Sometimes it's OK if multiplication overflows

[oweals/gnunet.git] / src / cadet / gnunet-service-cadet_connection.c

/*
     This file is part of GNUnet.
     Copyright (C) 2001-2015 GNUnet e.V.

     GNUnet is free software; you can redistribute it and/or modify
     it under the terms of the GNU General Public License as published
     by the Free Software Foundation; either version 3, or (at your
     option) any later version.

     GNUnet is distributed in the hope that it will be useful, but
     WITHOUT ANY WARRANTY; without even the implied warranty of
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
     General Public License for more details.

     You should have received a copy of the GNU General Public License
     along with GNUnet; see the file COPYING.  If not, write to the
     Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
     Boston, MA 02110-1301, USA.
*/
/**
 * @file cadet/gnunet-service-cadet_connection.c
 * @brief GNUnet CADET service connection handling
 * @author Bartlomiej Polot
 */
#include "platform.h"
#include "gnunet_util_lib.h"
#include "gnunet_statistics_service.h"
#include "cadet_path.h"
#include "cadet_protocol.h"
#include "cadet.h"
#include "gnunet-service-cadet_connection.h"
#include "gnunet-service-cadet_peer.h"
#include "gnunet-service-cadet_tunnel.h"


/**
 * Should we run somewhat expensive checks on our invariants?
 */
#define CHECK_INVARIANTS 0


#define LOG(level, ...) GNUNET_log_from (level,"cadet-con",__VA_ARGS__)
#define LOG2(level, ...) GNUNET_log_from_nocheck(level,"cadet-con",__VA_ARGS__)


#define CADET_MAX_POLL_TIME      GNUNET_TIME_relative_multiply (\
                                  GNUNET_TIME_UNIT_MINUTES,\
                                  10)
#define AVG_MSGS                32


/******************************************************************************/
/********************************   STRUCTS  **********************************/
/******************************************************************************/

/**
 * Handle for messages queued but not yet sent.
 */
struct CadetConnectionQueue
{

  struct CadetConnectionQueue *next;
  struct CadetConnectionQueue *prev;

  /**
   * Peer queue handle, to cancel if necessary.
   */
  struct CadetPeerQueue *peer_q;

  /**
   * Continuation to call once sent.
   */
  GCC_sent cont;

  /**
   * Closure for @e cont.
   */
  void *cont_cls;

  /**
   * Was this a forced message? (Do not account for it)
   */
  int forced;
};


/**
 * Struct to encapsulate all the Flow Control information to a peer to which
 * we are directly connected (on a core level).
 */
struct CadetFlowControl
{
  /**
   * Connection this controls.
   */
  struct CadetConnection *c;

  struct CadetConnectionQueue *q_head;
  struct CadetConnectionQueue *q_tail;

  /**
   * How many messages are in the queue on this connection.
   */
  unsigned int queue_n;

  /**
   * How many messages do we accept in the queue.
   * If 0, the connection is broken in this direction (next hop disconnected).
   */
  unsigned int queue_max;

  /**
   * ID of the next packet to send.
   */
  uint32_t next_pid;

  /**
   * ID of the last packet sent towards the peer.
   */
  uint32_t last_pid_sent;

  /**
   * ID of the last packet received from the peer.
   */
  uint32_t last_pid_recv;

  /**
   * Bitmap of past 32 messages received:
   * - LSB being @c last_pid_recv.
   * - MSB being @c last_pid_recv - 31 (mod UINTMAX).
   */
  uint32_t recv_bitmap;

  /**
   * Last ACK sent to the peer (peer can't send more than this PID).
   */
  uint32_t last_ack_sent;

  /**
   * Last ACK sent towards the origin (for traffic towards leaf node).
   */
  uint32_t last_ack_recv;

  /**
   * Task to poll the peer in case of a lost ACK causes stall.
   */
  struct GNUNET_SCHEDULER_Task *poll_task;

  /**
   * How frequently to poll for ACKs.
   */
  struct GNUNET_TIME_Relative poll_time;

  /**
   * Queued poll message, to cancel if not necessary anymore (got ACK).
   */
  struct CadetConnectionQueue *poll_msg;

  /**
   * Queued poll message, to cancel if not necessary anymore (got ACK).
   */
  struct CadetConnectionQueue *ack_msg;
};

/**
 * Keep a record of the last messages sent on this connection.
 */
struct CadetConnectionPerformance
{
  /**
   * Circular buffer for storing measurements.
   */
  double usecsperbyte[AVG_MSGS];

  /**
   * Running average of @c usecsperbyte.
   */
  double avg;

  /**
   * How many values of @c usecsperbyte are valid.
   */
  uint16_t size;

  /**
   * Index of the next "free" position in @c usecsperbyte.
   */
  uint16_t idx;
};


/**
 * Struct containing all information regarding a connection to a peer.
 */
struct CadetConnection
{
  /**
   * Tunnel this connection is part of.
   */
  struct CadetTunnel *t;

  /**
   * Flow control information for traffic fwd.
   */
  struct CadetFlowControl fwd_fc;

  /**
   * Flow control information for traffic bck.
   */
  struct CadetFlowControl bck_fc;

  /**
   * Measure connection performance on the endpoint.
   */
  struct CadetConnectionPerformance *perf;

  /**
   * ID of the connection.
   */
  struct GNUNET_CADET_Hash id;

  /**
   * Path being used for the tunnel. At the origin of the connection
   * it's a pointer to the destination's path pool, otherwise just a copy.
   */
  struct CadetPeerPath *path;

  /**
   * Task to keep the used paths alive at the owner,
   * time tunnel out on all the other peers.
   */
  struct GNUNET_SCHEDULER_Task *fwd_maintenance_task;

  /**
   * Task to keep the used paths alive at the destination,
   * time tunnel out on all the other peers.
   */
  struct GNUNET_SCHEDULER_Task *bck_maintenance_task;

  /**
   * Queue handle for maintainance traffic. One handle for FWD and BCK since
   * one peer never needs to maintain both directions (no loopback connections).
   */
  struct CadetPeerQueue *maintenance_q;

  /**
   * Should equal #get_next_hop(), or NULL if that peer disconnected.
   */
  struct CadetPeer *next_peer;

  /**
   * Should equal #get_prev_hop(), or NULL if that peer disconnected.
   */
  struct CadetPeer *prev_peer;

  /**
   * State of the connection.
   */
  enum CadetConnectionState state;

  /**
   * Position of the local peer in the path.
   */
  unsigned int own_pos;

  /**
   * Pending message count.
   */
  unsigned int pending_messages;

  /**
   * Destroy flag:
   * - if 0, connection in use.
   * - if 1, destroy on last message.
   * - if 2, connection is being destroyed don't re-enter.
   */
  int destroy;

  /**
   * In-connection-map flag. Sometimes, when @e destroy is set but
   * actual destruction is delayed to enable us to finish processing
   * queues (i.e. in the direction that is still working), we remove
   * the connection from the map to prevent it from still being
   * found (and used) by accident. This flag is set to #GNUNET_YES
   * for a connection that is not in the #connections map.  Should
   * only be #GNUNET_YES if #destroy is also non-zero.
   */
  int was_removed;

  /**
   * Counter to do exponential backoff when creating a connection (max 64).
   */
  unsigned short create_retry;

  /**
   * Task to check if connection has duplicates.
   */
  struct GNUNET_SCHEDULER_Task *check_duplicates_task;
};


/******************************************************************************/
/*******************************   GLOBALS  ***********************************/
/******************************************************************************/

/**
 * Global handle to the statistics service.
 */
extern struct GNUNET_STATISTICS_Handle *stats;

/**
 * Local peer own ID (memory efficient handle).
 */
extern GNUNET_PEER_Id myid;

/**
 * Local peer own ID (full value).
 */
extern struct GNUNET_PeerIdentity my_full_id;

/**
 * Connections known, indexed by cid (CadetConnection).
 */
static struct GNUNET_CONTAINER_MultiHashMap *connections;

/**
 * How many connections are we willing to maintain.
 *  Local connections are always allowed,
 * even if there are more connections than max.
 */
static unsigned long long max_connections;

/**
 * How many messages *in total* are we willing to queue, divide by number of
 * connections to get connection queue size.
 */
static unsigned long long max_msgs_queue;

/**
 * How often to send path keepalives. Paths timeout after 4 missed.
 */
static struct GNUNET_TIME_Relative refresh_connection_time;

/**
 * How often to send path create / ACKs.
 */
static struct GNUNET_TIME_Relative create_connection_time;


/******************************************************************************/
/********************************   STATIC  ***********************************/
/******************************************************************************/



#if 0 // avoid compiler warning for unused static function
static void
fc_debug (struct CadetFlowControl *fc)
{
  LOG (GNUNET_ERROR_TYPE_DEBUG, "    IN: %u/%u\n",
              fc->last_pid_recv, fc->last_ack_sent);
  LOG (GNUNET_ERROR_TYPE_DEBUG, "    OUT: %u/%u\n",
              fc->last_pid_sent, fc->last_ack_recv);
  LOG (GNUNET_ERROR_TYPE_DEBUG, "    QUEUE: %u/%u\n",
              fc->queue_n, fc->queue_max);
}

static void
connection_debug (struct CadetConnection *c)
{
  if (NULL == c)
  {
    LOG (GNUNET_ERROR_TYPE_INFO, "DEBUG NULL CONNECTION\n");
    return;
  }
  LOG (GNUNET_ERROR_TYPE_DEBUG, "Connection %s:%X\n",
              peer2s (c->t->peer), GCC_2s (c));
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  state: %u, pending msgs: %u\n",
              c->state, c->pending_messages);
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  FWD FC\n");
  fc_debug (&c->fwd_fc);
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  BCK FC\n");
  fc_debug (&c->bck_fc);
}
#endif


/**
 * Schedule next keepalive task, taking in consideration
 * the connection state and number of retries.
 *
 * @param c Connection for which to schedule the next keepalive.
 * @param fwd Direction for the next keepalive.
 */
static void
schedule_next_keepalive (struct CadetConnection *c, int fwd);


/**
 * Resets the connection timeout task, some other message has done the
 * task's job.
 * - For the first peer on the direction this means to send
 *   a keepalive or a path confirmation message (either create or ACK).
 * - For all other peers, this means to destroy the connection,
 *   due to lack of activity.
 * Starts the timeout if no timeout was running (connection just created).
 *
 * @param c Connection whose timeout to reset.
 * @param fwd Is this forward?
 */
static void
connection_reset_timeout (struct CadetConnection *c, int fwd);


/**
 * Get string description for tunnel state. Reentrant.
 *
 * @param s Tunnel state.
 *
 * @return String representation.
 */
static const char *
GCC_state2s (enum CadetConnectionState s)
{
  switch (s)
  {
    case CADET_CONNECTION_NEW:
      return "CADET_CONNECTION_NEW";
    case CADET_CONNECTION_SENT:
      return "CADET_CONNECTION_SENT";
    case CADET_CONNECTION_ACK:
      return "CADET_CONNECTION_ACK";
    case CADET_CONNECTION_READY:
      return "CADET_CONNECTION_READY";
    case CADET_CONNECTION_DESTROYED:
      return "CADET_CONNECTION_DESTROYED";
    case CADET_CONNECTION_BROKEN:
      return "CADET_CONNECTION_BROKEN";
    default:
      GNUNET_break (0);
      LOG (GNUNET_ERROR_TYPE_ERROR, " conn state %u unknown!\n", s);
      return "CADET_CONNECTION_STATE_ERROR";
  }
}


/**
 * Initialize a Flow Control structure to the initial state.
 *
 * @param fc Flow Control structure to initialize.
 */
static void
fc_init (struct CadetFlowControl *fc)
{
  fc->next_pid = (uint32_t) 0;
  fc->last_pid_sent = (uint32_t) -1;
  fc->last_pid_recv = (uint32_t) -1;
  fc->last_ack_sent = (uint32_t) 0;
  fc->last_ack_recv = (uint32_t) 0;
  fc->poll_task = NULL;
  fc->poll_time = GNUNET_TIME_UNIT_SECONDS;
  fc->queue_n = 0;
  fc->queue_max = (max_msgs_queue / max_connections) + 1;
}


/**
 * Find a connection.
 *
 * @param cid Connection ID.
 *
 * @return conntection with the given ID @cid or NULL if not found.
 */
static struct CadetConnection *
connection_get (const struct GNUNET_CADET_Hash *cid)
{
  return GNUNET_CONTAINER_multihashmap_get (connections, GC_h2hc (cid));
}


/**
 * Change the connection state. Cannot change a connection marked as destroyed.
 *
 * @param c Connection to change.
 * @param state New state to set.
 */
static void
connection_change_state (struct CadetConnection* c,
                         enum CadetConnectionState state)
{
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "Connection %s state %s -> %s\n",
       GCC_2s (c), GCC_state2s (c->state), GCC_state2s (state));
  if (CADET_CONNECTION_DESTROYED <= c->state) /* Destroyed or broken. */
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "state not changing anymore\n");
    return;
  }
  c->state = state;
  if (CADET_CONNECTION_READY == state)
    c->create_retry = 1;
}


/**
 * Mark a connection as "destroyed", to send all pending traffic and freeing
 * all associated resources, without accepting new status changes on it.
 *
 * @param c Connection to mark as destroyed.
 */
static void
mark_destroyed (struct CadetConnection *c)
{
  c->destroy = GNUNET_YES;
  connection_change_state (c, CADET_CONNECTION_DESTROYED);
}


/**
 * Function called if a connection has been stalled for a while,
 * possibly due to a missed ACK. Poll the neighbor about its ACK status.
 *
 * @param cls Closure (poll ctx).
 */
static void
send_poll (void *cls);


