2 This file is part of GNUnet.
3 (C) 2010 Christian Grothoff
5 GNUnet is free software; you can redistribute it and/or modify
6 it under the terms of the GNU General Public License as published
7 by the Free Software Foundation; either version 3, or (at your
8 option) any later version.
10 GNUnet is distributed in the hope that it will be useful, but
11 WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 General Public License for more details.
15 You should have received a copy of the GNU General Public License
16 along with GNUnet; see the file COPYING. If not, write to the
17 Free Software Foundation, Inc., 59 Temple Place - Suite 330,
18 Boston, MA 02111-1307, USA.
22 * @file vpn/gnunet-daemon-exit.c
24 * @author Philipp Toelke
27 #include <gnunet_common.h>
28 #include <gnunet_program_lib.h>
29 #include <gnunet_protocols.h>
30 #include <gnunet_applications.h>
31 #include <gnunet_mesh_service.h>
32 #include <gnunet_constants.h>
35 #include "gnunet-vpn-packet.h"
36 #include "gnunet-helper-vpn-api.h"
37 #include "gnunet-vpn-checksum.h"
40 * The handle to the configuration used throughout the process
42 static const struct GNUNET_CONFIGURATION_Handle *cfg;
45 * The handle to the helper
47 struct GNUNET_VPN_HELPER_Handle *helper_handle;
57 static struct GNUNET_MESH_Handle *mesh_handle;
60 * This hashmaps contains the mapping from peer, service-descriptor,
61 * source-port and destination-port to a struct redirect_state
63 static struct GNUNET_CONTAINER_MultiHashMap *udp_connections;
64 static struct GNUNET_CONTAINER_Heap *udp_connections_heap;
65 static struct GNUNET_CONTAINER_MultiHashMap *tcp_connections;
66 static struct GNUNET_CONTAINER_Heap *tcp_connections_heap;
69 * If there are at least this many udp-Connections, old ones will be removed
71 static long long unsigned int max_udp_connections = 200;
74 * If there are at least this many tcp-Connections, old ones will be removed
76 static long long unsigned int max_tcp_connections = 200;
81 unsigned char addr[16];
86 * This struct is saved into the services-hashmap
88 struct redirect_service
113 * The source-address of this connection. When a packet to this address is
114 * received, this tunnel is used to forward it. ipv4-addresses will be put
115 * here left-aligned */
118 * The source-port of this connection
124 * This struct is saved into {tcp,udp}_connections;
126 struct redirect_state
128 struct GNUNET_MESH_Tunnel *tunnel;
129 GNUNET_HashCode desc;
130 struct redirect_service *serv;
131 struct remote_addr remote;
133 struct GNUNET_CONTAINER_HeapNode* heap_node;
134 struct GNUNET_CONTAINER_MultiHashMap *hashmap;
135 GNUNET_HashCode hash;
137 enum { SERVICE, REMOTE } type;
140 * The source-address and -port of this connection
142 struct redirect_info redirect_info;
146 * This hashmaps saves interesting things about the configured services
148 static struct GNUNET_CONTAINER_MultiHashMap *udp_services;
149 static struct GNUNET_CONTAINER_MultiHashMap *tcp_services;
152 * Function that frees everything from a hashmap
155 free_iterate(void* cls __attribute__((unused)), const GNUNET_HashCode* hash __attribute__((unused)), void* value)
162 * Function scheduled as very last function, cleans up after us
165 cleanup(void* cls __attribute__((unused)), const struct GNUNET_SCHEDULER_TaskContext* tskctx) {
166 GNUNET_assert (0 != (tskctx->reason & GNUNET_SCHEDULER_REASON_SHUTDOWN));
168 GNUNET_CONTAINER_multihashmap_iterate(udp_connections,
172 GNUNET_CONTAINER_multihashmap_iterate(tcp_connections,
176 if (mesh_handle != NULL)
178 GNUNET_MESH_disconnect(mesh_handle);
184 collect_connections(void* cls, const struct GNUNET_SCHEDULER_TaskContext* tc) {
185 if ( (tc->reason & GNUNET_SCHEDULER_REASON_SHUTDOWN) != 0)
189 struct GNUNET_CONTAINER_Heap *heap = cls;
191 struct redirect_state* state = GNUNET_CONTAINER_heap_remove_root(heap);
