ+P>K4G_`RuiNO0bLw|l*NoqKJovirC7(5J-z z7*G=SS=53`d{1Q!Fvs14CmNlSqrBKr-dK-oHm-_iX^ePHy^Xgh10P`R^m`_qN!3Y!cXNTCAoFOQ7T=5so#erOx)l^i}<%3 ztq1Ilzpg(;3gTP0pc@Q3zdt}3PR5=FA-&#sPcPU$M5%aG$n}ypeoo(t+QefA06pu3 zSLuHQ&kg=2W)+jcyIB#h=-)&B?2x(57&6ga%I@dtWl8#s`yThb?)%*8y~i=e|8ce~ zDT&$ozrL4FC+hX;_sPm*@D2&OU4y8Q5`RJe8swne3TQg)+f^!Q6ES{V7xf>%%W~_Vg%&pE_NKKGeKj(HtDr3tMxIvs8TWmu z#Q;H%d*UaQI7i7q5p1lq%bE(IXU}T1#=wW6)W?nG{&gLWR(P4 z(h|K+bm=}%f)){b<-4!wZGS*w{1_&s#O;-s)4onUi^=H}nl`@xjb=9t3-k0CKdFBf zqB-?jmsy{w|1lv@Un_CLg2bRqo#S-uTZmRw67yDlf=0l?&DdUI$Zw$0l$`Y$M&{iI zGSaPJ?KwKZT%{u@GWBE9nwRvt{@*F-??sZyan9>|DCtp_^jVsQlMBnBU;j0lU}Tr6 ze-h5v`%cH_z6{AlFF5`>3FM*RK}+i94$e=+f*QhDE-G zb}Us*l{NI^JlRy)Kvp=aFvP&HGWqCJl8RG_C&(givRj6~o<_7OQSXkOJlhoiJ{jna zrR|P=wHO-SWT3L9+4W|7zuR$WTx`_t_}s4~2rN43*f&HG$Dw6K1n=1gj`d8j7Kn}7 z9D5&R$p=^2n;i$2mEdR9IQ*<1kDvQW-HwBy33Q8il(tVaRbcvhT}e*;c{#S4?pF62 zedKL6&}DCeTgXfsnZxHJPcmeuIVA8F`OfP~{C7(HNBTu@Bc(LoHYY-MX7gZi{Mha@ ze@fdVch%2$1!ocKv7O+xM}3POk4~pvO_VgsGDdVg24*{Kp$&i1TUp~8Y>w;tt*|NE z?zf@cqf^jn8%)lK#v1vaeiU|4_hrXd)*t`B?!PJ62pj!3hdL(q+@I^er!JWLukQDM zasS0WF8c2zCZ62>+Ya?t)PI*?Rc`-frc>PR3}U$Edf=W)8pF9RM*giNyDJpK#S&6% zP>;t(fih>^Q#pVvj;cMCw1O!o_f#GLr9eL1O+Rh)(?CBpl-@^)2;|Z&6rmJnj+2us z?t2SKSjSIb0rDol%hc1YMVlvnHai|2hsv<5IX*`d_@YyeeLp09iJh>2Z#ESWe`{ogl30c{jHVywGP}dMYKo)E%MBh`P%zW0Bhw1v z@9VqHllvuTHgX(t#ZDB*-`f2u`Duc+S=ErycDv6Jrr3VUn>98H*PU;;?!z-=?z%&$ zyOR8p(X{a2Hg6J*=!u_k4eAjTWEuoU*G0>*0USiVGOm1FfA4n~1mb@Bzh3|U0t?)K zrT%~OFYo{9qW{O^xtwMHqo6D6|KD2lKRIkx1D_Pho%pNmLv&Y#u+fy(fe+L=7Nv*O5+qG8K(Sb_Yo9x7#VLZ1H{{0*T$-jR9 zYAn_zS}XH#yEX?4b@YDtBNYbcc0C_U7dgIsjGX+~8GGzlg*X1jNE3VhlUQ$e4PuR^ z2N&IMV3w}UogXi+Qa;IUqTIY>u2`=|JV8-ds^D4 z{pa<+{vrCGbyC6U{loPCcys^1ZuI{&(f=KkTCo3N#Fh0wYM9&q#~GVlKmQz0!v{!HCR?Qd@XXU^ufe~Z2o>#S?=)BOE`(I2tjHe~$|8^?N2{36y$T06^&J+!){ z^(SA$^KAMcgP1=+Ep7|HNh?776)Zm9`0w=t0QU|?t4=hQ+Hmiu44_Wo z9f;CHwl4thR}xF;$y`b5>p+jU_qXUTK#3m34_hx=A1U!Hkfl9?S~=sNZCL7%^m7m% zc?Zw%=OIns0!4TcbQb*eC{ur$MpyEV7iprB+{_Onn_Hi^Nz4PU7d2RT9 z=W<~MHrMNL9l$90U$|7nJ8+#t+y>f%>$AA}aqY%!_fK(s1=m4b58z?ZQCx9c-@ujq zc1or%uY!Ta@~obTQZs#WC;P*p5I(5u2yK?Nu)JpNs^+y`&#D!M$eQ2-QGD=4iJq4A zx5#V4Q7wq9xp-X$U*%odx?F8uvu5?0iBd$v$6xsBdaKMnzA`k1!r|_Tk|DQxJtWty zS}ZsDG@pzQ%Cw2n@}MSrk!PaRnu!tSX_4K5KqT0M(mOVX!jYhi56`q6-9dR)pt`zx zqJ-pNz$Aw{LZ{!?Nd?QDzD+?RwkZzyA zOgA&|WTBfV9*+zVeJ7nBB8umt^ugN&a)* zY4dj=h2kNA&=@z6>83V9q8rsGFE&RC4oJ-3pmX^s&%VsYvt8tgrFE6{$ z5F5X5T(acz_D72!Dq?x=LB9QHpPzx+{|Wh)vV86`xv8uzX8(Ngqeaqeq`i!*4U^?7 zpj-yJ-DR_vmkl+pF$h-||UsABX?y}tKN;Sy$6yz%~-j0J7XrnQCs6S3a_Pf{y zf2VMsrm}vUxm}B%FWYZhS2kcPkl~4eHLpH zsi#2L?ZAffuohr1n=tZ&0I<`*w5)A3E?8|TeGk&>vAz{bC;xm3>H9Hn;QpWWKM|p~ z4=p>axCeQf;7 zvW7@mJ^BLP!TJSW2wyB^^{lkRKQJ$G)uc^IKXI_HPb#KiEwze9p$Ik1zmeos__-bQ zWnz}&huoEg^b=LZH&g7325&_06j%BI0e^?9nj#d^PfRVIOpQRvcj4myJC}aqZ>jw0 zen6XXji6}T3y9DgMi%JB1m)*t(V$|1B9m~n5m%3E2}M2%AGN?oE$~qb{NHW?@qYv2 z{{+NrmQSDLfWYa0CnyM>{#U`w)BiqDpqY=t5Y5vFlMNz0$7kGYIWPX70UtlIAog~& zXQm+juYuMf3L^avm(pS4dwF@-lCsc-XLS_thMoml-zl&)4V2bR3iP2Zg$jd6_&Oyg za51UvPMP6cjYPNj6lkfSz>AacRSyfJyy5~s%?lEC%e=ktNSOsu{>M2lG1i!jW8Ke|?kds%uEdkg1htYrf4r^Vc+c zo87I=YF$mu{C4`cu_{r(Whnh;RlRT|lN|kTmiRw<6O8|gD$e+KE^cT0b~8rtV*Fp0 z@PBg}{ZE+ii(GuXB>X8CFO`Jf=He41;orIV#LPUGi(e&O;PYQDK1u2?