/**
 * Send an ACK on the connection, informing the predecessor about
 * the available buffer space. Should not be called in case the peer
 * is origin (no predecessor) in the @c fwd direction.
 *
 * Note that for fwd ack, the FWD mean forward *traffic* (root->dest),
 * the ACK itself goes "back" (dest->root).
 *
 * @param c Connection on which to send the ACK.
 * @param buffer How much space free to advertise?
 * @param fwd Is this FWD ACK? (Going dest -> root)
 * @param force Don't optimize out.
 */
static void
send_ack (struct CadetConnection *c, unsigned int buffer, int fwd, int force)
{
  struct CadetFlowControl *next_fc;
  struct CadetFlowControl *prev_fc;
  struct GNUNET_CADET_ACK msg;
  uint32_t ack;
  int delta;

  GCC_check_connections ();
  GNUNET_assert (GNUNET_NO == GCC_is_origin (c, fwd));

  next_fc = fwd ? &c->fwd_fc : &c->bck_fc;
  prev_fc = fwd ? &c->bck_fc : &c->fwd_fc;

  LOG (GNUNET_ERROR_TYPE_DEBUG, "send %s ack on %s\n",
       GC_f2s (fwd), GCC_2s (c));

  /* Check if we need to transmit the ACK. */
  delta = prev_fc->last_ack_sent - prev_fc->last_pid_recv;
  if (3 < delta && buffer < delta && GNUNET_NO == force)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "Not sending ACK, delta > 3\n");
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "  last pid recv: %u, last ack sent: %u\n",
         prev_fc->last_pid_recv, prev_fc->last_ack_sent);
    GCC_check_connections ();
    return;
  }

  /* Ok, ACK might be necessary, what PID to ACK? */
  ack = prev_fc->last_pid_recv + buffer;
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       " ACK %u, last PID %u, last ACK %u, qmax %u, q %u\n",
       ack, prev_fc->last_pid_recv, prev_fc->last_ack_sent,
       next_fc->queue_max, next_fc->queue_n);
  if (ack == prev_fc->last_ack_sent && GNUNET_NO == force)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "Not sending FWD ACK, not needed\n");
    GCC_check_connections ();
    return;
  }

  /* Check if message is already in queue */
  if (NULL != prev_fc->ack_msg)
  {
    if (GC_is_pid_bigger (ack, prev_fc->last_ack_sent))
    {
      LOG (GNUNET_ERROR_TYPE_DEBUG, " canceling old ACK\n");
      GCC_cancel (prev_fc->ack_msg);
      /* GCC_cancel triggers ack_sent(), which clears fc->ack_msg */
    }
    else
    {
      LOG (GNUNET_ERROR_TYPE_DEBUG, " same ACK already in queue\n");
      GCC_check_connections ();
      return;
    }
  }

  prev_fc->last_ack_sent = ack;

  /* Build ACK message and send on conn */
  msg.header.size = htons (sizeof (msg));
  msg.header.type = htons (GNUNET_MESSAGE_TYPE_CADET_ACK);
  msg.ack = htonl (ack);
  msg.cid = c->id;

  prev_fc->ack_msg = GCC_send_prebuilt_message (&msg.header, UINT16_MAX, ack,
                                                c, !fwd, GNUNET_YES,
                                                NULL, NULL);
  GNUNET_assert (NULL != prev_fc->ack_msg);
  GCC_check_connections ();
}


/**
 * Update performance information if we are a connection's endpoint.
 *
 * @param c Connection to update.
 * @param wait How much time did we wait to send the last message.
 * @param size Size of the last message.
 */
static void
update_perf (struct CadetConnection *c,
             struct GNUNET_TIME_Relative wait,
             uint16_t size)
{
  struct CadetConnectionPerformance *p;
  double usecsperbyte;

  if (NULL == c->perf)
    return; /* Only endpoints are interested in timing. */

  p = c->perf;
  usecsperbyte = ((double) wait.rel_value_us) / size;
  if (p->size == AVG_MSGS)
  {
    /* Array is full. Substract oldest value, add new one and store. */
    p->avg -= (p->usecsperbyte[p->idx] / AVG_MSGS);
    p->usecsperbyte[p->idx] = usecsperbyte;
    p->avg += (p->usecsperbyte[p->idx] / AVG_MSGS);
  }
  else
  {
    /* Array not yet full. Add current value to avg and store. */
    p->usecsperbyte[p->idx] = usecsperbyte;
    p->avg *= p->size;
    p->avg += p->usecsperbyte[p->idx];
    p->size++;
    p->avg /= p->size;
  }
  p->idx = (p->idx + 1) % AVG_MSGS;
}


/**
 * Callback called when a connection queued message is sent.
 *
 * Calculates the average time and connection packet tracking.
 *
 * @param cls Closure (ConnectionQueue Handle), can be NULL.
 * @param c Connection this message was on.
 * @param fwd Was this a FWD going message?
 * @param sent Was it really sent? (Could have been canceled)
 * @param type Type of message sent.
 * @param payload_type Type of payload, if applicable.
 * @param pid Message ID, or 0 if not applicable (create, destroy, etc).
 * @param size Size of the message.
 * @param wait Time spent waiting for core (only the time for THIS message)
 */
static void
conn_message_sent (void *cls,
                   struct CadetConnection *c, int fwd, int sent,
                   uint16_t type, uint16_t payload_type, uint32_t pid,
                   size_t size,
                   struct GNUNET_TIME_Relative wait)
{
  struct CadetConnectionQueue *q = cls;
  struct CadetFlowControl *fc;
  int forced;

  GCC_check_connections ();
    LOG (GNUNET_ERROR_TYPE_INFO,
         ">>> %s (%s %4u) on conn %s (%p) %s [%5u] in queue %s\n",
         GC_m2s (type), GC_m2s (payload_type), pid, GCC_2s (c), c,
         GC_f2s(fwd), size,
         GNUNET_STRINGS_relative_time_to_string (wait, GNUNET_YES));

  /* If c is NULL, nothing to update. */
  if (NULL == c)
  {
    if (type != GNUNET_MESSAGE_TYPE_CADET_CONNECTION_BROKEN
        && type != GNUNET_MESSAGE_TYPE_CADET_CONNECTION_DESTROY)
    {
      LOG (GNUNET_ERROR_TYPE_ERROR, "Message %s sent on NULL connection!\n",
           GC_m2s (type));
    }
    GCC_check_connections ();
    return;
  }

  LOG (GNUNET_ERROR_TYPE_DEBUG, " %ssent %s %s pid %u\n",
       sent ? "" : "not ", GC_f2s (fwd),
       GC_m2s (type), GC_m2s (payload_type), pid);
  GCC_debug (c, GNUNET_ERROR_TYPE_DEBUG);

  /* Update flow control info. */
  fc = fwd ? &c->fwd_fc : &c->bck_fc;

  if (NULL != q)
  {
    GNUNET_CONTAINER_DLL_remove (fc->q_head, fc->q_tail, q);
    forced = q->forced;
    if (NULL != q->cont)
    {
      LOG (GNUNET_ERROR_TYPE_DEBUG, " calling cont\n");
      q->cont (q->cont_cls, c, q, type, fwd, size);
    }
    GNUNET_free (q);
  }
  else /* CONN_CREATE or CONN_ACK */
  {
    GNUNET_assert (GNUNET_MESSAGE_TYPE_CADET_ENCRYPTED != type);
    forced = GNUNET_YES;
  }

  LOG (GNUNET_ERROR_TYPE_DEBUG, " C_P- %p %u\n", c, c->pending_messages);
  c->pending_messages--;
  if ( (GNUNET_YES == c->destroy) &&
       (0 == c->pending_messages) )
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "!  destroying connection!\n");
    GCC_destroy (c);
    GCC_check_connections ();
    return;
  }

  /* Send ACK if needed, after accounting for sent ID in fc->queue_n */
  switch (type)
  {
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_CREATE:
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_ACK:
      c->maintenance_q = NULL;
      /* Don't trigger a keepalive for sent ACKs, only SYN and SYNACKs */
      if (GNUNET_MESSAGE_TYPE_CADET_CONNECTION_CREATE == type || !fwd)
        schedule_next_keepalive (c, fwd);
      break;

    case GNUNET_MESSAGE_TYPE_CADET_ENCRYPTED:
      if (GNUNET_YES == sent)
      {
        fc->last_pid_sent = pid;
        if (GC_is_pid_bigger (fc->last_pid_sent + 1, fc->last_ack_recv))
          GCC_start_poll (c, fwd);
        GCC_send_ack (c, fwd, GNUNET_NO);
        connection_reset_timeout (c, fwd);
      }

      LOG (GNUNET_ERROR_TYPE_DEBUG, "!  Q_N- %p %u\n", fc, fc->queue_n);
      if (GNUNET_NO == forced)
      {
        fc->queue_n--;
        LOG (GNUNET_ERROR_TYPE_DEBUG,
            "!   accounting pid %u\n",
            fc->last_pid_sent);
      }
      else
      {
        LOG (GNUNET_ERROR_TYPE_DEBUG,
             "!   forced, Q_N not accounting pid %u\n",
             fc->last_pid_sent);
      }
      break;

    case GNUNET_MESSAGE_TYPE_CADET_KX:
      if (GNUNET_YES == sent)
        connection_reset_timeout (c, fwd);
      break;

    case GNUNET_MESSAGE_TYPE_CADET_POLL:
      fc->poll_msg = NULL;
      if (2 == c->destroy)
      {
        LOG (GNUNET_ERROR_TYPE_DEBUG, "POLL canceled on shutdown\n");
        return;
      }
      if (0 == fc->queue_max)
      {
        LOG (GNUNET_ERROR_TYPE_DEBUG, "POLL cancelled: neighbor disconnected\n");
        return;
      }
      LOG (GNUNET_ERROR_TYPE_DEBUG, "POLL sent for %s, scheduling new one!\n",
          GCC_2s (c));
      GNUNET_assert (NULL == fc->poll_task);
      fc->poll_time = GNUNET_TIME_STD_BACKOFF (fc->poll_time);
      fc->poll_task = GNUNET_SCHEDULER_add_delayed (fc->poll_time,
                                                    &send_poll, fc);
      LOG (GNUNET_ERROR_TYPE_DEBUG, " task %u\n", fc->poll_task);
      break;

    case GNUNET_MESSAGE_TYPE_CADET_ACK:
      fc->ack_msg = NULL;
      break;

    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_BROKEN:
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_DESTROY:
      break;

    default:
      LOG (GNUNET_ERROR_TYPE_ERROR, "%s unknown\n", GC_m2s (type));
      GNUNET_break (0);
      break;
  }
  LOG (GNUNET_ERROR_TYPE_DEBUG, "!  message sent!\n");

  update_perf (c, wait, size);
  GCC_check_connections ();
}


/**
 * Get the previous hop in a connection
 *
 * @param c Connection.
 *
 * @return Previous peer in the connection.
 */
static struct CadetPeer *
get_prev_hop (const struct CadetConnection *c)
{
  GNUNET_PEER_Id id;

  if (NULL == c->path)
    return NULL;
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       " get prev hop %s [%u/%u]\n",
       GCC_2s (c), c->own_pos, c->path->length);
  if (0 == c->own_pos || c->path->length < 2)
    id = c->path->peers[0];
  else
    id = c->path->peers[c->own_pos - 1];

  LOG (GNUNET_ERROR_TYPE_DEBUG, "  ID: %s (%u)\n",
       GNUNET_i2s (GNUNET_PEER_resolve2 (id)), id);

  return GCP_get_short (id, GNUNET_YES);
}


/**
 * Get the next hop in a connection
 *
 * @param c Connection.
 *
 * @return Next peer in the connection.
 */
static struct CadetPeer *
get_next_hop (const struct CadetConnection *c)
{
  GNUNET_PEER_Id id;

  if (NULL == c->path)
    return NULL;

  LOG (GNUNET_ERROR_TYPE_DEBUG, " get next hop %s [%u/%u]\n",
       GCC_2s (c), c->own_pos, c->path->length);
  if ((c->path->length - 1) == c->own_pos || c->path->length < 2)
    id = c->path->peers[c->path->length - 1];
  else
    id = c->path->peers[c->own_pos + 1];

  LOG (GNUNET_ERROR_TYPE_DEBUG, "  ID: %s (%u)\n",
       GNUNET_i2s (GNUNET_PEER_resolve2 (id)), id);

  return GCP_get_short (id, GNUNET_YES);
}


/**
 * Check that the direct neighbours (previous and next hop)
 * are properly associated with this connection.
 *
 * @param c connection to check
 */
static void
check_neighbours (const struct CadetConnection *c)
{
  if (NULL == c->path)
    return; /* nothing to check */
  GCP_check_connection (get_next_hop (c), c);
  GCP_check_connection (get_prev_hop (c), c);
}


/**
 * Helper for #GCC_check_connections().  Calls #check_neighbours().
 *
 * @param cls NULL
 * @param key ignored
 * @param value the `struct CadetConnection` to check
 * @return #GNUNET_OK (continue to iterate)
 */
static int
check_connection (void *cls,
                  const struct GNUNET_HashCode *key,
                  void *value)
{
  struct CadetConnection *c = value;

  check_neighbours (c);
  return GNUNET_OK;
}


/**
 * Check invariants for all connections using #check_neighbours().
 */
void
GCC_check_connections ()
{
  if (0 == CHECK_INVARIANTS)
    return;
  if (NULL == connections)
    return;
  GNUNET_CONTAINER_multihashmap_iterate (connections,
                                         &check_connection,
                                         NULL);
}


/**
 * Get the hop in a connection.
 *
 * @param c Connection.
 * @param fwd Next in the FWD direction?
 *
 * @return Next peer in the connection.
 */
static struct CadetPeer *
get_hop (struct CadetConnection *c, int fwd)
{
  return (fwd) ? get_next_hop (c) : get_prev_hop (c);
}