193 /* This is free()ed memory! */
194 state->heap_node = NULL;
196 /* FIXME! GNUNET_MESH_close_tunnel(state->tunnel); */
198 GNUNET_CONTAINER_multihashmap_remove(state->hashmap, &state->hash, state);
204 hash_redirect_info(GNUNET_HashCode* hash, struct redirect_info* u_i, size_t addrlen)
207 /* the gnunet hashmap only uses the first sizeof(unsigned int) of the hash
209 * build the hash out of the last bytes of the address and the 2 bytes of
212 memcpy(hash, &u_i->pt, sizeof(u_i->pt));
213 memcpy(((unsigned char*)hash)+2, u_i->addr+(addrlen-(sizeof(unsigned int) - 2)), (sizeof(unsigned int) - 2));
214 memset(((unsigned char*)hash)+sizeof(unsigned int), 0, sizeof(GNUNET_HashCode) - sizeof(unsigned int));
218 * cls is the pointer to a GNUNET_MessageHeader that is
219 * followed by the service-descriptor and the udp-packet that should be sent;
222 send_udp_to_peer_notify_callback (void *cls, size_t size, void *buf)
224 struct GNUNET_MessageHeader *hdr = cls;
225 GNUNET_assert (size >= ntohs (hdr->size));
226 memcpy (buf, hdr, ntohs (hdr->size));
227 size = ntohs(hdr->size);
233 * @brief Handles an UDP-Packet received from the helper.
235 * @param udp A pointer to the Packet
236 * @param dadr The IP-Destination-address
237 * @param addrlen The length of the address
238 * @param version 4 or 6
241 udp_from_helper (struct udp_pkt *udp, unsigned char *dadr, size_t addrlen)
243 struct redirect_info u_i;
244 struct GNUNET_MESH_Tunnel *tunnel;
246 struct GNUNET_MessageHeader *msg;
248 memset (&u_i, 0, sizeof (struct redirect_info));
250 memcpy (&u_i.addr, dadr, addrlen);
254 /* get tunnel and service-descriptor from this */
255 GNUNET_HashCode hash;
256 hash_redirect_info(&hash, &u_i, addrlen);
258 struct redirect_state *state =
259 GNUNET_CONTAINER_multihashmap_get (udp_connections, &hash);
261 /* Mark this connection as freshly used */
262 GNUNET_CONTAINER_heap_update_cost (udp_connections_heap, state->heap_node,
263 GNUNET_TIME_absolute_get ().abs_value);
265 tunnel = state->tunnel;
267 if (state->type == SERVICE)
269 /* check if spt == serv.remote if yes: set spt = serv.myport ("nat") */
270 if (ntohs (udp->spt) == state->serv->remote_port)
272 udp->spt = htons (state->serv->my_port);
276 /* otherwise the answer came from a different port (tftp does this)
277 * add this new port to the list of all services, so that the packets
278 * coming back from the client to this new port will be routed correctly
280 struct redirect_service *serv =
281 GNUNET_malloc (sizeof (struct redirect_service));
282 memcpy (serv, state->serv, sizeof (struct redirect_service));
283 serv->my_port = ntohs (udp->spt);
284 serv->remote_port = ntohs (udp->spt);
285 uint16_t *desc = alloca (sizeof (GNUNET_HashCode) + 2);
286 memcpy ((GNUNET_HashCode *) (desc + 1), &state->desc,
287 sizeof (GNUNET_HashCode));
288 *desc = ntohs (udp->spt);
289 GNUNET_assert (GNUNET_OK ==
290 GNUNET_CONTAINER_multihashmap_put (udp_services,
291 (GNUNET_HashCode*)desc, serv,
292 GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY));
298 /* send udp-packet back */
300 sizeof (struct GNUNET_MessageHeader) + sizeof (GNUNET_HashCode) +
302 msg = GNUNET_malloc (len);
303 msg->size = htons (len);
304 msg->type = htons (state->type == SERVICE ? GNUNET_MESSAGE_TYPE_SERVICE_UDP_BACK : GNUNET_MESSAGE_TYPE_REMOTE_UDP_BACK);
305 GNUNET_HashCode *desc = (GNUNET_HashCode *) (msg + 1);
306 if (state->type == SERVICE)
307 memcpy (desc, &state->desc, sizeof (GNUNET_HashCode));
309 memcpy (desc, &state->remote, sizeof (struct remote_addr));
310 void *_udp = desc + 1;
311 memcpy (_udp, udp, ntohs (udp->len));
313 GNUNET_MESH_notify_transmit_ready (tunnel,
316 GNUNET_TIME_relative_divide
317 (GNUNET_CONSTANTS_MAX_CORK_DELAY, 2),
318 (const struct GNUNET_PeerIdentity *)
320 send_udp_to_peer_notify_callback, msg);
324 * @brief Handles a TCP-Packet received from the helper.