(9gw~CB^v+ zx$ zJJY>1;p{<$DbtM{7we%&x)l){RtaGbl}BM2E?a?i=mJjq2gCwF!U#KX*$TAhe&B`d z|DTkpK)-yS<90I46#kjTua;`^@K-ple-((^G*B1ESaXrH~7z)_)E<}IA@qs)$Ct_nu{X5M4^k=->CBO^W*$TY8 z=wnj;y5D9Y|5q0HS1s@(7Wf(9H=^4H=< zf%yejEc|*I!+B;CxtGfy$Qvh5Sjhj5**|uFatQJ?PV(oaE(<%4Tj+n)0=J{w8?kQ6 zd^~_*VG(e?RX5d2l2!trSu|N1-N#-|%Vt(*j z$nUYhzhQyXH}{3w=SAQ$x7keIw2&`herlF9;@2}A{m9z^%K;1XEaX>m`Fwxr1kT2f zPiFbij4XWJLeGzY%Us4xUbMhREcDRBZ}P_j{KlNUr-8y649G(5)(E`Nc$WMT90?M| z7c+h-dk&1Mb*VTBBoyqy(HeoUy16sF$=9g{v~Z+H^+kInf4Hlgz4@%ZwQf;eVIdVa zTpg+}67lU&gCQ-lLu!xsa3oA1+SRoKSxg)|sw77guSTQ2tAZN6BCYm!cT04RhjEsR zs?m$gnlT7Y^2n1}I0m_u4s5C4h=WGfb_63{SDmV=J2g5I2ItwV#K9q+RjsP4)?9jX zb92kK)>>5xb>bbl#*9(bWoz6ko7Lu3O>~Hkic`kaW`%=F(;7)_`t&OIN>3xw=oFSr z)#!K|6Tpt)k<{hh)l1!8b@j4kt<7uIweF?fW@t4Tnrl&GEjwQZZ{JNvzce(kV@+^& z2^~{HN37%`{N$EgPz?s~ie54fcgai2J*JurY}^xBVj+jMOcZ;w>fASZzWxm9W|ns1jKp{ zohmyv>(;UfVIlL+f>T0kjoPwSM8%A6F7gHG{43L;Ryj># zw40I2&!5Uk7n<4eP4p>{IM^w-kfyt87FgD9N9HS z$)B6z>M~PY<~Xb?tzCT}*!gD%WZubIS>4p4II4{=KRE+|7MH9bYhvcK{@hd6a=KC7 zXgLmCE}G3l7+WDfro-m?4j$*{bd4#B9?2RTL%b7qE$x~Zp!7s*ct^Y=uJBhfCS<<{(=%g!s}EU_!LrG`yRSyRRyXqVIe zIUUFkV#_Ow^&!@q@b;XX?8vk{(aW9amvf{X^6|6LvL6!W=`xO0qlTls9QWg#GwpKB zv2Iwltg9QBum2DuZOq|r`9_XC(XimDg~nNOd6}*4F)yH5PiN=j|L$lay55 zv!e^!R!}Ws&@Cc{^Yns|ZmBvH)`HbIqHZ2uTu9ZML(%FjzMd^obznybnGLE%j1>OP zBZpCuhIPV68F;L_Q2syYgfv zE8;}ywib^7GWo@O96@EInFAhk&kJru@@z z<>%i8jEcZxBNoK_enI);Se|OsA;TcD4VO8;cwZ*yfT$SHBwnWpx;rnwc&{d?u$O1g z*e~!$^74!4e1gs-2QdXvu7LUxG21V`Zx9rZPjZ6j2LV2g2;~>m6z}r{{f. + * + * -- + * + * You can be released from the requirements of the license by purchasing + * a commercial license. Buying such a license is mandatory as soon as you + * develop commercial closed-source software that incorporates or links + * directly against ZeroTier software without disclosing the source code + * of your own application. + */ + +#include "LinuxNetLink.hpp" + +#include + +namespace ZeroTier { + +LinuxNetLink::LinuxNetLink() + : _t() + , _running(false) + , _routes_ipv4() + , _routes_ipv6() + , _fd(socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE)) + , _la({0}) + , _pa({0}) + , _msg({0}) + , _iov({0}) + , _rtn(0) + , _nlp(NULL) + , _nll(0) + , _rtp(NULL) + , _rtl(0) + , _rtap(NULL) + , _ifip(NULL) + , _ifil(0) + , _ifap(NULL) + , _ifal(0) +{ + memset(_buf, 0, sizeof(_buf)); + + // set socket timeout to 1 sec so we're not permablocking recv() calls + struct timeval tv; + tv.tv_sec = 1; + tv.tv_usec = 0; + if(setsockopt(_fd, SOL_SOCKET, SO_RCVTIMEO, (const char*)&tv, sizeof(tv)) != 0) { + fprintf(stderr, "setsockopt failed: %s\n", strerror(errno)); + } + + _la.nl_family = AF_NETLINK; + _la.nl_pid = getpid(); + _la.nl_groups = RTMGRP_LINK|RTMGRP_IPV4_IFADDR|RTMGRP_IPV6_IFADDR|RTMGRP_IPV4_ROUTE|RTMGRP_IPV6_ROUTE; + if (bind(_fd, (struct sockaddr*)&_la, sizeof(_la))) { + fprintf(stderr, "Error connecting to RTNETLINK: %s\n", strerror(errno)); + ::exit(1); + } + + _running = true; + _t = Thread::start(this); + + fprintf(stderr, "Requesting