/**
 * Get a bit mask for a message received out-of-order.
 *
 * @param last_pid_recv Last PID we received prior to the out-of-order.
 * @param ooo_pid PID of the out-of-order message.
 */
static uint32_t
get_recv_bitmask (uint32_t last_pid_recv, uint32_t ooo_pid)
{
  return 1 << (last_pid_recv - ooo_pid);
}


/**
 * Check is an out-of-order message is ok:
 * - at most 31 messages behind.
 * - not duplicate.
 *
 * @param last_pid_recv Last in-order PID received.
 */
static int
is_ooo_ok (uint32_t last_pid_recv, uint32_t ooo_pid, uint32_t ooo_bitmap)
{
  uint32_t mask;

  if (GC_is_pid_bigger (last_pid_recv - 31, ooo_pid))
    return GNUNET_NO;

  mask = get_recv_bitmask (last_pid_recv, ooo_pid);
  if (0 != (ooo_bitmap & mask))
    return GNUNET_NO;

  return GNUNET_YES;
}


/**
 * Is traffic coming from this sender 'FWD' traffic?
 *
 * @param c Connection to check.
 * @param sender Short peer identity of neighbor.
 *
 * @return #GNUNET_YES in case the sender is the 'prev' hop and therefore
 *         the traffic is 'FWD'.
 *         #GNUNET_NO for BCK.
 *         #GNUNET_SYSERR for errors (sender isn't a hop in the connection).
 */
static int
is_fwd (const struct CadetConnection *c,
        const struct CadetPeer *sender)
{
  GNUNET_PEER_Id id;

  id = GCP_get_short_id (sender);
  if (GCP_get_short_id (get_prev_hop (c)) == id)
    return GNUNET_YES;

  if (GCP_get_short_id (get_next_hop (c)) == id)
    return GNUNET_NO;

  return GNUNET_SYSERR;
}


/**
 * Sends a CONNECTION ACK message in reponse to a received CONNECTION_CREATE
 * or a first CONNECTION_ACK directed to us.
 *
 * @param c Connection to confirm.
 * @param fwd Should we send it FWD? (root->dest)
 *            (First (~SYNACK) goes BCK, second (~ACK) goes FWD)
 */
static void
send_connection_ack (struct CadetConnection *c, int fwd)
{
  struct GNUNET_CADET_ConnectionACK msg;
  struct CadetTunnel *t;
  const uint16_t size = sizeof (struct GNUNET_CADET_ConnectionACK);
  const uint16_t type = GNUNET_MESSAGE_TYPE_CADET_CONNECTION_ACK;

  GCC_check_connections ();
  t = c->t;
  LOG (GNUNET_ERROR_TYPE_INFO,
       "==> %s ({ C %s ACK}    0) on conn %s (%p) %s [%5u]\n",
       GC_m2s (type), GC_f2s (!fwd), GCC_2s (c), c, GC_f2s (fwd), size);

  msg.header.size = htons (size);
  msg.header.type = htons (type);
  msg.reserved = htonl (0);
  msg.cid = c->id;

  GNUNET_assert (NULL == c->maintenance_q);
  c->maintenance_q = GCP_send (get_hop (c, fwd), &msg.header,
                               GNUNET_MESSAGE_TYPE_CADET_CONNECTION_ACK, 0,
                               c, fwd,
                               &conn_message_sent, NULL);
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  C_P+ %p %u (conn`ACK)\n",
       c, c->pending_messages);
  c->pending_messages++;

  if (CADET_TUNNEL_NEW == GCT_get_cstate (t))
    GCT_change_cstate (t, CADET_TUNNEL_WAITING);
  if (CADET_CONNECTION_READY != c->state)
    connection_change_state (c, CADET_CONNECTION_SENT);
  GCC_check_connections ();
}


/**
 * Send a notification that a connection is broken.
 *
 * @param c Connection that is broken.
 * @param id1 Peer that has disconnected.
 * @param id2 Peer that has disconnected.
 * @param fwd Direction towards which to send it.
 */
static void
send_broken (struct CadetConnection *c,
             const struct GNUNET_PeerIdentity *id1,
             const struct GNUNET_PeerIdentity *id2,
             int fwd)
{
  struct GNUNET_CADET_ConnectionBroken msg;

  GCC_check_connections ();
  msg.header.size = htons (sizeof (struct GNUNET_CADET_ConnectionBroken));
  msg.header.type = htons (GNUNET_MESSAGE_TYPE_CADET_CONNECTION_BROKEN);
  msg.cid = c->id;
  msg.reserved = htonl (0);
  msg.peer1 = *id1;
  msg.peer2 = *id2;
  (void) GCC_send_prebuilt_message (&msg.header, UINT16_MAX, 0, c, fwd,
                                    GNUNET_YES, NULL, NULL);
  GCC_check_connections ();
}


/**
 * Send a notification that a connection is broken, when a connection
 * isn't even known to the local peer or soon to be destroyed.
 *
 * @param connection_id Connection ID.
 * @param id1 Peer that has disconnected, probably local peer.
 * @param id2 Peer that has disconnected can be NULL if unknown.
 * @param neighbor Peer to notify (neighbor who sent the connection).
 */
static void
send_broken_unknown (const struct GNUNET_CADET_Hash *connection_id,
                     const struct GNUNET_PeerIdentity *id1,
                     const struct GNUNET_PeerIdentity *id2,
                     struct CadetPeer *neighbor)
{
  struct GNUNET_CADET_ConnectionBroken msg;

  GCC_check_connections ();
  LOG (GNUNET_ERROR_TYPE_INFO, "--> BROKEN on unknown connection %s\n",
       GNUNET_h2s (GC_h2hc (connection_id)));

  msg.header.size = htons (sizeof (struct GNUNET_CADET_ConnectionBroken));
  msg.header.type = htons (GNUNET_MESSAGE_TYPE_CADET_CONNECTION_BROKEN);
  msg.cid = *connection_id;
  msg.reserved = htonl (0);
  msg.peer1 = *id1;
  if (NULL != id2)
    msg.peer2 = *id2;
  else
    memset (&msg.peer2, 0, sizeof (msg.peer2));
  GNUNET_assert (NULL != GCP_send (neighbor, &msg.header,
                                   UINT16_MAX, 2,
                                   NULL, GNUNET_SYSERR, /* connection, fwd */
                                   NULL, NULL)); /* continuation */
  GCC_check_connections ();
}


/**
 * Send keepalive packets for a connection.
 *
 * @param c Connection to keep alive..
 * @param fwd Is this a FWD keepalive? (owner -> dest).
 */
static void
send_connection_keepalive (struct CadetConnection *c, int fwd)
{
  struct GNUNET_MessageHeader msg;
  struct CadetFlowControl *fc;
  int tunnel_ready;

  GCC_check_connections ();
  LOG (GNUNET_ERROR_TYPE_INFO,
       "keepalive %s for connection %s\n",
       GC_f2s (fwd), GCC_2s (c));

  GNUNET_assert (NULL != c->t);
  fc = fwd ? &c->fwd_fc : &c->bck_fc;
  tunnel_ready = GNUNET_YES == GCT_has_queued_traffic (c->t)
                 && CADET_TUNNEL_KEY_OK <= GCT_get_estate (c->t);
  if (0 < fc->queue_n || tunnel_ready)
  {
    LOG (GNUNET_ERROR_TYPE_INFO, "not sending keepalive, traffic in queue\n");
    return;
  }

  GNUNET_STATISTICS_update (stats, "# keepalives sent", 1, GNUNET_NO);

  GNUNET_assert (NULL != c->t);
  msg.size = htons (sizeof (msg));
  msg.type = htons (GNUNET_MESSAGE_TYPE_CADET_KEEPALIVE);

  GNUNET_assert (NULL ==
                 GCT_send_prebuilt_message (&msg, c->t, c,
                                            GNUNET_NO, NULL, NULL));
  GCC_check_connections ();
}


/**
 * Send CONNECTION_{CREATE/ACK} packets for a connection.
 *
 * @param c Connection for which to send the message.
 * @param fwd If #GNUNET_YES, send CREATE, otherwise send ACK.
 */
static void
connection_recreate (struct CadetConnection *c, int fwd)
{
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "sending connection recreate\n");
  if (fwd)
    GCC_send_create (c);
  else
    send_connection_ack (c, GNUNET_NO);
}


/**
 * Generic connection timer management.
 * Depending on the role of the peer in the connection will send the
 * appropriate message (build or keepalive)
 *
 * @param c Conncetion to maintain.
 * @param fwd Is FWD?
 */
static void
connection_maintain (struct CadetConnection *c, int fwd)
{
  if (GNUNET_NO != c->destroy)
  {
    LOG (GNUNET_ERROR_TYPE_INFO, "not sending keepalive, being destroyed\n");
    return;
  }

  if (NULL == c->t)
  {
    GNUNET_break (0);
    GCC_debug (c, GNUNET_ERROR_TYPE_ERROR);
    return;
  }

  if (CADET_TUNNEL_SEARCHING == GCT_get_cstate (c->t))
  {
    /* If status is SEARCHING, why is there a connection? Should be WAITING */
    GNUNET_break (0);
    GCT_debug (c->t, GNUNET_ERROR_TYPE_ERROR);
    LOG (GNUNET_ERROR_TYPE_INFO, "not sending keepalive, tunnel SEARCHING\n");
    schedule_next_keepalive (c, fwd);
    return;
  }
  switch (c->state)
  {
    case CADET_CONNECTION_NEW:
      GNUNET_break (0);
      /* fall-through */
    case CADET_CONNECTION_SENT:
      connection_recreate (c, fwd);
      break;
    case CADET_CONNECTION_READY:
      send_connection_keepalive (c, fwd);
      break;
    default:
      break;
  }
}


/**
 * Keep the connection alive.
 *
 * @param c Connection to keep alive.
 * @param fwd Direction.
 */
static void
connection_keepalive (struct CadetConnection *c,
                      int fwd)
{
  GCC_check_connections ();
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "%s keepalive for %s\n",
       GC_f2s (fwd), GCC_2s (c));

  if (fwd)
    c->fwd_maintenance_task = NULL;
  else
    c->bck_maintenance_task = NULL;
  connection_maintain (c, fwd);
  GCC_check_connections ();
  /* Next execution will be scheduled by message_sent or _maintain*/
}


/**
 * Keep the connection alive in the FWD direction.
 *
 * @param cls Closure (connection to keepalive).
 */
static void
connection_fwd_keepalive (void *cls)
{
  struct CadetConnection *c = cls;

  GCC_check_connections ();
  connection_keepalive (c,
                        GNUNET_YES);
  GCC_check_connections ();
}


/**
 * Keep the connection alive in the BCK direction.
 *
 * @param cls Closure (connection to keepalive).
 */
static void
connection_bck_keepalive (void *cls)
{
  struct CadetConnection *c = cls;

  GCC_check_connections ();
  connection_keepalive (c,
                        GNUNET_NO);
  GCC_check_connections ();
}


/**
 * Schedule next keepalive task, taking in consideration
 * the connection state and number of retries.
 *
 * If the peer is not the origin, do nothing.
 *
 * @param c Connection for which to schedule the next keepalive.
 * @param fwd Direction for the next keepalive.
 */
static void
schedule_next_keepalive (struct CadetConnection *c, int fwd)
{
  struct GNUNET_TIME_Relative delay;
  struct GNUNET_SCHEDULER_Task * *task_id;
  GNUNET_SCHEDULER_TaskCallback keepalive_task;

  GCC_check_connections ();
  if (GNUNET_NO == GCC_is_origin (c, fwd))
    return;

  /* Calculate delay to use, depending on the state of the connection */
  if (CADET_CONNECTION_READY == c->state)
  {
    delay = refresh_connection_time;
  }
  else
  {
    if (1 > c->create_retry)
      c->create_retry = 1;
    delay = GNUNET_TIME_relative_saturating_multiply (create_connection_time,
                                                      c->create_retry);
    if (c->create_retry < 64) // TODO make configurable
      c->create_retry *= 2;
  }

  /* Select direction-dependent parameters */
  if (GNUNET_YES == fwd)
  {
    task_id = &c->fwd_maintenance_task;
    keepalive_task = &connection_fwd_keepalive;
  }
  else
  {
    task_id = &c->bck_maintenance_task;
    keepalive_task = &connection_bck_keepalive;
  }

  /* Check that no one scheduled it before us */
  if (NULL != *task_id)
  {
    /* No need for a _break. It can happen for instance when sending a SYNACK
     * for a duplicate SYN: the first SYNACK scheduled the task. */
    GNUNET_SCHEDULER_cancel (*task_id);
  }

  /* Schedule the task */
  *task_id = GNUNET_SCHEDULER_add_delayed (delay,
                                           keepalive_task,
                                           c);
  LOG (GNUNET_ERROR_TYPE_INFO,
       "next keepalive for %s in in %s\n",
       GCC_2s (c), GNUNET_STRINGS_relative_time_to_string (delay, GNUNET_YES));
  GCC_check_connections ();
}


/**
 * Cancel all transmissions that belong to a certain connection.
 *
 * If the connection is scheduled for destruction and no more messages are left,
 * the connection will be destroyed by the continuation call.
 *
 * @param c Connection which to cancel. Might be destroyed during this call.
 * @param fwd Cancel fwd traffic?
 */
static void
connection_cancel_queues (struct CadetConnection *c,
                          int fwd)
{
  struct CadetFlowControl *fc;