326 * @param tcp A pointer to the Packet
327 * @param dadr The IP-Destination-address
328 * @param addrlen The length of the address
329 * @param version 4 or 6
330 * @param pktlen the length of the packet, including its header
333 tcp_from_helper (struct tcp_pkt *tcp, unsigned char *dadr, size_t addrlen,
336 struct redirect_info u_i;
337 struct GNUNET_MESH_Tunnel *tunnel;
339 struct GNUNET_MessageHeader *msg;
341 memset (&u_i, 0, sizeof (struct redirect_info));
343 memcpy (&u_i.addr, dadr, addrlen);
346 /* get tunnel and service-descriptor from this */
347 GNUNET_HashCode hash;
348 hash_redirect_info(&hash, &u_i, addrlen);
350 struct redirect_state *state =
351 GNUNET_CONTAINER_multihashmap_get (tcp_connections, &hash);
353 if (state == NULL) return;
355 /* Mark this connection as freshly used */
356 GNUNET_CONTAINER_heap_update_cost (tcp_connections_heap, state->heap_node,
357 GNUNET_TIME_absolute_get ().abs_value);
359 tunnel = state->tunnel;
361 if (state->type == SERVICE)
363 /* check if spt == serv.remote if yes: set spt = serv.myport ("nat") */
364 if (ntohs (tcp->spt) == state->serv->remote_port)
366 tcp->spt = htons (state->serv->my_port);
370 // This is an illegal packet.
375 /* send tcp-packet back */
377 sizeof (struct GNUNET_MessageHeader) + sizeof (GNUNET_HashCode) + pktlen;
378 GNUNET_log(GNUNET_ERROR_TYPE_DEBUG, "len: %d\n", pktlen);
379 msg = GNUNET_malloc (len);
380 msg->size = htons (len);
381 msg->type = htons (state->type == SERVICE ? GNUNET_MESSAGE_TYPE_SERVICE_TCP_BACK : GNUNET_MESSAGE_TYPE_REMOTE_TCP_BACK);
382 GNUNET_HashCode *desc = (GNUNET_HashCode *) (msg + 1);
383 if (state->type == SERVICE)
384 memcpy (desc, &state->desc, sizeof (GNUNET_HashCode));
386 memcpy (desc, &state->remote, sizeof (struct remote_addr));
387 void *_tcp = desc + 1;
388 memcpy (_tcp, tcp, pktlen);
390 GNUNET_MESH_notify_transmit_ready (tunnel,
393 GNUNET_TIME_relative_divide
394 (GNUNET_CONSTANTS_MAX_CORK_DELAY, 2),
395 (const struct GNUNET_PeerIdentity *)NULL,
396 len, send_udp_to_peer_notify_callback,
402 * Receive packets from the helper-process
405 message_token (void *cls __attribute__((unused)),
406 void *client __attribute__((unused)), const struct GNUNET_MessageHeader *message)
408 GNUNET_assert (ntohs (message->type) == GNUNET_MESSAGE_TYPE_VPN_HELPER);
410 struct tun_pkt *pkt_tun = (struct tun_pkt *) message;
412 /* ethertype is ipv6 */
413 if (ntohs (pkt_tun->tun.type) == 0x86dd)
415 struct ip6_pkt *pkt6 = (struct ip6_pkt *) pkt_tun;
416 if (0x11 == pkt6->ip6_hdr.nxthdr)
417 udp_from_helper (&((struct ip6_udp *) pkt6)->udp_hdr,
418 (unsigned char *) &pkt6->ip6_hdr.dadr, 16);
419 else if (0x06 == pkt6->ip6_hdr.nxthdr)
420 tcp_from_helper (&((struct ip6_tcp *) pkt6)->tcp_hdr,
421 (unsigned char *) &pkt6->ip6_hdr.dadr, 16,
422 ntohs (pkt6->ip6_hdr.paylgth));
424 else if (ntohs (pkt_tun->tun.type) == 0x0800)
426 struct ip_pkt *pkt4 = (struct ip_pkt *) pkt_tun;
427 uint32_t tmp = pkt4->ip_hdr.dadr;
428 if (0x11 == pkt4->ip_hdr.proto)
429 udp_from_helper (&((struct ip_udp *) pkt4)->udp_hdr,
430 (unsigned char *) &tmp, 4);
431 else if (0x06 == pkt4->ip_hdr.proto)
