/* * Copyright (c)2013-2020 ZeroTier, Inc. * * Use of this software is governed by the Business Source License included * in the LICENSE.TXT file in the project's root directory. * * Change Date: 2024-01-01 * * On the date above, in accordance with the Business Source License, use * of this software will be governed by version 2.0 of the Apache License. */ /****/ #include #include #include "NetworkConfig.hpp" #include "ScopedPtr.hpp" namespace ZeroTier { NetworkConfig::NetworkConfig() : networkId(0), timestamp(0), credentialTimeMaxDelta(0), revision(0), issuedTo(), flags(0), mtu(0), multicastLimit(0), specialistCount(0), routeCount(0), staticIpCount(0), ruleCount(0), capabilityCount(0), tagCount(0), certificateOfOwnershipCount(0), type(ZT_NETWORK_TYPE_PRIVATE) { name[0] = 0; } bool NetworkConfig::toDictionary(Dictionary &d,bool includeLegacy) const { uint8_t tmp[16384]; std::vector buf; char tmp2[128]; d.clear(); // Try to put the more human-readable fields first if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_NETWORK_ID,this->networkId)) return false; if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_TIMESTAMP,this->timestamp)) return false; if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_CREDENTIAL_TIME_MAX_DELTA,this->credentialTimeMaxDelta)) return false; if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_REVISION,this->revision)) return false; if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_ISSUED_TO,this->issuedTo.toString(tmp2))) return false; if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_FLAGS,this->flags)) return false; if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_MULTICAST_LIMIT,(uint64_t)this->multicastLimit)) return false; if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_TYPE,(uint64_t)this->type)) return false; if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_NAME,this->name)) return false; if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_MTU,(uint64_t)this->mtu)) return false; // Then add binary blobs if (this->com) { if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_COM,(const char *)tmp,this->com.marshal(tmp))) return false; } buf.clear(); for(unsigned int i=0;icapabilityCount;++i) { int l = this->capabilities[i].marshal(tmp); if (l < 0) return false; buf.insert(buf.end(),tmp,tmp + l); } if (!buf.empty()) { if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_CAPABILITIES,(const char *)buf.data(),(int)buf.size())) return false; } buf.clear(); for(unsigned int i=0;itagCount;++i) { int l = this->tags[i].marshal(tmp); if (l < 0) return false; buf.insert(buf.end(),tmp,tmp + l); } if (!buf.empty()) { if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_TAGS,(const char *)buf.data(),(int)buf.size())) return false; } buf.clear(); for(unsigned int i=0;icertificateOfOwnershipCount;++i) { int l = this->certificatesOfOwnership[i].marshal(tmp); if (l < 0) return false; buf.insert(buf.end(),tmp,tmp + l); } if (!buf.empty()) { if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_CERTIFICATES_OF_OWNERSHIP,(const char *)buf.data(),(int)buf.size())) return false; } buf.clear(); for(unsigned int i=0;ispecialistCount;++i) { Utils::storeBigEndian(tmp,this->specialists[i]); buf.insert(buf.end(),tmp,tmp + 8); } if (!buf.empty()) { if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_SPECIALISTS,(const char *)buf.data(),(int)buf.size())) return false; } buf.clear(); for(unsigned int i=0;irouteCount;++i) { int l = asInetAddress(this->routes[i].target).marshal(tmp); if (l < 0) return false; buf.insert(buf.end(),tmp,tmp + l); l = asInetAddress(this->routes[i].via).marshal(tmp); if (l < 0) return false; buf.insert(buf.end(),tmp,tmp + l); } if (!buf.empty()) { if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_ROUTES,(const char *)buf.data(),(int)buf.size())) return false; } buf.clear(); for(unsigned int i=0;istaticIpCount;++i) { int l = this->staticIps[i].marshal(tmp); if (l < 0) return false; buf.insert(buf.end(),tmp,tmp + l); } if (!buf.empty()) { if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_STATIC_IPS,(const