  GCC_check_connections ();
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "Cancel %s queues for connection %s\n",
       GC_f2s (fwd), GCC_2s (c));
  if (NULL == c)
  {
    GNUNET_break (0);
    return;
  }

  fc = fwd ? &c->fwd_fc : &c->bck_fc;
  if (NULL != fc->poll_task)
  {
    GNUNET_SCHEDULER_cancel (fc->poll_task);
    fc->poll_task = NULL;
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  cancelled POLL task for fc %p\n", fc);
  }
  if (NULL != fc->poll_msg)
  {
    GCC_cancel (fc->poll_msg);
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  cancelled POLL msg for fc %p\n", fc);
  }

  while (NULL != fc->q_head)
  {
    GCC_cancel (fc->q_head);
  }
  GCC_check_connections ();
}


/**
 * Function called if a connection has been stalled for a while,
 * possibly due to a missed ACK. Poll the neighbor about its ACK status.
 *
 * @param cls Closure (poll ctx).
 */
static void
send_poll (void *cls)
{
  struct CadetFlowControl *fc = cls;
  struct GNUNET_CADET_Poll msg;
  struct CadetConnection *c;
  int fwd;

  fc->poll_task = NULL;
  GCC_check_connections ();
  c = fc->c;
  fwd = fc == &c->fwd_fc;
  LOG (GNUNET_ERROR_TYPE_DEBUG, "Polling connection %s %s\n",
       GCC_2s (c),  GC_f2s (fwd));

  msg.header.type = htons (GNUNET_MESSAGE_TYPE_CADET_POLL);
  msg.header.size = htons (sizeof (msg));
  msg.cid = c->id;
  msg.pid = htonl (fc->last_pid_sent);
  LOG (GNUNET_ERROR_TYPE_DEBUG, " last pid sent: %u\n", fc->last_pid_sent);
  fc->poll_msg =
      GCC_send_prebuilt_message (&msg.header, UINT16_MAX, fc->last_pid_sent, c,
                                 fc == &c->fwd_fc, GNUNET_YES, NULL, NULL);
  GNUNET_assert (NULL != fc->poll_msg);
  GCC_check_connections ();
}


/**
 * Generic connection timeout implementation.
 *
 * Timeout function due to lack of keepalive/traffic from an endpoint.
 * Destroys connection if called.
 *
 * @param c Connection to destroy.
 * @param fwd Was the timeout from the origin? (FWD timeout)
 */
static void
connection_timeout (struct CadetConnection *c, int fwd)
{
  GCC_check_connections ();

  LOG (GNUNET_ERROR_TYPE_INFO,
       "Connection %s %s timed out. Destroying.\n",
       GCC_2s (c),
       GC_f2s (fwd));
  GCC_debug (c, GNUNET_ERROR_TYPE_DEBUG);

  if (GCC_is_origin (c, fwd)) /* Loopback? Something is wrong! */
  {
    GNUNET_break (0);
    return;
  }

  /* If dest, send "broken" notification. */
  if (GCC_is_terminal (c, fwd))
  {
    struct CadetPeer *next_hop;

    next_hop = fwd ? get_prev_hop (c) : get_next_hop (c);
    send_broken_unknown (&c->id, &my_full_id, NULL, next_hop);
  }

  GCC_destroy (c);
  GCC_check_connections ();
}


/**
 * Timeout function due to lack of keepalive/traffic from the owner.
 * Destroys connection if called.
 *
 * @param cls Closure (connection to destroy).
 */
static void
connection_fwd_timeout (void *cls)
{
  struct CadetConnection *c = cls;

  c->fwd_maintenance_task = NULL;
  GCC_check_connections ();
  connection_timeout (c, GNUNET_YES);
  GCC_check_connections ();
}


/**
 * Timeout function due to lack of keepalive/traffic from the destination.
 * Destroys connection if called.
 *
 * @param cls Closure (connection to destroy).
 */
static void
connection_bck_timeout (void *cls)
{
  struct CadetConnection *c = cls;

  c->bck_maintenance_task = NULL;
  GCC_check_connections ();
  connection_timeout (c, GNUNET_NO);
  GCC_check_connections ();
}


/**
 * Resets the connection timeout task, some other message has done the
 * task's job.
 * - For the first peer on the direction this means to send
 *   a keepalive or a path confirmation message (either create or ACK).
 * - For all other peers, this means to destroy the connection,
 *   due to lack of activity.
 * Starts the timeout if no timeout was running (connection just created).
 *
 * @param c Connection whose timeout to reset.
 * @param fwd Is this forward?
 *
 * TODO use heap to improve efficiency of scheduler.
 */
static void
connection_reset_timeout (struct CadetConnection *c, int fwd)
{
  LOG (GNUNET_ERROR_TYPE_DEBUG, "Connection %s reset timeout\n", GC_f2s (fwd));
  if (GCC_is_origin (c, fwd)) /* Startpoint */
  {
    schedule_next_keepalive (c, fwd);
    if (NULL != c->maintenance_q)
    {
      GCP_send_cancel (c->maintenance_q);
      c->maintenance_q = NULL; /* Is set to NULL by conn_message_sent anyway */
    }
  }
  else /* Relay, endpoint. */
  {
    struct GNUNET_TIME_Relative delay;
    struct GNUNET_SCHEDULER_Task * *ti;
    GNUNET_SCHEDULER_TaskCallback f;

    ti = fwd ? &c->fwd_maintenance_task : &c->bck_maintenance_task;

    if (NULL != *ti)
      GNUNET_SCHEDULER_cancel (*ti);
    delay = GNUNET_TIME_relative_saturating_multiply (refresh_connection_time, 4);
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "  timing out in %s\n",
         GNUNET_STRINGS_relative_time_to_string (delay, GNUNET_NO));
    f = fwd ? &connection_fwd_timeout : &connection_bck_timeout;
    *ti = GNUNET_SCHEDULER_add_delayed (delay, f, c);
  }
}


/**
 * Iterator to compare each connection's path with the path of a new connection.
 *
 * If the connection coincides, the c member of path is set to the connection
 * and the destroy flag of the connection is set.
 *
 * @param cls Closure (new path).
 * @param c Connection in the tunnel to check.
 */
static void
check_path (void *cls, struct CadetConnection *c)
{
  struct CadetConnection *new_conn = cls;
  struct CadetPeerPath *path = new_conn->path;

  LOG (GNUNET_ERROR_TYPE_DEBUG, "  checking %s (%p), length %u\n",
       GCC_2s (c), c, c->path->length);

  if (c != new_conn
      && GNUNET_NO == c->destroy
      && CADET_CONNECTION_BROKEN != c->state
      && CADET_CONNECTION_DESTROYED != c->state
      && path_equivalent (path, c->path))
  {
    new_conn->destroy = GNUNET_YES; /* Do not mark_destroyed, */
    new_conn->path->c = c;          /* this is only a flag for the Iterator. */
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  MATCH!\n");
  }
}


/**
 * Finds out if this path is already being used by an existing connection.
 *
 * Checks the tunnel towards the destination to see if it contains
 * any connection with the same path.
 *
 * If the existing connection is ready, it is kept.
 * Otherwise if the sender has a smaller ID that ours, we accept it (and
 * the peer will eventually reject our attempt).
 *
 * @param path Path to check.
 * @return #GNUNET_YES if the tunnel has a connection with the same path,
 *         #GNUNET_NO otherwise.
 */
static int
does_connection_exist (struct CadetConnection *conn)
{
  struct CadetPeer *p;
  struct CadetTunnel *t;
  struct CadetConnection *c;

  p = GCP_get_short (conn->path->peers[0], GNUNET_NO);
  if (NULL == p)
    return GNUNET_NO;
  t = GCP_get_tunnel (p);
  if (NULL == t)
    return GNUNET_NO;

  LOG (GNUNET_ERROR_TYPE_DEBUG, "Checking for duplicates\n");

  GCT_iterate_connections (t, &check_path, conn);

  if (GNUNET_YES == conn->destroy)
  {
    c = conn->path->c;
    conn->destroy = GNUNET_NO;
    conn->path->c = conn;
    LOG (GNUNET_ERROR_TYPE_DEBUG, " found duplicate of %s\n", GCC_2s (conn));
    LOG (GNUNET_ERROR_TYPE_DEBUG, " duplicate: %s\n", GCC_2s (c));
    GCC_debug (c, GNUNET_ERROR_TYPE_DEBUG);
    if (CADET_CONNECTION_READY == c->state)
    {
      /* The other peer confirmed a live connection with this path,
       * why are they trying to duplicate it? */
      GNUNET_STATISTICS_update (stats, "# duplicate connections", 1, GNUNET_NO);
      return GNUNET_YES;
    }
    LOG (GNUNET_ERROR_TYPE_DEBUG, " duplicate not ready, connection unique\n");
    return GNUNET_NO;
  }
  else
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, " %s has no duplicates\n", GCC_2s (conn));
    return GNUNET_NO;
  }
}


/**
 * @brief Check if the tunnel this connection belongs to has any other
 * connection with the same path, and destroy one if so.
 *
 * @param cls Closure (connection to check).
 */
static void
check_duplicates (void *cls)
{
  struct CadetConnection *c = cls;

  c->check_duplicates_task = NULL;
  if (GNUNET_YES == does_connection_exist (c))
  {
    GCT_debug (c->t, GNUNET_ERROR_TYPE_DEBUG);
    send_broken (c, &my_full_id, &my_full_id, GCC_is_origin (c, GNUNET_YES));
    GCC_destroy (c);
  }
}


/**
 * Wait for enough time to let any dead connections time out and check for
 * any remaining duplicates.
 *
 * @param c Connection that is a potential duplicate.
 */
static void
schedule_check_duplicates (struct CadetConnection *c)
{
  struct GNUNET_TIME_Relative delay;

  if (NULL != c->check_duplicates_task)
    return;
  delay = GNUNET_TIME_relative_saturating_multiply (refresh_connection_time, 5);
  c->check_duplicates_task = GNUNET_SCHEDULER_add_delayed (delay,
                                                           &check_duplicates,
                                                           c);
}


/**
 * Add the connection to the list of both neighbors.
 *
 * @param c Connection.
 *
 * @return #GNUNET_OK if everything went fine
 *         #GNUNET_SYSERR if the was an error and @c c is malformed.
 */
static int
register_neighbors (struct CadetConnection *c)
{
  c->next_peer = get_next_hop (c);
  c->prev_peer = get_prev_hop (c);
  GNUNET_assert (c->next_peer != c->prev_peer);
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "register neighbors for connection %s\n",
       GCC_2s (c));
  path_debug (c->path);
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "own pos %u\n", c->own_pos);
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "putting connection %s to next peer %p\n",
       GCC_2s (c),
       c->next_peer);
  LOG (GNUNET_ERROR_TYPE_DEBUG, "next peer %p %s\n",
       c->next_peer,
       GCP_2s (c->next_peer));
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "putting connection %s to prev peer %p\n",
       GCC_2s (c),
       c->prev_peer);
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "prev peer %p %s\n",
       c->prev_peer,
       GCP_2s (c->prev_peer));

  if ( (GNUNET_NO == GCP_is_neighbor (c->next_peer)) ||
       (GNUNET_NO == GCP_is_neighbor (c->prev_peer)) )
  {
    if (GCC_is_origin (c, GNUNET_YES))
      GNUNET_STATISTICS_update (stats, "# local bad paths", 1, GNUNET_NO);
    GNUNET_STATISTICS_update (stats, "# bad paths", 1, GNUNET_NO);

    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "  register neighbors failed\n");
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "  prev: %s, neighbor?: %d\n",
         GCP_2s (c->prev_peer),
         GCP_is_neighbor (c->prev_peer));
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "  next: %s, neighbor?: %d\n",
         GCP_2s (c->next_peer),
         GCP_is_neighbor (c->next_peer));
    return GNUNET_SYSERR;
  }
  GCP_add_connection (c->next_peer, c, GNUNET_NO);
  GCP_add_connection (c->prev_peer, c, GNUNET_YES);

  return GNUNET_OK;
}


/**
 * Remove the connection from the list of both neighbors.
 *
 * @param c Connection.
 */
static void
unregister_neighbors (struct CadetConnection *c)
{
//  struct CadetPeer *peer; FIXME dont use next_peer, prev_peer
  /* Either already unregistered or never got registered, it's ok either way. */
  if (NULL == c->path)
    return;
  if (NULL != c->next_peer)
  {
    GCP_remove_connection (c->next_peer, c);
    c->next_peer = NULL;
  }
  if (NULL != c->prev_peer)
  {
    GCP_remove_connection (c->prev_peer, c);
    c->prev_peer = NULL;
  }
}


/**
 * Invalidates all paths towards all peers that comprise the connection which
 * rely on the disconnected peer.
 *
 * ~O(n^3) (peers in connection * paths/peer * links/path)
 *
 * @param c Connection whose peers' paths to clean.
 * @param disconnected Peer that disconnected.
 */
static void
invalidate_paths (struct CadetConnection *c,
                  struct CadetPeer *disconnected)
{
  struct CadetPeer *peer;
  unsigned int i;

  for (i = 0; i < c->path->length; i++)
  {
    peer = GCP_get_short (c->path->peers[i], GNUNET_NO);
    if (NULL != peer)
      GCP_notify_broken_link (peer, &my_full_id, GCP_get_id (disconnected));
  }
}


/**
 * Bind the connection to the peer and the tunnel to that peer.
 *
 * If the peer has no tunnel, create one. Update tunnel and connection
 * data structres to reflect new status.
 *
 * @param c Connection.
 * @param peer Peer.
 */
static void
add_to_peer (struct CadetConnection *c,
             struct CadetPeer *peer)
{
  GCP_add_tunnel (peer);
  c->t = GCP_get_tunnel (peer);
  GCT_add_connection (c->t, c);
}