IPV4 Routes\n"); + _requestIPv4Routes(); + Thread::sleep(10); + fprintf(stderr, "Requesting IPV6 Routes\n"); + _requestIPv6Routes(); +} + +LinuxNetLink::~LinuxNetLink() +{ + _running = false; + Thread::join(_t); + + ::close(_fd); +} + +void LinuxNetLink::threadMain() throw() +{ + char *p; + p = _buf; + _nll = 0; + + while(_running) { + _rtn = recv(_fd, p, sizeof(_buf) - _nll, 0); + + if (_rtn > 0) { + _nlp = (struct nlmsghdr *) p; + + if(_nlp->nlmsg_type == NLMSG_ERROR && (_nlp->nlmsg_flags & NLM_F_ACK) != NLM_F_ACK) { + fprintf(stderr, "NLMSG_ERROR\n"); + struct nlmsgerr *err = (struct nlmsgerr*)NLMSG_DATA(_nlp); + if (err->error != 0) { + fprintf(stderr, "rtnetlink error: %s\n", strerror(-(err->error))); + } + p = _buf; + _nll = 0; + continue; + } + + if (_nlp->nlmsg_type == NLMSG_NOOP) { + fprintf(stderr, "noop\n"); + continue; + } + + if( (_nlp->nlmsg_flags & NLM_F_MULTI) == NLM_F_MULTI || (_nlp->nlmsg_type == NLMSG_DONE)) + { + if (_nlp->nlmsg_type == NLMSG_DONE) { + _processMessage(); + p = _buf; + _nll = 0; + continue; + } + p += _rtn; + _nll += _rtn; + } + + if (_nlp->nlmsg_type == NLMSG_OVERRUN) { + fprintf(stderr, "NLMSG_OVERRUN: Data lost\n"); + p = _buf; + _nll = 0; + continue; + } + + _nll += _rtn; + + _processMessage(); + p = _buf; + _nll = 0; + } + else { + Thread::sleep(100); + continue; + } + } +} + +void LinuxNetLink::_processMessage() +{ + for(_nlp = (struct nlmsghdr *)_buf; NLMSG_OK(_nlp, _nll); _nlp=NLMSG_NEXT(_nlp, _nll)) + { + switch(_nlp->nlmsg_type) + { + case RTM_NEWLINK: + _linkAdded(); + break; + case RTM_DELLINK: + _linkDeleted(); + break; + case RTM_GETLINK: + fprintf(stderr, "Get Link\n"); + break; + case RTM_SETLINK: + fprintf(stderr, "Set Link\n"); + break; + case RTM_NEWADDR: + _ipAddressAdded(); + break; + case RTM_DELADDR: + _ipAddressDeleted(); + break; + case RTM_GETADDR: + fprintf(stderr, "Get IP Address\n"); + break; + case RTM_NEWROUTE: + _routeAdded(); + break; + case RTM_DELROUTE: + _routeDeleted(); + break; + case RTM_GETROUTE: + break; + default: + fprintf(stderr, "ignore msgtype %d...\n", _nlp->nlmsg_type); + } + } + _nlp = NULL; + _nll = 0; + _rtp = NULL; + _rtl = 0; + _ifip = NULL; + _ifil = 0; + _ifap = NULL; + _ifal = 0; +} + +void LinuxNetLink::_ipAddressAdded() +{ + _ifap = (struct ifaddrmsg *)NLMSG_DATA(_nlp); + _rtap = (struct rtattr *)IFA_RTA(_ifap); + _ifal = IFA_PAYLOAD(_nlp); + + char addr[40] = {0}; + char local[40] = {0}; + char label[40] = {0}; + char bcast[40] = {0}; + + for(;RTA_OK(_rtap, _ifal); _rtap=RTA_NEXT(_rtap,_ifal)) + { + switch(_rtap->rta_type) { + case IFA_ADDRESS: + inet_ntop(_ifap->ifa_family, RTA_DATA(_rtap), addr, 40); + break; + case IFA_LOCAL: + inet_ntop(_ifap->ifa_family, RTA_DATA(_rtap), local, 40); + break; + case IFA_LABEL: + memcpy(label, RTA_DATA(_rtap), 40); + break; + case IFA_BROADCAST: + inet_ntop(_ifap->ifa_family, RTA_DATA(_rtap), bcast, 40); + break; + } + } + + fprintf(stderr, "Added IP Address %s local: %s label: %s broadcast: %s\n", addr, local, label, bcast); +} + +void