/* * ZeroTier One - Network Virtualization Everywhere * Copyright (C) 2011-2016 ZeroTier, Inc. https://www.zerotier.com/ * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . */ #ifndef ZT_MEMBERSHIP_HPP #define ZT_MEMBERSHIP_HPP #include #include #include #include "Constants.hpp" #include "../include/ZeroTierOne.h" #include "CertificateOfMembership.hpp" #include "Capability.hpp" #include "Tag.hpp" #include "Hashtable.hpp" #include "NetworkConfig.hpp" // Expiration time for capability and tag cache #define ZT_MEMBERSHIP_STATE_EXPIRATION_TIME (ZT_NETWORK_COM_DEFAULT_REVISION_MAX_DELTA * 4) // Expiration time for Memberships (used in Peer::clean()) #define ZT_MEMBERSHIP_EXPIRATION_TIME (ZT_MEMBERSHIP_STATE_EXPIRATION_TIME * 4) namespace ZeroTier { class RuntimeEnvironment; /** * Information related to a peer's participation on a network * * This structure is not thread-safe and must be locked during use. */ class Membership { private: struct TState { TState() : lastPushed(0),lastReceived(0) {} // Last time we pushed our tag to this peer (our tag with the same ID) uint64_t lastPushed; // Last time we received this tag from this peer uint64_t lastReceived; // Tag from peer (remote tag) Tag tag; }; struct CState { CState() : lastPushed(0),lastReceived(0) {} // Last time we pushed our capability to this peer (our capability with this ID) uint64_t lastPushed; // Last time we received this capability from this peer uint64_t lastReceived; // Capability from peer Capability cap; }; public: Membership() : _lastPushedCom(0), _com(), _caps(8), _tags(8) { } /** * Send COM and other credentials to this peer if needed * * This checks last pushed times for our COM and for other credentials and * sends VERB_NETWORK_CREDENTIALS if the recipient might need them. * * @param RR Runtime environment * @param now Current time * @param peerAddress Address of member peer * @param com Network certificate of membership (if any) * @param cap Capability to send or 0 if none * @param tags Tags that this peer might need * @param tagCount Number of tag IDs * @return True if we pushed something */ bool sendCredentialsIfNeeded(const RuntimeEnvironment *RR,const uint64_t now,const Address &peerAddress,const CertificateOfMembership &com,const Capability *cap,const Tag **tags,const unsigned int tagCount); /** * @return This peer's COM if they have sent one */ inline const CertificateOfMembership &com() const { return _com; } /** * @param nconf Network configuration * @param id Tag ID * @return Pointer to tag or NULL if not found */ inline const Tag *getTag(const NetworkConfig &nconf,const uint32_t id) const { const TState *t = _tags.get(id); return ((t) ? (((t->lastReceived != 0)&&(t->tag.expiration() < nconf.timestamp)) ? &(t->tag) : (const Tag *)0) : (const Tag *)0); } /** * @param nconf Network configuration * @param ids Array to store IDs into * @param values Array to store values into * @param maxTags Capacity of ids[] and values[] * @return Number of tags added to arrays */ inline unsigned int getAllTags(const NetworkConfig &nconf,uint32_t *ids,uint32_t *values,unsigned int maxTags) const { unsigned int n = 0; uint32_t *id = (uint32_t *)0; TState *ts = (TState *)0; Hashtable::Iterator i(const_cast(this)->_tags); while (i.next(id,ts)) { if ((ts->lastReceived)&&(ts->tag.expiration() < nconf.timestamp)) { if (n >= maxTags) return n; ids[n] = *id; values[n] = ts->tag.value(); } } return n; } /** * @param nconf Network configuration * @param id Capablity ID * @return Pointer to capability or NULL if not found */ inline const Capability *getCapability(const NetworkConfig &nconf,const uint32_t id) const { const CState *c = _caps.get(id); return ((c) ? (((c->lastReceived != 0)&&(c->cap.expiration() < nconf.timestamp)) ? &(c->cap) : (const Capability *)0) : (const Capability *)0); } /** * Validate and add a credential if signature is okay and it's otherwise good * * @return 0 == OK, 1 == waiting for WHOIS, -1 == BAD signature or credential */ int addCredential(const RuntimeEnvironment *RR,const uint64_t now,const CertificateOfMembership &com); /** * Validate and add a credential if signature is okay and it's otherwise good * * @return 0 == OK, 1 == waiting for WHOIS, -1 == BAD signature or credential */ int addCredential(const RuntimeEnvironment *RR,const uint64_t now,const Tag &tag); /** * Validate and add a credential if signature is okay and it's otherwise good * * @return 0 == OK, 1 == waiting for WHOIS, -1 == BAD signature or credential */ int addCredential(const RuntimeEnvironment *RR,const uint64_t now,const Capability &cap); /** * Clean up old or stale entries * * @return Time of most recent activity in this Membership */ inline uint64_t clean(const uint64_t now) { uint64_t lastAct = _lastPushedCom; uint32_t *i = (uint32_t *)0; CState *cs = (CState *)0; Hashtable::Iterator csi(_caps); while (csi.next(i,cs)) { const uint64_t la = std::max(cs->lastPushed,cs->lastReceived); if ((now - la) > ZT_MEMBERSHIP_STATE_EXPIRATION_TIME) _caps.erase(*i); else if (la > lastAct) lastAct = la; } i = (uint32_t *)0; TState *ts = (TState *)0; Hashtable::Iterator tsi(_tags); while (tsi.next(i,ts)) { const uint64_t la = std::max(ts->lastPushed,ts->lastReceived); if ((now - la) > ZT_MEMBERSHIP_STATE_EXPIRATION_TIME) _tags.erase(*i); else if (la > lastAct) lastAct = la; } return lastAct; } private: // Last time we pushed our COM to this peer uint64_t _lastPushedCom; // COM from this peer CertificateOfMembership _com; // Capability-related state Hashtable _caps; // Tag-related state Hashtable _tags; }; } // namespace ZeroTier #endif