/**
 * Log receipt of message on stderr (INFO level).
 *
 * @param message Message received.
 * @param peer    Peer who sent the message.
 * @param conn_id Connection ID of the message.
 */
static void
log_message (const struct GNUNET_MessageHeader *message,
             const struct CadetPeer *peer,
             const struct GNUNET_CADET_Hash *conn_id)
{
  uint16_t size;
  uint16_t type;
  char *arrow;

  size = ntohs (message->size);
  type = ntohs (message->type);
  switch (type)
  {
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_CREATE:
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_ACK:
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_BROKEN:
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_DESTROY:
      arrow = "==";
      break;
    default:
      arrow = "--";
  }
  LOG (GNUNET_ERROR_TYPE_INFO, "<%s %s on conn %s from %s, %6u bytes\n",
       arrow, GC_m2s (type), GNUNET_h2s (GC_h2hc (conn_id)),
       GCP_2s(peer), (unsigned int) size);
}

/******************************************************************************/
/********************************    API    ***********************************/
/******************************************************************************/

/**
 * Handler for connection creation.
 *
 * @param peer Message sender (neighbor).
 * @param msg Message itself.
 */
void
GCC_handle_create (struct CadetPeer *peer,
                   const struct GNUNET_CADET_ConnectionCreate *msg)
{
  const struct GNUNET_CADET_Hash *cid;
  struct GNUNET_PeerIdentity *id;
  struct CadetPeerPath *path;
  struct CadetPeer *dest_peer;
  struct CadetPeer *orig_peer;
  struct CadetConnection *c;
  unsigned int own_pos;
  uint16_t size;

  GCC_check_connections ();
  size = ntohs (msg->header.size);

  /* Calculate hops */
  size -= sizeof (struct GNUNET_CADET_ConnectionCreate);
  if (0 != size % sizeof (struct GNUNET_PeerIdentity))
  {
    GNUNET_break_op (0);
    return;
  }
  size /= sizeof (struct GNUNET_PeerIdentity);
  if (1 > size)
  {
    GNUNET_break_op (0);
    return;
  }
  LOG (GNUNET_ERROR_TYPE_DEBUG, "    path has %u hops.\n", size);

  /* Get parameters */
  cid = &msg->cid;
  log_message (&msg->header, peer, cid);
  id = (struct GNUNET_PeerIdentity *) &msg[1];
  LOG (GNUNET_ERROR_TYPE_DEBUG, "    origin: %s\n", GNUNET_i2s (id));

  /* Create connection */
  c = connection_get (cid);
  if (NULL == c)
  {
    path = path_build_from_peer_ids ((struct GNUNET_PeerIdentity *) &msg[1],
                                     size, myid, &own_pos);
    if (NULL == path)
    {
      /* Path was malformed, probably our own ID was not in it. */
      GNUNET_STATISTICS_update (stats, "# malformed paths", 1, GNUNET_NO);
      GNUNET_break_op (0);
      return;
    }
    if (0 == own_pos)
    {
      /* We received this request from a neighbor, we cannot be origin */
      GNUNET_STATISTICS_update (stats, "# fake paths", 1, GNUNET_NO);
      GNUNET_break_op (0);
      path_destroy (path);
      return;
    }

    LOG (GNUNET_ERROR_TYPE_DEBUG, "  Own position: %u\n", own_pos);
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  Creating connection\n");
    c = GCC_new (cid, NULL, path, own_pos);
    if (NULL == c)
    {
      if (path->length - 1 == own_pos)
      {
        /* If we are destination, why did the creation fail? */
        GNUNET_break (0);
        path_destroy (path);
        GCC_check_connections ();
        return;
      }
      send_broken_unknown (cid, &my_full_id,
                           GNUNET_PEER_resolve2 (path->peers[own_pos + 1]),
                           peer);
      path_destroy (path);
      GCC_check_connections ();
      return;
    }
    GCP_add_path_to_all (path, GNUNET_NO);
    connection_reset_timeout (c, GNUNET_YES);
  }
  else
  {
    path = path_duplicate (c->path);
  }
  if (CADET_CONNECTION_NEW == c->state)
    connection_change_state (c, CADET_CONNECTION_SENT);

  /* Remember peers */
  dest_peer = GCP_get (&id[size - 1], GNUNET_YES);
  orig_peer = GCP_get (&id[0], GNUNET_YES);

  /* Is it a connection to us? */
  if (c->own_pos == path->length - 1)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  It's for us!\n");
    GCP_add_path_to_origin (orig_peer, path_duplicate (path), GNUNET_YES);

    add_to_peer (c, orig_peer);
    if (GNUNET_YES == does_connection_exist (c))
    {
      /* Peer created a connection equal to one we think exists
       * and is fine.
       * Solution: Keep both and postpone disambiguation. In the meantime
       * the connection will time out or peer will inform us it is broken.
       *
       * Other options:
       * - Use explicit duplicate.
       * - Accept new conn and destroy the old. (interruption in higher level)
       * - Keep the one with higher ID / created by peer with higher ID. */
       schedule_check_duplicates (c);
    }

    if (CADET_TUNNEL_NEW == GCT_get_cstate (c->t))
      GCT_change_cstate (c->t,  CADET_TUNNEL_WAITING);
    if (NULL == c->maintenance_q)
      send_connection_ack (c, GNUNET_NO);
    if (CADET_CONNECTION_SENT == c->state)
      connection_change_state (c, CADET_CONNECTION_ACK);
  }
  else
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  not for us, retransmitting...\n");
    GCP_add_path (dest_peer, path_duplicate (path), GNUNET_NO);
    GCP_add_path_to_origin (orig_peer, path_duplicate (path), GNUNET_NO);
    (void) GCC_send_prebuilt_message (&msg->header, 0, 0, c,
                                      GNUNET_YES, GNUNET_YES, NULL, NULL);
  }
  path_destroy (path);
  GCC_check_connections ();
}


/**
 * Handler for connection confirmations.
 *
 * @param peer Message sender (neighbor).
 * @param msg Message itself.
 */
void
GCC_handle_confirm (struct CadetPeer *peer,
                    const struct GNUNET_CADET_ConnectionACK *msg)
{
  struct CadetConnection *c;
  enum CadetConnectionState oldstate;
  int fwd;

  GCC_check_connections ();
  log_message (&msg->header, peer, &msg->cid);
  c = connection_get (&msg->cid);
  if (NULL == c)
  {
    GNUNET_STATISTICS_update (stats, "# control on unknown connection",
                              1, GNUNET_NO);
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "  don't know the connection!\n");
    send_broken_unknown (&msg->cid, &my_full_id, NULL, peer);
    GCC_check_connections ();
    return;
  }
  if (GNUNET_NO != c->destroy)
  {
    GNUNET_assert (CADET_CONNECTION_DESTROYED == c->state);
    GNUNET_STATISTICS_update (stats, "# control on dying connection",
                              1, GNUNET_NO);
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "connection %s being destroyed, ignoring confirm\n",
         GCC_2s (c));
    GCC_check_connections ();
    return;
  }

  oldstate = c->state;
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  via peer %s\n", GCP_2s (peer));
  if (get_next_hop (c) == peer)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  SYNACK\n");
    fwd = GNUNET_NO;
    if (CADET_CONNECTION_SENT == oldstate)
      connection_change_state (c, CADET_CONNECTION_ACK);
  }
  else if (get_prev_hop (c) == peer)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  FINAL ACK\n");
    fwd = GNUNET_YES;
    connection_change_state (c, CADET_CONNECTION_READY);
  }
  else
  {
    GNUNET_STATISTICS_update (stats, "# control on connection from wrong peer",
                              1, GNUNET_NO);
    GNUNET_break_op (0);
    return;
  }

  connection_reset_timeout (c, fwd);

  GNUNET_assert (NULL != c->path);
  GCP_add_path_to_all (c->path, GNUNET_YES);

  /* Message for us as creator? */
  if (GNUNET_YES == GCC_is_origin (c, GNUNET_YES))
  {
    if (GNUNET_NO != fwd)
    {
      GNUNET_break (0);
      return;
    }
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  Connection (SYN)ACK for us!\n");

    /* If just created, cancel the short timeout and start a long one */
    if (CADET_CONNECTION_SENT == oldstate)
    {
      c->create_retry = 1;
      connection_reset_timeout (c, GNUNET_YES);
    }

    /* Change connection state, send ACK */
    connection_change_state (c, CADET_CONNECTION_READY);
    send_connection_ack (c, GNUNET_YES);

    /* Change tunnel state, trigger KX */
    if (CADET_TUNNEL_WAITING == GCT_get_cstate (c->t))
      GCT_change_cstate (c->t, CADET_TUNNEL_READY);
    GCC_check_connections ();
    return;
  }

  /* Message for us as destination? */
  if (GCC_is_terminal (c, GNUNET_YES))
  {
    if (GNUNET_YES != fwd)
    {
      GNUNET_break (0);
      return;
    }
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  Connection ACK for us!\n");

    /* If just created, cancel the short timeout and start a long one */
    if (CADET_CONNECTION_ACK == oldstate)
      connection_reset_timeout (c, GNUNET_NO);

    /* Change tunnel state */
    if (CADET_TUNNEL_WAITING == GCT_get_cstate (c->t))
      GCT_change_cstate (c->t, CADET_TUNNEL_READY);
    GCC_check_connections ();
  }
  else
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  not for us, retransmitting...\n");
    (void) GCC_send_prebuilt_message (&msg->header, 0, 0, c, fwd,
                                      GNUNET_YES, NULL, NULL);
  }
  GCC_check_connections ();
}


/**
 * Handler for notifications of broken connections.
 *
 * @param peer Message sender (neighbor).
 * @param msg Message itself.
 */
void
GCC_handle_broken (struct CadetPeer *peer,
                   const struct GNUNET_CADET_ConnectionBroken *msg)
{
  struct CadetConnection *c;
  struct CadetTunnel *t;
  int fwd;

  GCC_check_connections ();
  log_message (&msg->header, peer, &msg->cid);
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  regarding %s\n", GNUNET_i2s (&msg->peer1));
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  regarding %s\n", GNUNET_i2s (&msg->peer2));
  c = connection_get (&msg->cid);
  if (NULL == c)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  duplicate CONNECTION_BROKEN\n");
    GNUNET_STATISTICS_update (stats, "# duplicate CONNECTION_BROKEN",
                              1, GNUNET_NO);
    GCC_check_connections ();
    return;
  }

  t = c->t;

  fwd = is_fwd (c, peer);
  if (GNUNET_SYSERR == fwd)
  {
    GNUNET_break_op (0);
    GCC_check_connections ();
    return;
  }
  mark_destroyed (c);
  if (GCC_is_terminal (c, fwd))
  {
    struct CadetPeer *endpoint;

    if (NULL == t)
    {
      /* A terminal connection should not have 't' set to NULL. */
      GNUNET_break (0);
      GCC_debug (c, GNUNET_ERROR_TYPE_ERROR);
      return;
    }
    endpoint = GCP_get_short (c->path->peers[c->path->length - 1], GNUNET_YES);
    if (2 < c->path->length)
      path_invalidate (c->path);
    GCP_notify_broken_link (endpoint, &msg->peer1, &msg->peer2);

    connection_change_state (c, CADET_CONNECTION_BROKEN);
    GCT_remove_connection (t, c);
    c->t = NULL;

    GCC_destroy (c);
  }
  else
  {
    (void) GCC_send_prebuilt_message (&msg->header, 0, 0, c, fwd,
                                      GNUNET_YES, NULL, NULL);
    connection_cancel_queues (c, !fwd);
  }
  GCC_check_connections ();
  return;
}


/**
 * Handler for notifications of destroyed connections.
 *
 * @param peer Message sender (neighbor).
 * @param msg Message itself.
 */
void
GCC_handle_destroy (struct CadetPeer *peer,
                    const struct GNUNET_CADET_ConnectionDestroy *msg)
{
  struct CadetConnection *c;
  int fwd;

  GCC_check_connections ();
  log_message (&msg->header, peer, &msg->cid);
  c = connection_get (&msg->cid);
  if (NULL == c)
  {
    /* Probably already got the message from another path,
     * destroyed the tunnel and retransmitted to children.
     * Safe to ignore.
     */
    GNUNET_STATISTICS_update (stats,
                              "# control on unknown connection",
                              1, GNUNET_NO);
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "  connection unknown destroyed: previously destroyed?\n");
    GCC_check_connections ();
    return;
  }

  fwd = is_fwd (c, peer);
  if (GNUNET_SYSERR == fwd)
  {
    GNUNET_break_op (0);
    GCC_check_connections ();
    return;
  }

  if (GNUNET_NO == GCC_is_terminal (c, fwd))
  {
    (void) GCC_send_prebuilt_message (&msg->header, 0, 0, c, fwd,
                                      GNUNET_YES, NULL, NULL);
  }
  else if (0 == c->pending_messages)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  directly destroying connection!\n");
    GCC_destroy (c);
    GCC_check_connections ();
    return;
  }
  mark_destroyed (c);
  if (NULL != c->t)
  {
    GCT_remove_connection (c->t, c);
    c->t = NULL;
  }
  GCC_check_connections ();
  return;
}


/**
 * Handler for cadet network traffic hop-by-hop acks.
 *
 * @param peer Message sender (neighbor).
 * @param msg Message itself.
 */
void
GCC_handle_ack (struct CadetPeer *peer,
                const struct GNUNET_CADET_ACK *msg)
{
  struct CadetConnection *c;
  struct CadetFlowControl *fc;
  uint32_t ack;
  int fwd;

  GCC_check_connections ();
  log_message (&msg->header, peer, &msg->cid);
  c = connection_get (&msg->cid);
  if (NULL == c)
  {
    GNUNET_STATISTICS_update (stats,
                              "# ack on unknown connection",
                              1,
                              GNUNET_NO);
    send_broken_unknown (&msg->cid,
                         &my_full_id,
                         NULL,
                         peer);
    GCC_check_connections ();
    return;
  }