LinuxNetLink::_ipAddressDeleted() +{ + _ifap = (struct ifaddrmsg *)NLMSG_DATA(_nlp); + _rtap = (struct rtattr *)IFA_RTA(_ifap); + _ifal = IFA_PAYLOAD(_nlp); + + char addr[40] = {0}; + char local[40] = {0}; + char label[40] = {0}; + char bcast[40] = {0}; + + for(;RTA_OK(_rtap, _ifal); _rtap=RTA_NEXT(_rtap,_ifal)) + { + switch(_rtap->rta_type) { + case IFA_ADDRESS: + inet_ntop(_ifap->ifa_family, RTA_DATA(_rtap), addr, 40); + break; + case IFA_LOCAL: + inet_ntop(_ifap->ifa_family, RTA_DATA(_rtap), local, 40); + break; + case IFA_LABEL: + memcpy(label, RTA_DATA(_rtap), 40); + break; + case IFA_BROADCAST: + inet_ntop(_ifap->ifa_family, RTA_DATA(_rtap), bcast, 40); + break; + } + } + + fprintf(stderr, "Removed IP Address %s local: %s label: %s broadcast: %s\n", addr, local, label, bcast); +} + +void LinuxNetLink::_routeAdded() +{ + char dsts[40] = {0}; + char gws[40] = {0}; + char ifs[16] = {0}; + char ms[24] = {0}; + + _rtp = (struct rtmsg *) NLMSG_DATA(_nlp); + + _rtap = (struct rtattr *)RTM_RTA(_rtp); + _rtl = RTM_PAYLOAD(_nlp); + for(;RTA_OK(_rtap, _rtl); _rtap=RTA_NEXT(_rtap, _rtl)) + { + switch(_rtap->rta_type) + { + case RTA_DST: + inet_ntop(_rtp->rtm_family, RTA_DATA(_rtap), dsts, _rtp->rtm_family == AF_INET ? 24 : 40); + break; + case RTA_GATEWAY: + inet_ntop(_rtp->rtm_family, RTA_DATA(_rtap), gws, _rtp->rtm_family == AF_INET ? 24 : 40); + break; + case RTA_OIF: + sprintf(ifs, "%d", *((int*)RTA_DATA(_rtap))); + break; + } + } + sprintf(ms, "%d", _rtp->rtm_dst_len); + + fprintf(stderr, "Route Added: dst %s/%s gw %s if %s\n", dsts, ms, gws, ifs); +} + +void LinuxNetLink::_routeDeleted() +{ + char dsts[40] = {0}; + char gws[40] = {0}; + char ifs[16] = {0}; + char ms[24] = {0}; + + _rtp = (struct rtmsg *) NLMSG_DATA(_nlp); + + _rtap = (struct rtattr *)RTM_RTA(_rtp); + _rtl = RTM_PAYLOAD(_nlp); + for(;RTA_OK(_rtap, _rtl); _rtap=RTA_NEXT(_rtap, _rtl)) + { + switch(_rtap->rta_type) + { + case RTA_DST: + inet_ntop(_rtp->rtm_family, RTA_DATA(_rtap), dsts, _rtp->rtm_family == AF_INET ? 24 : 40); + break; + case RTA_GATEWAY: + inet_ntop(_rtp->rtm_family, RTA_DATA(_rtap), gws, _rtp->rtm_family == AF_INET ? 24 : 40); + break; + case RTA_OIF: + sprintf(ifs, "%d", *((int*)RTA_DATA(_rtap))); + break; + } + } + sprintf(ms, "%d", _rtp->rtm_dst_len); + + fprintf(stderr, "Route Deleted: dst %s/%s gw %s if %s\n", dsts, ms, gws, ifs); +} + +void LinuxNetLink::_linkAdded() +{ + char mac[20] = {0}; + unsigned int mtu = 0; + char ifname[40] = {0}; + + _ifip = (struct ifinfomsg *)NLMSG_DATA(_nlp); + _rtap = (struct rtattr *)IFLA_RTA(_ifip); + _ifil = RTM_PAYLOAD(_nlp); + + const char *ptr; + unsigned char *ptr2; + for(;RTA_OK(_rtap, _ifil);_rtap=RTA_NEXT(_rtap, _ifil)) + { + switch(_rtap->rta_type) { + case IFLA_ADDRESS: + ptr2 = (unsigned char*)RTA_DATA(_rtap); + snprintf(mac, 20, "%02x:%02x:%02x:%02x:%02x:%02x", + ptr2[0], ptr2[1], ptr2[2], ptr2[3], ptr2[4], ptr2[5]); + break; + case IFLA_IFNAME: + ptr = (const char*)RTA_DATA(_rtap); + memcpy(ifname, ptr, strlen(ptr)); + break; + case IFLA_MTU: + memcpy(&mtu, RTA_DATA(_rtap), sizeof(unsigned int)); + break; + } + } + + fprintf(stderr, "Link Added: %s mac: %s, mtu: %d\n", ifname, mac, mtu); +} + +void LinuxNetLink::_linkDeleted() +{ + char mac[20] = {0}; + unsigned int mtu = 0; + char ifname[40] = {0}; + + _ifip = (struct ifinfomsg *)NLMSG_DATA(_nlp); + _rtap = (struct rtattr *)IFLA_RTA(_ifip); + _ifil = RTM_PAYLOAD(_nlp); + + const char *ptr; + unsigned char *ptr2; + for(;RTA_OK(_rtap, _ifil);_rtap=RTA_NEXT(_rtap, _ifil)) + { + switch(_rtap->rta_type) { + case IFLA_ADDRESS: + ptr2 = (unsigned char*)RTA_DATA(_rtap); + snprintf(mac, 20, "%02x:%02x:%02x:%02x:%02x:%02x", + ptr2[0], ptr2[1], ptr2[2], ptr2[3], ptr2[4], ptr2[5]); + break; + case IFLA_IFNAME: + ptr = (const char*)RTA_DATA(_rtap); + memcpy(ifname, ptr, strlen(ptr)); + break; + case IFLA_MTU: + memcpy(&mtu, RTA_DATA(_rtap), sizeof(unsigned int)); + break; + } + } + + fprintf(stderr, "Link Deleted: %s mac: %s, mtu: %d\n", ifname, mac, mtu); +} + +void LinuxNetLink::_requestIPv4Routes() +{ + struct nl_req req; + bzero(&req, sizeof(req)); + req.nl.nlmsg_len = NLMSG_LENGTH(sizeof(struct rtmsg)); + req.nl.nlmsg_flags = NLM_F_REQUEST | NLM_F_DUMP; + req.nl.nlmsg_type = RTM_GETROUTE; + req.rt.rtm_family = AF_INET; + req.rt.rtm_table = RT_TABLE_MAIN; + + + bzero(&_pa, sizeof(_pa)); + _pa.nl_family = AF_NETLINK; + + bzero(&_msg, sizeof(_msg)); + _msg.msg_name = (void*)&_pa; + _msg.msg_namelen = sizeof(_pa); + + _iov.iov_base = (void*)&req.nl; + _iov.iov_len = req.nl.nlmsg_len; + _msg.msg_iov = &_iov; + _msg.msg_iovlen = 1; + + _rtn = sendmsg(_fd, &_msg, 0); +} + +void LinuxNetLink::_requestIPv6Routes() +{ + struct nl_req req; + bzero(&req, sizeof(req)); + req.nl.nlmsg_len = NLMSG_LENGTH(sizeof(struct rtmsg)); + req.nl.nlmsg_flags = NLM_F_REQUEST | NLM_F_DUMP; + req.nl.nlmsg_type = RTM_GETROUTE; + req.rt.rtm_family = AF_INET6; + req.rt.rtm_table = RT_TABLE_MAIN; + + + bzero(&_pa, sizeof(_pa)); + _pa.nl_family = AF_NETLINK; + + bzero(&_msg, sizeof(_msg)); + _msg.msg_name = (void*)&_pa; + _msg.msg_namelen = sizeof(_pa); + + _iov.iov_base = (void*)&req.nl; + _iov.iov_len = req.nl.nlmsg_len; + _msg.msg_iov = &_iov; + _msg.msg_iovlen = 1; + + while((_rtn = sendmsg(_fd, &_msg, 0)) == -1) { + fprintf(stderr, "ipv6 waiting..."); + Thread::sleep(100); + } +} + +void LinuxNetLink::addRoute(const InetAddress &target, const InetAddress &via, const char *ifaceName) +{ + +} + +void LinuxNetLink::delRoute(const InetAddress &target, const InetAddress &via, const char *ifaceName) +{ + +} + +void LinuxNetLink::addInterface(const char *iface) +{ + +} + +void LinuxNetLink::addAddress(const InetAddress &addr, const char *iface) +{ + +} + +RouteList LinuxNetLink::getIPV4Routes() const +{ + return _routes_ipv4; +} + +RouteList LinuxNetLink::getIPV6Routes() const +{ + return _routes_ipv6; +} + +} // namespace ZeroTier \ No newline at end of file diff --git a/osdep/LinuxNetLink.hpp b/osdep/LinuxNetLink.hpp new file mode 100644 index 000000000..519bb435c --- /dev/null +++ b/osdep/LinuxNetLink.hpp @@ -0,0 +1,133 @@ +/* + * ZeroTier One - Network Virtualization Everywhere + * Copyright (C) 2011-2018 ZeroTier, Inc. https://www.zerotier.com/ + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation, either version 3 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program. If not, see . + * + * -- + * + * You can be released from the requirements of the license by purchasing + * a commercial license. Buying such a license is mandatory as soon as you + * develop commercial closed-source software that incorporates or links + * directly against ZeroTier software without disclosing the source code + * of your own application. + */ + +#ifndef ZT_LINUX_NETLINK_HPP +#define ZT_LINUX_NETLINK_HPP + +#include + +#include +#include +#include +#include + + +#include "../node/InetAddress.hpp" +#include "Thread.hpp" + + +namespace ZeroTier { + +struct route_entry { + InetAddress target; + InetAddress via; + const char *iface; +}; + +typedef std::vector RouteList; + +struct nl_req { + struct nlmsghdr nl; + struct rtmsg rt; + char buf[8192]; +}; + +/** + * Interface with Linux's RTNETLINK + */ +class LinuxNetLink +{ +private: + LinuxNetLink(); + ~LinuxNetLink(); + +public: + static LinuxNetLink& getInstance() + { + static LinuxNetLink instance; + return instance; + } + + LinuxNetLink(LinuxNetLink const&) = delete; + void operator=(LinuxNetLink const&) = delete; + + void addRoute(const InetAddress &target, const InetAddress &via, const char *ifaceName); + void delRoute(const InetAddress &target, const InetAddress &via, const char *ifaceName); + RouteList getIPV4Routes() const; + RouteList getIPV6Routes() const; + + void addInterface(const char *iface); + + void addAddress(const InetAddress &addr, const char *iface); + + void threadMain() throw(); +private: + void _processMessage(); + void _routeAdded(); + void _routeDeleted(); + void _linkAdded(); + void _linkDeleted(); + void _ipAddressAdded(); + void _ipAddressDeleted(); + + + void _requestIPv4Routes(); + void _requestIPv6Routes(); + + + Thread _t; + bool _running; + RouteList _routes_ipv4; + RouteList _routes_ipv6; + + // socket communication vars; + int _fd; + struct sockaddr_nl _la; + struct sockaddr_nl _pa; + struct msghdr _msg; + struct iovec _iov; + int _rtn; + char _buf[8192]; + + // RTNETLINK message pointers & lengths + // used for processing messages + struct nlmsghdr *_nlp; + int _nll; + + struct rtmsg *_rtp; + int _rtl; + struct rtattr *_rtap; + + struct ifinfomsg *_ifip; + int _ifil; + + struct ifaddrmsg *_ifap; + int _ifal; +}; + +} + +#endif // ZT_LINUX_NETLINK_HPPS \ No newline at end of file diff --git a/osdep/ManagedRoute.cpp b/osdep/ManagedRoute.cpp index d7c807049..8d64fde32 100644 --- a/osdep/ManagedRoute.cpp +++ b/osdep/ManagedRoute.cpp @@ -48,6 +48,13 @@ #include #include #include +#ifdef __LINUX__ +#include +#include +#include +#include +#include +#endif #ifdef __BSD__ #include #include @@ -277,27 +284,155 @@ static void _routeCmd(const char *op,const InetAddress &target,const InetAddress #ifdef __LINUX__ // ---------------------------------------------------------- #define ZT_ROUTING_SUPPORT_FOUND 1 -static void _routeCmd(const char *op,const InetAddress &target,const InetAddress &via,const char *localInterface) +static bool _hasRoute(const InetAddress &target, const InetAddress &via, const char *localInterface) { - long p = (long)fork(); - if (p > 0) { - int exitcode = -1; - ::waitpid(p,&exitcode,0); - } else if (p == 0) { - ::close(STDOUT_FILENO); - ::close(STDERR_FILENO); - char ipbuf[64],ipbuf2[64]; - if (via) { - ::execl(ZT_LINUX_IP_COMMAND,ZT_LINUX_IP_COMMAND,(target.ss_family == AF_INET6) ? "-6" : "-4","route",op,target.toString(ipbuf),"via",via.toIpString(ipbuf2),(const char *)0); - ::execl(ZT_LINUX_IP_COMMAND_2,ZT_LINUX_IP_COMMAND_2,(target.ss_family == AF_INET6) ? "-6" : "-4","route",op,target.toString(ipbuf),"via",via.toIpString(ipbuf2),(const char *)0); - } else if ((localInterface)&&(localInterface[0])) { - ::execl(ZT_LINUX_IP_COMMAND,ZT_LINUX_IP_COMMAND,(target.ss_family == AF_INET6) ? "-6" : "-4","route",op,target.toString(ipbuf),"dev",localInterface,(const char *)0); - ::execl(ZT_LINUX_IP_COMMAND_2,ZT_LINUX_IP_COMMAND_2,(target.ss_family == AF_INET6) ? "-6" : "-4","route",op,target.toString(ipbuf),"dev",localInterface,(const char *)0); - } - ::_exit(-1); + if (target.ss_family == AF_INET) { + int fd = socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE); + + char *buf; + int nll; + struct rtmsg *rtp; + int rtl; + struct rtattr *rtap; + + struct sockaddr_nl la; + bzero(&la, sizeof(la)); + la.nl_family = AF_NETLINK; + la.nl_pad = 0; + la.nl_pid = (uint32_t)((ptrdiff_t)&target % getpid()); + la.nl_groups = 0; + int rtn = bind(fd, (struct sockaddr*)&la, sizeof(la)); + + + + close(fd); + return false; + } else { + + return false; } } + +static void _routeCmd(const char *op, const InetAddress &target, const InetAddress &via, const char *localInterface) +{ + bool hasRoute = _hasRoute(target, via, localInterface); + if (hasRoute && (strcmp(op, "add") == 0 || strcmp(op, "replace") == 0)) { + return; + } else if (!hasRoute && (strcmp(op, "remove") == 0 || strcmp(op, "del") == 0)) { + return; + } + + char targetStr[64] = {0}; + char viaStr[64] = {0}; + InetAddress nmsk = target.netmask(); + char nmskStr[64] = {0}; + fprintf(stderr, "Received Route Cmd: %s target: %s via: %s netmask: %s localInterface: %s\n", op, target.toString(targetStr), via.toString(viaStr), nmsk.toString(nmskStr), localInterface); + + int fd = socket(PF_INET, SOCK_DGRAM, IPPROTO_IP);; + struct rtentry route = {0}; + + if (target.ss_family == AF_INET) { + struct sockaddr_in *target_in = (struct sockaddr_in*)⌖ + struct sockaddr_in *via_in = (struct sockaddr_in*)&via; + InetAddress netmask = target.netmask(); + struct sockaddr_in *netmask_in = (struct sockaddr_in*)&netmask; + + struct sockaddr_in *addr = NULL; + + // set target + addr = (struct sockaddr_in *)&route.rt_dst; + addr->sin_family = AF_INET; + addr->sin_addr = target_in->sin_addr; + + // set netmask + addr = (struct sockaddr_in *)&route.rt_genmask; + addr->sin_family = AF_INET; + addr->sin_addr = netmask_in->sin_addr; + + route.rt_dev = const_cast(localInterface); + + if (via) { + // set the gateway + addr = (struct sockaddr_in *)&route.rt_gateway; + addr->sin_family = AF_INET; + addr->sin_addr = via_in->sin_addr; + + route.rt_flags = RTF_UP | RTF_GATEWAY; + } else if ((localInterface)&&(localInterface[0])) { + route.rt_flags = RTF_UP;//| RTF_HOST; + } + } + else if (target.ss_family == AF_INET6) + { + struct sockaddr_in6 *addr = NULL; + + // set target + addr = (struct sockaddr_in6 *)&route.rt_dst; + addr->sin6_family = AF_INET6; + memcpy(&addr->sin6_addr, &((struct sockaddr_in6*)&target)->sin6_addr, sizeof(struct in6_addr)); + + //set netmask + addr = (struct sockaddr_in6 *)&route.rt_genmask; + addr->sin6_family = AF_INET6; + InetAddress netmask = target.netmask(); + memcpy(&addr->sin6_addr, &((struct sockaddr_in6*)&netmask)->sin6_addr, sizeof(struct in6_addr)); + + if (via) { + // set the gateway + addr = (struct sockaddr_in6*)&route.rt_gateway; + addr->sin6_family = AF_INET; + memcpy(&addr->sin6_addr, &((struct sockaddr_in6*)&via)->sin6_addr, sizeof(struct in6_addr)); + + route.rt_flags = RTF_UP | RTF_GATEWAY; + } else if ((localInterface)&&(localInterface[0])) { + route.rt_dev = const_cast(localInterface); + route.rt_flags = RTF_UP; + } + } + + unsigned long ctl = -1; + if (strcmp(op, "add") == 0 || strcmp(op, "replace") == 0) { + ctl = SIOCADDRT; + } else if (strcmp(op, "remove") == 0 || strcmp(op, "del") == 0) { + ctl = SIOCDELRT; + } else { + close(fd); + return; + } + + if ( ioctl(fd, ctl, &route)) { + fprintf(stderr, "Error adding route: %s\n", strerror(errno)); + close(fd); + ::exit(1); + } + close(fd); +} + +// static void _routeCmd(const char *op,const InetAddress &target,const InetAddress &via,const char *localInterface) +// { +// // long p = (long)fork(); +// // if (p > 0) { +// // int exitcode = -1; +// // ::waitpid(p,&exitcode,0); +// // } else if (p == 0) { +// // ::close(STDOUT_FILENO); +// // ::close(STDERR_FILENO); +// char ipbuf[64],ipbuf2[64]; + + + +// if (via) { +// ::execl(ZT_LINUX_IP_COMMAND,ZT_LINUX_IP_COMMAND,(target.ss_family == AF_INET6) ? "-6" : "-4","route",op,target.toString(ipbuf),"via",via.toIpString(ipbuf2),(const char *)0); +// ::execl(ZT_LINUX_IP_COMMAND_2,ZT_LINUX_IP_COMMAND_2,(target.ss_family == AF_INET6) ? "-6" : "-4","route",op,target.toString(ipbuf),"via",via.toIpString(ipbuf2),(const char *)0); +// } else if ((localInterface)&&(localInterface[0])) { +// ::execl(ZT_LINUX_IP_COMMAND,ZT_LINUX_IP_COMMAND,(target.ss_family == AF_INET6) ? "-6" : "-4","route",op,target.toString(ipbuf),"dev",localInterface,(const char *)0); +// ::execl(ZT_LINUX_IP_COMMAND_2,ZT_LINUX_IP_COMMAND_2,(target.ss_family == AF_INET6) ? "-6" : "-4","route",op,target.toString(ipbuf),"dev",localInterface,(const char *)0); +// } +// // ::_exit(-1); +// // } +// } + #endif // __LINUX__ ---------------------------------------------------------- #ifdef __WINDOWS__ // --------------------------------------------------------