char *)buf.data(),(int)buf.size())) return false; } if (this->ruleCount) { buf.resize(ruleCount * ZT_VIRTUALNETWORKRULE_MARSHAL_SIZE_MAX); int l = Capability::marshalVirtualNetworkRules(buf.data(),rules,ruleCount); if (l > 0) { if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_RULES,(const char *)buf.data(),l)) return false; } } return true; } bool NetworkConfig::fromDictionary(const Dictionary &d) { static const NetworkConfig NIL_NC; ScopedPtr< Buffer > tmp(new Buffer()); try { *this = NIL_NC; // Fields that are always present, new or old this->networkId = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_NETWORK_ID,0); if (!this->networkId) return false; this->timestamp = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_TIMESTAMP,0); this->credentialTimeMaxDelta = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_CREDENTIAL_TIME_MAX_DELTA,0); this->revision = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_REVISION,0); this->issuedTo = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_ISSUED_TO,0); if (!this->issuedTo) return false; this->multicastLimit = (unsigned int)d.getUI(ZT_NETWORKCONFIG_DICT_KEY_MULTICAST_LIMIT,0); d.get(ZT_NETWORKCONFIG_DICT_KEY_NAME,this->name,sizeof(this->name)); this->mtu = (unsigned int)d.getUI(ZT_NETWORKCONFIG_DICT_KEY_MTU,ZT_DEFAULT_MTU); if (this->mtu < 1280) this->mtu = 1280; // minimum MTU allowed by IPv6 standard and others else if (this->mtu > ZT_MAX_MTU) this->mtu = ZT_MAX_MTU; if (d.getUI(ZT_NETWORKCONFIG_DICT_KEY_VERSION,0) < 6) { return false; } else { // Otherwise we can use the new fields this->flags = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_FLAGS,0); this->type = (ZT_VirtualNetworkType)d.getUI(ZT_NETWORKCONFIG_DICT_KEY_TYPE,(uint64_t)ZT_NETWORK_TYPE_PRIVATE); if (d.get(ZT_NETWORKCONFIG_DICT_KEY_COM,*tmp)) this->com.deserialize(*tmp,0); if (d.get(ZT_NETWORKCONFIG_DICT_KEY_CAPABILITIES,*tmp)) { try { unsigned int p = 0; while (p < tmp->size()) { Capability cap; p += cap.deserialize(*tmp,p); this->capabilities[this->capabilityCount++] = cap; } } catch ( ... ) {} std::sort(&(this->capabilities[0]),&(this->capabilities[this->capabilityCount])); } if (d.get(ZT_NETWORKCONFIG_DICT_KEY_TAGS,*tmp)) { try { unsigned int p = 0; while (p < tmp->size()) { Tag tag; p += tag.deserialize(*tmp,p); this->tags[this->tagCount++] = tag; } } catch ( ... ) {} std::sort(&(this->tags[0]),&(this->tags[this->tagCount])); } if (d.get(ZT_NETWORKCONFIG_DICT_KEY_CERTIFICATES_OF_OWNERSHIP,*tmp)) { unsigned int p = 0; while (p < tmp->size()) { if (certificateOfOwnershipCount < ZT_MAX_CERTIFICATES_OF_OWNERSHIP) p += certificatesOfOwnership[certificateOfOwnershipCount++].deserialize(*tmp,p); else { CertificateOfOwnership foo; p += foo.deserialize(*tmp,p); } } } if (d.get(ZT_NETWORKCONFIG_DICT_KEY_SPECIALISTS,*tmp)) { unsigned int p = 0; while ((p + 8) <= tmp->size()) { if (specialistCount < ZT_MAX_NETWORK_SPECIALISTS) this->specialists[this->specialistCount++] = tmp->at(p); p += 8; } } if (d.get(ZT_NETWORKCONFIG_DICT_KEY_ROUTES,*tmp)) { unsigned int p = 0; while ((p < tmp->size())&&(routeCount < ZT_MAX_NETWORK_ROUTES)) { p += reinterpret_cast(&(this->routes[this->routeCount].target))->deserialize(*tmp,p); p += reinterpret_cast(&(this->routes[this->routeCount].via))->deserialize(*tmp,p); this->routes[this->routeCount].flags = tmp->at(p); p += 2; this->routes[this->routeCount].metric = tmp->at(p); p += 2; ++this->routeCount; } } if (d.get(ZT_NETWORKCONFIG_DICT_KEY_STATIC_IPS,*tmp)) { unsigned int p = 0; while ((p < tmp->size())&&(staticIpCount < ZT_MAX_ZT_ASSIGNED_ADDRESSES)) { p += this->staticIps[this->staticIpCount++].deserialize(*tmp,p); } } if (d.get(ZT_NETWORKCONFIG_DICT_KEY_RULES,*tmp)) { this->ruleCount = 0; unsigned int p = 0; Capability::deserializeRules(*tmp,p,this->rules,this->ruleCount,ZT_MAX_NETWORK_RULES); } } return true; } catch ( ... ) { return false; } } bool NetworkConfig::addSpecialist(const Address &a,const uint64_t f) { const uint64_t aint = a.toInt(); for(unsigned int i=0;i