  /* Is this a forward or backward ACK? */
  if (get_next_hop (c) == peer)
  {
    fc = &c->fwd_fc;
    fwd = GNUNET_YES;
  }
  else if (get_prev_hop (c) == peer)
  {
    fc = &c->bck_fc;
    fwd = GNUNET_NO;
  }
  else
  {
    GNUNET_break_op (0);
    return;
  }

  ack = ntohl (msg->ack);
  LOG (GNUNET_ERROR_TYPE_DEBUG, " %s ACK %u (was %u)\n",
       GC_f2s (fwd), ack, fc->last_ack_recv);
  if (GC_is_pid_bigger (ack, fc->last_ack_recv))
    fc->last_ack_recv = ack;

  /* Cancel polling if the ACK is big enough. */
  if (NULL != fc->poll_task &&
      GC_is_pid_bigger (fc->last_ack_recv, fc->last_pid_sent))
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  Cancel poll\n");
    GNUNET_SCHEDULER_cancel (fc->poll_task);
    fc->poll_task = NULL;
    fc->poll_time = GNUNET_TIME_UNIT_SECONDS;
  }

  GCC_check_connections ();
}


/**
 * Handler for cadet network traffic hop-by-hop data counter polls.
 *
 * @param peer Message sender (neighbor).
 * @param msg Message itself.
 */
void
GCC_handle_poll (struct CadetPeer *peer,
                 const struct GNUNET_CADET_Poll *msg)
{
  struct CadetConnection *c;
  struct CadetFlowControl *fc;
  uint32_t pid;
  int fwd;

  GCC_check_connections ();
  log_message (&msg->header, peer, &msg->cid);
  c = connection_get (&msg->cid);
  if (NULL == c)
  {
    GNUNET_STATISTICS_update (stats, "# poll on unknown connection", 1,
                              GNUNET_NO);
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "POLL message on unknown connection %s!\n",
         GNUNET_h2s (GC_h2hc (&msg->cid)));
    send_broken_unknown (&msg->cid,
                         &my_full_id,
                         NULL,
                         peer);
    GCC_check_connections ();
    return;
  }

  /* Is this a forward or backward ACK?
   * Note: a poll should never be needed in a loopback case,
   * since there is no possiblility of packet loss there, so
   * this way of discerining FWD/BCK should not be a problem.
   */
  if (get_next_hop (c) == peer)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  FWD FC\n");
    fc = &c->fwd_fc;
  }
  else if (get_prev_hop (c) == peer)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  BCK FC\n");
    fc = &c->bck_fc;
  }
  else
  {
    GNUNET_break_op (0);
    return;
  }

  pid = ntohl (msg->pid);
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  PID %u, OLD %u\n", pid, fc->last_pid_recv);
  fc->last_pid_recv = pid;
  fwd = fc == &c->bck_fc;
  GCC_send_ack (c, fwd, GNUNET_YES);
  GCC_check_connections ();
}


/**
 * Check the message against internal state and test if it goes FWD or BCK.
 *
 * Updates the PID, state and timeout values for the connection.
 *
 * @param message Message to check. It must belong to an existing connection.
 * @param cid Connection ID (even if @a c is NULL, the ID is still needed).
 * @param c Connection this message should belong. If NULL, check fails.
 * @param sender Neighbor that sent the message.
 *
 * @return #GNUNET_YES if the message goes FWD.
 *         #GNUNET_NO if it goes BCK.
 *         #GNUNET_SYSERR if there is an error (unauthorized sender, ...).
 */
static int
check_message (const struct GNUNET_MessageHeader *message,
               const struct GNUNET_CADET_Hash* cid,
               struct CadetConnection *c,
               struct CadetPeer *sender,
               uint32_t pid)
{
  struct CadetFlowControl *fc;
  struct CadetPeer *hop;
  int fwd;
  uint16_t type;

  /* Check connection */
  if (NULL == c)
  {
    GNUNET_STATISTICS_update (stats,
                              "# unknown connection",
                              1, GNUNET_NO);
    LOG (GNUNET_ERROR_TYPE_DEBUG,
         "%s on unknown connection %s\n",
         GC_m2s (ntohs (message->type)),
         GNUNET_h2s (GC_h2hc (cid)));
    send_broken_unknown (cid,
                         &my_full_id,
                         NULL,
                         sender);
    return GNUNET_SYSERR;
  }

  /* Check if origin is as expected */
  hop = get_prev_hop (c);
  if (sender == hop)
  {
    fwd = GNUNET_YES;
  }
  else
  {
    hop = get_next_hop (c);
    GNUNET_break (hop == c->next_peer);
    if (sender == hop)
    {
      fwd = GNUNET_NO;
    }
    else
    {
      /* Unexpected peer sending traffic on a connection. */
      GNUNET_break_op (0);
      return GNUNET_SYSERR;
    }
  }

  /* Check PID for payload messages */
  type = ntohs (message->type);
  if (GNUNET_MESSAGE_TYPE_CADET_ENCRYPTED == type)
  {
    fc = fwd ? &c->bck_fc : &c->fwd_fc;
    LOG (GNUNET_ERROR_TYPE_DEBUG, " PID %u (expected %u - %u)\n",
         pid, fc->last_pid_recv + 1, fc->last_ack_sent);
    if (GC_is_pid_bigger (pid, fc->last_ack_sent))
    {
      GNUNET_break_op (0);
      GNUNET_STATISTICS_update (stats, "# unsolicited message", 1, GNUNET_NO);
      LOG (GNUNET_ERROR_TYPE_WARNING, "Received PID %u, (prev %u), ACK %u\n",
          pid, fc->last_pid_recv, fc->last_ack_sent);
      return GNUNET_SYSERR;
    }
    if (GC_is_pid_bigger (pid, fc->last_pid_recv))
    {
      unsigned int delta;

      delta = pid - fc->last_pid_recv;
      fc->last_pid_recv = pid;
      fc->recv_bitmap <<= delta;
      fc->recv_bitmap |= 1;
    }
    else
    {
      GNUNET_STATISTICS_update (stats, "# out of order PID", 1, GNUNET_NO);
      if (GNUNET_NO == is_ooo_ok (fc->last_pid_recv, pid, fc->recv_bitmap))
      {
        LOG (GNUNET_ERROR_TYPE_WARNING, "PID %u unexpected (%u+), dropping!\n",
             pid, fc->last_pid_recv - 31);
        return GNUNET_SYSERR;
      }
      fc->recv_bitmap |= get_recv_bitmask (fc->last_pid_recv, pid);
    }
  }

  /* Count as connection confirmation. */
  if (CADET_CONNECTION_SENT == c->state || CADET_CONNECTION_ACK == c->state)
  {
    connection_change_state (c, CADET_CONNECTION_READY);
    if (NULL != c->t)
    {
      if (CADET_TUNNEL_WAITING == GCT_get_cstate (c->t))
        GCT_change_cstate (c->t, CADET_TUNNEL_READY);
    }
  }
  connection_reset_timeout (c, fwd);

  return fwd;
}


/**
 * Handler for key exchange traffic (Axolotl KX).
 *
 * @param peer Message sender (neighbor).
 * @param msg Message itself.
 */
void
GCC_handle_kx (struct CadetPeer *peer,
               const struct GNUNET_CADET_KX *msg)
{
  const struct GNUNET_CADET_Hash* cid;
  struct CadetConnection *c;
  int fwd;

  GCC_check_connections ();
  cid = &msg->cid;
  log_message (&msg->header, peer, cid);

  c = connection_get (cid);
  fwd = check_message (&msg->header,
                       cid,
                       c,
                       peer,
                       0);

  /* If something went wrong, discard message. */
  if (GNUNET_SYSERR == fwd)
  {
    GNUNET_break_op (0);
    GCC_check_connections ();
    return;
  }

  /* Is this message for us? */
  if (GCC_is_terminal (c, fwd))
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  message for us!\n");
    GNUNET_STATISTICS_update (stats, "# received KX", 1, GNUNET_NO);
    if (NULL == c->t)
    {
      GNUNET_break (0);
      return;
    }
    GCT_handle_kx (c->t, msg);
    GCC_check_connections ();
    return;
  }

  /* Message not for us: forward to next hop */
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  not for us, retransmitting...\n");
  GNUNET_STATISTICS_update (stats, "# messages forwarded", 1, GNUNET_NO);
  (void) GCC_send_prebuilt_message (&msg->header, 0, 0, c, fwd,
                                    GNUNET_NO, NULL, NULL);
  GCC_check_connections ();
}


/**
 * Handler for encrypted cadet network traffic (channel mgmt, data).
 *
 * @param peer Message sender (neighbor).
 * @param msg Message itself.
 */
void
GCC_handle_encrypted (struct CadetPeer *peer,
                      const struct GNUNET_CADET_Encrypted *msg)
{
  const struct GNUNET_CADET_Hash* cid;
  struct CadetConnection *c;
  uint32_t pid;
  int fwd;

  GCC_check_connections ();
  cid = &msg->cid;
  pid = ntohl (msg->pid);
  log_message (&msg->header, peer, cid);

  c = connection_get (cid);
  fwd = check_message (&msg->header,
                       cid,
                       c,
                       peer,
                       pid);

  /* If something went wrong, discard message. */
  if (GNUNET_SYSERR == fwd)
  {
    GNUNET_break_op (0);
    GCC_check_connections ();
    return;
  }

  /* Is this message for us? */
  if (GCC_is_terminal (c, fwd))
  {
    GNUNET_STATISTICS_update (stats, "# received encrypted", 1, GNUNET_NO);

    if (NULL == c->t)
    {
      GNUNET_break (GNUNET_NO != c->destroy);
      return;
    }
    GCT_handle_encrypted (c->t, msg);
    GCC_send_ack (c, fwd, GNUNET_NO);
    GCC_check_connections ();
    return;
  }

  /* Message not for us: forward to next hop */
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  not for us, retransmitting...\n");
  GNUNET_STATISTICS_update (stats, "# messages forwarded", 1, GNUNET_NO);
  (void) GCC_send_prebuilt_message (&msg->header, 0, 0, c, fwd,
                                    GNUNET_NO, NULL, NULL);
  GCC_check_connections ();
}


/**
 * Initialize the connections subsystem
 *
 * @param c Configuration handle.
 */
void
GCC_init (const struct GNUNET_CONFIGURATION_Handle *c)
{
  LOG (GNUNET_ERROR_TYPE_DEBUG, "init\n");
  if (GNUNET_OK !=
      GNUNET_CONFIGURATION_get_value_number (c, "CADET", "MAX_MSGS_QUEUE",
                                             &max_msgs_queue))
  {
    GNUNET_log_config_invalid (GNUNET_ERROR_TYPE_ERROR,
                               "CADET", "MAX_MSGS_QUEUE", "MISSING");
    GNUNET_SCHEDULER_shutdown ();
    return;
  }

  if (GNUNET_OK !=
      GNUNET_CONFIGURATION_get_value_number (c, "CADET", "MAX_CONNECTIONS",
                                             &max_connections))
  {
    GNUNET_log_config_invalid (GNUNET_ERROR_TYPE_ERROR,
                               "CADET", "MAX_CONNECTIONS", "MISSING");
    GNUNET_SCHEDULER_shutdown ();
    return;
  }

  if (GNUNET_OK !=
      GNUNET_CONFIGURATION_get_value_time (c, "CADET", "REFRESH_CONNECTION_TIME",
                                           &refresh_connection_time))
  {
    GNUNET_log_config_invalid (GNUNET_ERROR_TYPE_ERROR,
                               "CADET", "REFRESH_CONNECTION_TIME", "MISSING");
    GNUNET_SCHEDULER_shutdown ();
    return;
  }
  create_connection_time = GNUNET_TIME_relative_min (GNUNET_TIME_UNIT_SECONDS,
                                                     refresh_connection_time);
  connections = GNUNET_CONTAINER_multihashmap_create (1024, GNUNET_NO);
}


/**
 * Destroy each connection on shutdown.
 *
 * @param cls Closure (unused).
 * @param key Current key code (CID, unused).
 * @param value Value in the hash map (`struct CadetConnection`)
 *
 * @return #GNUNET_YES, because we should continue to iterate
 */
static int
shutdown_iterator (void *cls,
                   const struct GNUNET_HashCode *key,
                   void *value)
{
  struct CadetConnection *c = value;

  c->state = CADET_CONNECTION_DESTROYED;
  GCC_destroy (c);
  return GNUNET_YES;
}


/**
 * Shut down the connections subsystem.
 */
void
GCC_shutdown (void)
{
  LOG (GNUNET_ERROR_TYPE_DEBUG, "Shutting down connections\n");
  GCC_check_connections ();
  GNUNET_CONTAINER_multihashmap_iterate (connections,
                                         &shutdown_iterator,
                                         NULL);
  GNUNET_CONTAINER_multihashmap_destroy (connections);
  connections = NULL;
}


/**
 * Create a connection.
 *
 * @param cid Connection ID (either created locally or imposed remotely).
 * @param t Tunnel this connection belongs to (or NULL for transit connections);
 * @param path Path this connection has to use (copy is made).
 * @param own_pos Own position in the @c path path.
 *
 * @return Newly created connection.
 *         NULL in case of error: own id not in path, wrong neighbors, ...
*/
struct CadetConnection *
GCC_new (const struct GNUNET_CADET_Hash *cid,
         struct CadetTunnel *t,
         struct CadetPeerPath *path,
         unsigned int own_pos)
{
  struct CadetConnection *c;
  struct CadetPeerPath *cpath;