433 size_t pktlen = ntohs(pkt4->ip_hdr.tot_lngth);
434 GNUNET_log(GNUNET_ERROR_TYPE_DEBUG, "tot: %d\n", pktlen);
435 pktlen -= 4*pkt4->ip_hdr.hdr_lngth;
436 GNUNET_log(GNUNET_ERROR_TYPE_DEBUG, "-hdr: %d\n", pktlen);
437 tcp_from_helper (&((struct ip_tcp *) pkt4)->tcp_hdr,
438 (unsigned char *) &tmp, 4, pktlen);
448 * Reads the configuration servicecfg and populates udp_services
451 * @param section name of section in config, equal to hostname
452 * @param option type of redirect
453 * @param value specification of services, format is
454 * "OFFERED-PORT:HOSTNAME:HOST-PORT" (SPACE <more of those>)*
457 read_service_conf (void *cls __attribute__((unused)), const char *section)
459 if ((strlen(section) < 8) || (0 != strcmp (".gnunet.", section + (strlen(section) - 8))))
462 GNUNET_log(GNUNET_ERROR_TYPE_DEBUG, "Parsing dns-name %d %s %s\n", strlen(section), section, section + (strlen(section) - 8));
468 uint16_t *desc = alloca (sizeof (GNUNET_HashCode) + 2);
469 GNUNET_CRYPTO_hash (section, strlen (section) + 1,
470 (GNUNET_HashCode *) (desc + 1));
479 if (proto == UDP && (GNUNET_OK != GNUNET_CONFIGURATION_get_value_string(cfg, section, "UDP_REDIRECTS", &cpy)))
481 else if (proto == TCP && (GNUNET_OK != GNUNET_CONFIGURATION_get_value_string(cfg, section, "TCP_REDIRECTS", &cpy)))
484 for (redirect = strtok (cpy, " "); redirect != NULL; redirect = strtok
487 if (NULL == (hostname = strstr (redirect, ":")))
489 GNUNET_log (GNUNET_ERROR_TYPE_WARNING, "Warning: option %s is not formatted correctly!\n",
495 if (NULL == (hostport = strstr (hostname, ":")))
497 GNUNET_log (GNUNET_ERROR_TYPE_WARNING, "Warning: option %s is not formatted correctly!\n",
504 int local_port = atoi (redirect);
505 if (!((local_port > 0) && (local_port < 65536)))
506 GNUNET_log (GNUNET_ERROR_TYPE_WARNING, "Warning: %s is not a correct port.",
511 struct redirect_service *serv =
512 GNUNET_malloc (sizeof (struct redirect_service));
513 memset (serv, 0, sizeof (struct redirect_service));
514 serv->my_port = local_port;
516 if (0 == strcmp ("localhost4", hostname))
521 GNUNET_assert (GNUNET_OK ==
522 GNUNET_CONFIGURATION_get_value_string (cfg,
527 inet_pton (AF_INET, ip4addr,
528 serv->v4.ip4address));
529 GNUNET_free (ip4addr);
531 else if (0 == strcmp ("localhost6", hostname))
536 GNUNET_assert (GNUNET_OK ==
537 GNUNET_CONFIGURATION_get_value_string (cfg,
542 inet_pton (AF_INET6, ip6addr,
543 serv->v6.ip6address));
544 GNUNET_free (ip6addr);
548 // TODO Lookup, yadayadayada
551 serv->remote_port = atoi (hostport);
553 GNUNET_assert (GNUNET_OK ==
554 GNUNET_CONTAINER_multihashmap_put (udp_services,
555 (GNUNET_HashCode*)desc, serv,
556 GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY));
558 GNUNET_assert (GNUNET_OK ==
559 GNUNET_CONTAINER_multihashmap_put (tcp_services,
560 (GNUNET_HashCode*)desc, serv,
561 GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY));
566 proto = (proto == UDP) ? TCP : UDP;
568 while (proto != UDP);
572 * Start the helper-process
574 * If cls != NULL it is assumed that this function is called as a result of a dying
575 * helper. cls is then taken as handle to the old helper and is cleaned up.