  GCC_check_connections ();
  cpath = path_duplicate (path);
  GNUNET_assert (NULL != cpath);
  c = GNUNET_new (struct CadetConnection);
  c->id = *cid;
  GNUNET_assert (GNUNET_OK ==
                 GNUNET_CONTAINER_multihashmap_put (connections,
                                                    GCC_get_h (c), c,
                                                    GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY));
  fc_init (&c->fwd_fc);
  fc_init (&c->bck_fc);
  c->fwd_fc.c = c;
  c->bck_fc.c = c;

  c->t = t;
  GNUNET_assert (own_pos <= cpath->length - 1);
  c->own_pos = own_pos;
  c->path = cpath;
  cpath->c = c;
  if (GNUNET_OK != register_neighbors (c))
  {
    if (0 == own_pos)
    {
      /* We were the origin of this request, this means we have invalid
       * info about the paths to reach the destination. We must invalidate
       * the *original* path to avoid trying it again in the next minute.
       */
      if (2 < path->length)
        path_invalidate (path);
      else
      {
        GNUNET_break (0);
        GCT_debug(t, GNUNET_ERROR_TYPE_WARNING);
      }
      c->t = NULL;
    }
    path_destroy (c->path);
    c->path = NULL;
    GCC_destroy (c);
    return NULL;
  }
  LOG (GNUNET_ERROR_TYPE_INFO, "New connection %s\n", GCC_2s (c));
  GCC_check_connections ();
  return c;
}


/**
 * Connection is no longer needed: destroy it.
 *
 * Cancels all pending traffic (including possible DESTROY messages), all
 * maintenance tasks and removes the connection from neighbor peers and tunnel.
 *
 * @param c Connection to destroy.
 */
void
GCC_destroy (struct CadetConnection *c)
{
  GCC_check_connections ();
  if (NULL == c)
  {
    GNUNET_break (0);
    return;
  }

  if (2 == c->destroy) /* cancel queues -> GCP_queue_cancel -> q_destroy -> */
    return;            /* -> message_sent -> GCC_destroy. Don't loop. */
  c->destroy = 2;

  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "destroying connection %s\n",
       GCC_2s (c));
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       " fc's f: %p, b: %p\n",
       &c->fwd_fc, &c->bck_fc);
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       " fc tasks f: %u, b: %u\n",
       c->fwd_fc.poll_task,
       c->bck_fc.poll_task);

  /* Cancel all traffic */
  if (NULL != c->path)
  {
    connection_cancel_queues (c, GNUNET_YES);
    connection_cancel_queues (c, GNUNET_NO);
    if (NULL != c->maintenance_q)
    {
      GCP_send_cancel (c->maintenance_q);
      c->maintenance_q = NULL;
    }
  }
  unregister_neighbors (c);
  path_destroy (c->path);
  c->path = NULL;

  /* Delete from tunnel */
  if (NULL != c->t)
    GCT_remove_connection (c->t, c);

  if (NULL != c->check_duplicates_task)
    GNUNET_SCHEDULER_cancel (c->check_duplicates_task);
  if (NULL != c->fwd_maintenance_task)
    GNUNET_SCHEDULER_cancel (c->fwd_maintenance_task);
  if (NULL != c->bck_maintenance_task)
    GNUNET_SCHEDULER_cancel (c->bck_maintenance_task);

  if (GNUNET_NO == c->was_removed)
  {
    GNUNET_break (GNUNET_YES ==
                  GNUNET_CONTAINER_multihashmap_remove (connections,
                                                        GCC_get_h (c),
                                                        c));
  }
  GNUNET_STATISTICS_update (stats,
                            "# connections",
                            -1,
                            GNUNET_NO);
  GNUNET_free (c);
  GCC_check_connections ();
}


/**
 * Get the connection ID.
 *
 * @param c Connection to get the ID from.
 *
 * @return ID of the connection.
 */
const struct GNUNET_CADET_Hash *
GCC_get_id (const struct CadetConnection *c)
{
  return &c->id;
}


/**
 * Get the connection ID.
 *
 * @param c Connection to get the ID from.
 *
 * @return ID of the connection.
 */
const struct GNUNET_HashCode *
GCC_get_h (const struct CadetConnection *c)
{
  return GC_h2hc (&c->id);
}


/**
 * Get the connection path.
 *
 * @param c Connection to get the path from.
 *
 * @return path used by the connection.
 */
const struct CadetPeerPath *
GCC_get_path (const struct CadetConnection *c)
{
  if (GNUNET_NO == c->destroy)
    return c->path;
  return NULL;
}


/**
 * Get the connection state.
 *
 * @param c Connection to get the state from.
 *
 * @return state of the connection.
 */
enum CadetConnectionState
GCC_get_state (const struct CadetConnection *c)
{
  return c->state;
}

/**
 * Get the connection tunnel.
 *
 * @param c Connection to get the tunnel from.
 *
 * @return tunnel of the connection.
 */
struct CadetTunnel *
GCC_get_tunnel (const struct CadetConnection *c)
{
  return c->t;
}


/**
 * Get free buffer space in a connection.
 *
 * @param c Connection.
 * @param fwd Is query about FWD traffic?
 *
 * @return Free buffer space [0 - max_msgs_queue/max_connections]
 */
unsigned int
GCC_get_buffer (struct CadetConnection *c, int fwd)
{
  struct CadetFlowControl *fc;

  fc = fwd ? &c->fwd_fc : &c->bck_fc;

  LOG (GNUNET_ERROR_TYPE_DEBUG, "  Get %s buffer on %s: %u - %u\n",
       GC_f2s (fwd), GCC_2s (c), fc->queue_max, fc->queue_n);
  GCC_debug (c, GNUNET_ERROR_TYPE_DEBUG);

  return (fc->queue_max - fc->queue_n);
}


/**
 * Get how many messages have we allowed to send to us from a direction.
 *
 * @param c Connection.
 * @param fwd Are we asking about traffic from FWD (BCK messages)?
 *
 * @return last_ack_sent - last_pid_recv
 */
unsigned int
GCC_get_allowed (struct CadetConnection *c, int fwd)
{
  struct CadetFlowControl *fc;

  fc = fwd ? &c->fwd_fc : &c->bck_fc;
  if (CADET_CONNECTION_READY != c->state
      || GC_is_pid_bigger (fc->last_pid_recv, fc->last_ack_sent))
  {
    return 0;
  }
  return (fc->last_ack_sent - fc->last_pid_recv);
}


/**
 * Get messages queued in a connection.
 *
 * @param c Connection.
 * @param fwd Is query about FWD traffic?
 *
 * @return Number of messages queued.
 */
unsigned int
GCC_get_qn (struct CadetConnection *c, int fwd)
{
  struct CadetFlowControl *fc;

  fc = fwd ? &c->fwd_fc : &c->bck_fc;

  return fc->queue_n;
}


/**
 * Get next PID to use.
 *
 * @param c Connection.
 * @param fwd Is query about FWD traffic?
 *
 * @return Next PID to use.
 */
uint32_t
GCC_get_pid (struct CadetConnection *c, int fwd)
{
  struct CadetFlowControl *fc;
  uint32_t pid;

  fc = fwd ? &c->fwd_fc : &c->bck_fc;
  pid = fc->next_pid;
  fc->next_pid++;
  return pid;
}


/**
 * Allow the connection to advertise a buffer of the given size.
 *
 * The connection will send an @c fwd ACK message (so: in direction !fwd)
 * allowing up to last_pid_recv + buffer.
 *
 * @param c Connection.
 * @param buffer How many more messages the connection can accept.
 * @param fwd Is this about FWD traffic? (The ack will go dest->root).
 */
void
GCC_allow (struct CadetConnection *c, unsigned int buffer, int fwd)
{
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  allowing %s %u messages %s\n",
       GCC_2s (c), buffer, GC_f2s (fwd));
  send_ack (c, buffer, fwd, GNUNET_NO);
}


/**
 * Notify other peers on a connection of a broken link. Mark connections
 * to destroy after all traffic has been sent.
 *
 * @param c Connection on which there has been a disconnection.
 * @param peer Peer that disconnected.
 */
void
GCC_neighbor_disconnected (struct CadetConnection *c, struct CadetPeer *peer)
{
  struct CadetFlowControl *fc;
  char peer_name[16];
  int fwd;

  GCC_check_connections ();
  strncpy (peer_name, GCP_2s (peer), 16);
  peer_name[15] = '\0';
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       "shutting down %s, %s disconnected\n",
       GCC_2s (c), peer_name);

  invalidate_paths (c, peer);

  fwd = is_fwd (c, peer);
  if (GNUNET_SYSERR == fwd)
  {
    GNUNET_break (0);
    return;
  }
  if ( (GNUNET_YES == GCC_is_terminal (c, fwd)) ||
       (GNUNET_NO != c->destroy) )
  {
    /* Local shutdown, or other peer already down (hence 'c->destroy');
       so there is no one to notify about this, just clean up. */
    GCC_destroy (c);
    GCC_check_connections ();
    return;
  }
  /* Mark FlowControl towards the peer as unavaliable. */
  fc = fwd ? &c->bck_fc : &c->fwd_fc;
  fc->queue_max = 0;

  send_broken (c, &my_full_id, GCP_get_id (peer), fwd);

  /* Connection will have at least one pending message
   * (the one we just scheduled), so delay destruction
   * and remove from map so we don't use accidentally. */
  mark_destroyed (c);
  GNUNET_assert (GNUNET_NO == c->was_removed);
  c->was_removed = GNUNET_YES;
  GNUNET_break (GNUNET_YES ==
                GNUNET_CONTAINER_multihashmap_remove (connections,
                                                      GCC_get_h (c),
                                                      c));
  /* Cancel queue in the direction that just died. */
  connection_cancel_queues (c, ! fwd);
  GCC_stop_poll (c, ! fwd);
  unregister_neighbors (c);
  GCC_check_connections ();
}


/**
 * Is this peer the first one on the connection?
 *
 * @param c Connection.
 * @param fwd Is this about fwd traffic?
 *
 * @return #GNUNET_YES if origin, #GNUNET_NO if relay/terminal.
 */
int
GCC_is_origin (struct CadetConnection *c, int fwd)
{
  if (!fwd && c->path->length - 1 == c->own_pos )
    return GNUNET_YES;
  if (fwd && 0 == c->own_pos)
    return GNUNET_YES;
  return GNUNET_NO;
}


/**
 * Is this peer the last one on the connection?
 *
 * @param c Connection.
 * @param fwd Is this about fwd traffic?
 *            Note that the ROOT is the terminal for BCK traffic!
 *
 * @return #GNUNET_YES if terminal, #GNUNET_NO if relay/origin.
 */
int
GCC_is_terminal (struct CadetConnection *c, int fwd)
{
  return GCC_is_origin (c, ! fwd);
}


/**
 * See if we are allowed to send by the next hop in the given direction.
 *
 * @param c Connection.
 * @param fwd Is this about fwd traffic?
 *
 * @return #GNUNET_YES in case it's OK to send.
 */
int
GCC_is_sendable (struct CadetConnection *c, int fwd)
{
  struct CadetFlowControl *fc;

  LOG (GNUNET_ERROR_TYPE_DEBUG,
       " checking sendability of %s traffic on %s\n",
       GC_f2s (fwd), GCC_2s (c));
  if (NULL == c)
  {
    GNUNET_break (0);
    return GNUNET_YES;
  }
  fc = fwd ? &c->fwd_fc : &c->bck_fc;
  LOG (GNUNET_ERROR_TYPE_DEBUG,
       " last ack recv: %u, last pid sent: %u\n",
       fc->last_ack_recv, fc->last_pid_sent);
  if (GC_is_pid_bigger (fc->last_ack_recv, fc->last_pid_sent))
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, " sendable\n");
    return GNUNET_YES;
  }
  LOG (GNUNET_ERROR_TYPE_DEBUG, " not sendable\n");
  return GNUNET_NO;
}


/**
 * Check if this connection is a direct one (never trim a direct connection).
 *
 * @param c Connection.
 *
 * @return #GNUNET_YES in case it's a direct connection, #GNUNET_NO otherwise.
 */
int
GCC_is_direct (struct CadetConnection *c)
{
  return (c->path->length == 2) ? GNUNET_YES : GNUNET_NO;
}


/**
 * Sends a completely built message on a connection, properly registering
 * all used resources.
 *
 * @param message Message to send.
 * @param payload_type Type of payload, in case the message is encrypted.
 *                     0 for restransmissions (when type is no longer known)
 *                     UINT16_MAX when not applicable.
 * @param payload_id ID of the payload (PID, ACK, ...).
 * @param c Connection on which this message is transmitted.
 * @param fwd Is this a fwd message?
 * @param force Force the connection to accept the message (buffer overfill).
 * @param cont Continuation called once message is sent. Can be NULL.
 * @param cont_cls Closure for @c cont.
 *
 * @return Handle to cancel the message before it's sent.
 *         NULL on error.
 *         Invalid on @c cont call.
 */
struct CadetConnectionQueue *
GCC_send_prebuilt_message (const struct GNUNET_MessageHeader *message,
                           uint16_t payload_type, uint32_t payload_id,
                           struct CadetConnection *c, int fwd, int force,
                           GCC_sent cont, void *cont_cls)
{
  struct CadetFlowControl *fc;
  struct CadetConnectionQueue *q;
  uint16_t size;
  uint16_t type;

  size = ntohs (message->size);
  type = ntohs (message->type);

  GCC_check_connections ();
  fc = fwd ? &c->fwd_fc : &c->bck_fc;
  if (0 == fc->queue_max)
  {
    GNUNET_break (0);
    return NULL;
  }

  LOG (GNUNET_ERROR_TYPE_INFO,
       "--> %s (%s %4u) on conn %s (%p) %s [%5u]\n",
       GC_m2s (type), GC_m2s (payload_type), payload_id, GCC_2s (c), c,
       GC_f2s(fwd), size);
  switch (type)
  {
    case GNUNET_MESSAGE_TYPE_CADET_ENCRYPTED:
      LOG (GNUNET_ERROR_TYPE_DEBUG, "  Q_N+ %p %u, PIDsnt: %u, ACKrcv: %u\n",
            fc, fc->queue_n, fc->last_pid_sent, fc->last_ack_recv);
      if (GNUNET_NO == force)
      {
        fc->queue_n++;
      }
      break;

    case GNUNET_MESSAGE_TYPE_CADET_KX:
      /* nothing to do here */
      break;

    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_CREATE:
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_ACK:
       /* Should've only be used for restransmissions. */
      GNUNET_break (0 == payload_type);
      break;

    case GNUNET_MESSAGE_TYPE_CADET_ACK:
    case GNUNET_MESSAGE_TYPE_CADET_POLL:
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_DESTROY:
    case GNUNET_MESSAGE_TYPE_CADET_CONNECTION_BROKEN:
      GNUNET_assert (GNUNET_YES == force);
      break;

    default:
      GNUNET_break (0);
      return NULL;
  }

  if (fc->queue_n > fc->queue_max && GNUNET_NO == force)
  {
    GNUNET_STATISTICS_update (stats, "# messages dropped (buffer full)",
                              1, GNUNET_NO);
    GNUNET_break (0);
    LOG (GNUNET_ERROR_TYPE_DEBUG, "queue full: %u/%u\n",
         fc->queue_n, fc->queue_max);
    if (GNUNET_MESSAGE_TYPE_CADET_ENCRYPTED == type)
    {
      fc->queue_n--;
    }
    return NULL; /* Drop this message */
  }

  LOG (GNUNET_ERROR_TYPE_DEBUG, "  C_P+ %s %u\n",
       GCC_2s (c), c->pending_messages);
  c->pending_messages++;

  q = GNUNET_new (struct CadetConnectionQueue);
  q->forced = force;
  q->peer_q = GCP_send (get_hop (c, fwd), message,
                        payload_type, payload_id,
                        c, fwd,
                        &conn_message_sent, q);
  if (NULL == q->peer_q)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "dropping msg on %s, NULL q\n", GCC_2s (c));
    GNUNET_free (q);
    GCC_check_connections ();
    return NULL;
  }
  q->cont = cont;
  q->cont_cls = cont_cls;
  GNUNET_CONTAINER_DLL_insert (fc->q_head, fc->q_tail, q);
  GCC_check_connections ();
  return q;
}


/**
 * Cancel a previously sent message while it's in the queue.
 *
 * ONLY can be called before the continuation given to the send function
 * is called. Once the continuation is called, the message is no longer in the
 * queue.
 *
 * @param q Handle to the queue.
 */
void
GCC_cancel (struct CadetConnectionQueue *q)
{
  LOG (GNUNET_ERROR_TYPE_DEBUG, "!  GCC cancel message\n");

  /* send_cancel calls message_sent, which calls q->cont and frees q */
  GCP_send_cancel (q->peer_q);
  GCC_check_connections ();
}


/**
 * Sends a CREATE CONNECTION message for a path to a peer.
 * Changes the connection and tunnel states if necessary.
 *
 * @param c Connection to create.
 */
void
GCC_send_create (struct CadetConnection *c)
{
  enum CadetTunnelCState state;
  size_t size;

  GCC_check_connections ();
  size = sizeof (struct GNUNET_CADET_ConnectionCreate);
  size += c->path->length * sizeof (struct GNUNET_PeerIdentity);
  {
    /* Allocate message on the stack */
    unsigned char cbuf[size];
    struct GNUNET_CADET_ConnectionCreate *msg;
    struct GNUNET_PeerIdentity *peers;

    msg = (struct GNUNET_CADET_ConnectionCreate *) cbuf;
    msg->header.size = htons (size);
    msg->header.type = htons (GNUNET_MESSAGE_TYPE_CADET_CONNECTION_CREATE);
    msg->reserved = htonl (0);
    msg->cid = *GCC_get_id (c);
    peers = (struct GNUNET_PeerIdentity *) &msg[1];
    for (int i = 0; i < c->path->length; i++)
    {
      GNUNET_PEER_resolve (c->path->peers[i], peers++);
    }
    GNUNET_assert (NULL == c->maintenance_q);
    c->maintenance_q = GCP_send (get_next_hop (c),
                                 &msg->header,
                                 GNUNET_MESSAGE_TYPE_CADET_CONNECTION_CREATE, 0,
                                 c, GNUNET_YES,
                                 &conn_message_sent, NULL);
  }

  LOG (GNUNET_ERROR_TYPE_INFO, "==> %s %19s on conn %s (%p) FWD [%5u]\n",
       GC_m2s (GNUNET_MESSAGE_TYPE_CADET_CONNECTION_CREATE), "",
       GCC_2s (c), c, size);
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  C_P+ %p %u (create)\n",
         c, c->pending_messages);
  c->pending_messages++;

  state = GCT_get_cstate (c->t);
  if (CADET_TUNNEL_SEARCHING == state || CADET_TUNNEL_NEW == state)
    GCT_change_cstate (c->t, CADET_TUNNEL_WAITING);
  if (CADET_CONNECTION_NEW == c->state)
    connection_change_state (c, CADET_CONNECTION_SENT);
  GCC_check_connections ();
}


/**
 * Send an ACK on the appropriate connection/channel, depending on
 * the direction and the position of the peer.
 *
 * @param c Which connection to send the hop-by-hop ACK.
 * @param fwd Is this a fwd ACK? (will go dest->root).
 * @param force Send the ACK even if suboptimal (e.g. requested by POLL).
 */
void
GCC_send_ack (struct CadetConnection *c, int fwd, int force)
{
  unsigned int buffer;

  GCC_check_connections ();
  LOG (GNUNET_ERROR_TYPE_DEBUG, "GCC send %s ACK on %s\n",
       GC_f2s (fwd), GCC_2s (c));

  if (NULL == c)
  {
    GNUNET_break (0);
    return;
  }

  if (GNUNET_NO != c->destroy)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  being destroyed, why bother...\n");
    GCC_check_connections ();
    return;
  }

  /* Get available buffer space */
  if (GCC_is_terminal (c, fwd))
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  getting from all channels\n");
    buffer = GCT_get_channels_buffer (c->t);
  }
  else
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  getting from one connection\n");
    buffer = GCC_get_buffer (c, fwd);
  }
  LOG (GNUNET_ERROR_TYPE_DEBUG, "  buffer available: %u\n", buffer);
  if (0 == buffer && GNUNET_NO == force)
  {
    GCC_check_connections ();
    return;
  }

  /* Send available buffer space */
  if (GNUNET_YES == GCC_is_origin (c, fwd))
  {
    GNUNET_assert (NULL != c->t);
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  sending on channels...\n");
    GCT_unchoke_channels (c->t);
  }
  else
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  sending on connection\n");
    send_ack (c, buffer, fwd, force);
  }
  GCC_check_connections ();
}


/**
 * Send a message to all peers in this connection that the connection
 * is no longer valid.
 *
 * If some peer should not receive the message, it should be zero'ed out
 * before calling this function.
 *
 * @param c The connection whose peers to notify.
 */
void
GCC_send_destroy (struct CadetConnection *c)
{
  struct GNUNET_CADET_ConnectionDestroy msg;

  if (GNUNET_YES == c->destroy)
    return;
  GCC_check_connections ();
  msg.header.size = htons (sizeof (msg));
  msg.header.type = htons (GNUNET_MESSAGE_TYPE_CADET_CONNECTION_DESTROY);
  msg.cid = c->id;
  msg.reserved = htonl (0);
  LOG (GNUNET_ERROR_TYPE_DEBUG,
              "  sending connection destroy for connection %s\n",
              GCC_2s (c));

  if (GNUNET_NO == GCC_is_terminal (c, GNUNET_YES))
    (void) GCC_send_prebuilt_message (&msg.header, UINT16_MAX, 0, c,
                                      GNUNET_YES, GNUNET_YES, NULL, NULL);
  if (GNUNET_NO == GCC_is_terminal (c, GNUNET_NO))
    (void) GCC_send_prebuilt_message (&msg.header, UINT16_MAX, 0, c,
                                      GNUNET_NO, GNUNET_YES, NULL, NULL);
  mark_destroyed (c);
  GCC_check_connections ();
}


/**
 * @brief Start a polling timer for the connection.
 *
 * When a neighbor does not accept more traffic on the connection it could be
 * caused by a simple congestion or by a lost ACK. Polling enables to check
 * for the lastest ACK status for a connection.
 *
 * @param c Connection.
 * @param fwd Should we poll in the FWD direction?
 */
void
GCC_start_poll (struct CadetConnection *c, int fwd)
{
  struct CadetFlowControl *fc;

  fc = fwd ? &c->fwd_fc : &c->bck_fc;
  LOG (GNUNET_ERROR_TYPE_DEBUG, "POLL %s requested\n",
       GC_f2s (fwd));
  if (NULL != fc->poll_task || NULL != fc->poll_msg)
  {
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  POLL already in progress (t: %p, m: %p)\n",
         fc->poll_task, fc->poll_msg);
    return;
  }
  if (0 == fc->queue_max)
  {
    /* Should not be needed, traffic should've been cancelled. */
    GNUNET_break (0);
    LOG (GNUNET_ERROR_TYPE_DEBUG, "  POLL not possible, peer disconnected\n");
    return;
  }
  LOG (GNUNET_ERROR_TYPE_DEBUG, "POLL started on request\n");
  fc->poll_task = GNUNET_SCHEDULER_add_delayed (fc->poll_time, &send_poll, fc);
}


/**
 * @brief Stop polling a connection for ACKs.
 *
 * Once we have enough ACKs for future traffic, polls are no longer necessary.
 *
 * @param c Connection.
 * @param fwd Should we stop the poll in the FWD direction?
 */
void
GCC_stop_poll (struct CadetConnection *c, int fwd)
{
  struct CadetFlowControl *fc;

  fc = fwd ? &c->fwd_fc : &c->bck_fc;
  if (NULL != fc->poll_task)
  {
    GNUNET_SCHEDULER_cancel (fc->poll_task);
    fc->poll_task = NULL;
  }
  if (NULL != fc->poll_msg)
  {
    GCC_cancel (fc->poll_msg);
    fc->poll_msg = NULL;
  }
}


/**
 * Get a (static) string for a connection.
 *
 * @param c Connection.
 */
const char *
GCC_2s (const struct CadetConnection *c)
{
  if (NULL == c)
    return "NULL";

  if (NULL != c->t)
  {
    static char buf[128];

    SPRINTF (buf, "%s (->%s)",
             GNUNET_h2s (GC_h2hc (GCC_get_id (c))), GCT_2s (c->t));
    return buf;
  }
  return GNUNET_h2s (GC_h2hc (&c->id));
}


/**
 * Log all possible info about the connection state.
 *
 * @param c Connection to debug.
 * @param level Debug level to use.
 */
void
GCC_debug (const struct CadetConnection *c, enum GNUNET_ErrorType level)
{
  int do_log;
  char *s;

  do_log = GNUNET_get_log_call_status (level & (~GNUNET_ERROR_TYPE_BULK),
                                       "cadet-con",
                                       __FILE__, __FUNCTION__, __LINE__);
  if (0 == do_log)
    return;

  if (NULL == c)
  {
    LOG2 (level, "CCC DEBUG NULL CONNECTION\n");
    return;
  }

  LOG2 (level, "CCC DEBUG CONNECTION %s\n", GCC_2s (c));
  s = path_2s (c->path);
  LOG2 (level, "CCC  path %s, own pos: %u\n", s, c->own_pos);
  GNUNET_free (s);
  LOG2 (level, "CCC  state: %s, destroy: %u\n",
        GCC_state2s (c->state), c->destroy);
  LOG2 (level, "CCC  pending messages: %u\n", c->pending_messages);
  if (NULL != c->perf)
    LOG2 (level, "CCC  us/byte: %f\n", c->perf->avg);

  LOG2 (level, "CCC  FWD flow control:\n");
  LOG2 (level, "CCC   queue: %u/%u\n", c->fwd_fc.queue_n, c->fwd_fc.queue_max);
  LOG2 (level, "CCC   last PID sent: %5u, recv: %5u\n",
        c->fwd_fc.last_pid_sent, c->fwd_fc.last_pid_recv);
  LOG2 (level, "CCC   last ACK sent: %5u, recv: %5u\n",
        c->fwd_fc.last_ack_sent, c->fwd_fc.last_ack_recv);
  LOG2 (level, "CCC   recv PID bitmap: %X\n", c->fwd_fc.recv_bitmap);
  LOG2 (level, "CCC   poll: task %d, msg  %p, msg_ack %p)\n",
        c->fwd_fc.poll_task, c->fwd_fc.poll_msg, c->fwd_fc.ack_msg);

  LOG2 (level, "CCC  BCK flow control:\n");
  LOG2 (level, "CCC   queue: %u/%u\n", c->bck_fc.queue_n, c->bck_fc.queue_max);
  LOG2 (level, "CCC   last PID sent: %5u, recv: %5u\n",
        c->bck_fc.last_pid_sent, c->bck_fc.last_pid_recv);
  LOG2 (level, "CCC   last ACK sent: %5u, recv: %5u\n",
        c->bck_fc.last_ack_sent, c->bck_fc.last_ack_recv);
  LOG2 (level, "CCC   recv PID bitmap: %X\n", c->bck_fc.recv_bitmap);
  LOG2 (level, "CCC   poll: task %d, msg  %p, msg_ack %p)\n",
        c->bck_fc.poll_task, c->bck_fc.poll_msg, c->bck_fc.ack_msg);

  LOG2 (level, "CCC DEBUG CONNECTION END\n");
}