578 start_helper_and_schedule(void *cls,
579 const struct GNUNET_SCHEDULER_TaskContext *tc) {
580 if (0 != (tc->reason & GNUNET_SCHEDULER_REASON_SHUTDOWN))
593 if (GNUNET_SYSERR == GNUNET_CONFIGURATION_get_value_string(cfg, "exit", "IFNAME", &ifname))
595 GNUNET_log(GNUNET_ERROR_TYPE_ERROR, "No entry 'IFNAME' in configuration!\n");
599 if (GNUNET_SYSERR == GNUNET_CONFIGURATION_get_value_string(cfg, "exit", "IPV6ADDR", &ipv6addr))
601 GNUNET_log(GNUNET_ERROR_TYPE_ERROR, "No entry 'IPV6ADDR' in configuration!\n");
605 if (GNUNET_SYSERR == GNUNET_CONFIGURATION_get_value_string(cfg, "exit", "IPV6PREFIX", &ipv6prefix))
607 GNUNET_log(GNUNET_ERROR_TYPE_ERROR, "No entry 'IPV6PREFIX' in configuration!\n");
611 if (GNUNET_SYSERR == GNUNET_CONFIGURATION_get_value_string(cfg, "exit", "IPV4ADDR", &ipv4addr))
613 GNUNET_log(GNUNET_ERROR_TYPE_ERROR, "No entry 'IPV4ADDR' in configuration!\n");
617 if (GNUNET_SYSERR == GNUNET_CONFIGURATION_get_value_string(cfg, "exit", "IPV4MASK", &ipv4mask))
619 GNUNET_log(GNUNET_ERROR_TYPE_ERROR, "No entry 'IPV4MASK' in configuration!\n");
624 * Messages get passed to the function message_token
625 * When the helper dies, this function will be called again with the
626 * helper_handle as cls.
628 helper_handle = start_helper(ifname,
634 start_helper_and_schedule,
638 GNUNET_free(ipv6addr);
639 GNUNET_free(ipv6prefix);
640 GNUNET_free(ipv4addr);
641 GNUNET_free(ipv4mask);
646 prepare_ipv4_packet (ssize_t len, ssize_t pktlen, void *payload,
647 uint16_t protocol, void *ipaddress, void *tunnel,
648 struct redirect_state *state, struct ip_pkt *pkt4)
652 pkt4->shdr.type = htons (GNUNET_MESSAGE_TYPE_VPN_HELPER);
653 pkt4->shdr.size = htons (len);
655 pkt4->tun.type = htons (0x0800);
657 memcpy (&pkt4->data, payload, pktlen);
659 pkt4->ip_hdr.version = 4;
660 pkt4->ip_hdr.hdr_lngth = 5;
661 pkt4->ip_hdr.diff_serv = 0;
662 pkt4->ip_hdr.tot_lngth = htons (20 + pktlen);
663 pkt4->ip_hdr.ident = 0;
664 pkt4->ip_hdr.flags = 0;
665 pkt4->ip_hdr.frag_off = 0;
666 pkt4->ip_hdr.ttl = 255;
667 pkt4->ip_hdr.proto = protocol;
668 pkt4->ip_hdr.chks = 0; /* Will be calculated later */
670 memcpy (&tmp, ipaddress, 4);
671 pkt4->ip_hdr.dadr = tmp;
673 /* Generate a new src-address */
676 GNUNET_assert (GNUNET_OK ==
677 GNUNET_CONFIGURATION_get_value_string (cfg, "exit",
680 GNUNET_assert (GNUNET_OK ==
681 GNUNET_CONFIGURATION_get_value_string (cfg, "exit",
684 inet_pton (AF_INET, ipv4addr, &tmp);
685 inet_pton (AF_INET, ipv4mask, &tmp2);
686 GNUNET_free (ipv4addr);
687 GNUNET_free (ipv4mask);
689 /* This should be a noop */
692 tmp |= ntohl (*((uint32_t *) tunnel)) & (~tmp2);
694 pkt4->ip_hdr.sadr = tmp;
696 memcpy (&state->redirect_info.addr, &tmp, 4);
697 if (0x11 == protocol)
699 struct ip_udp* pkt4_udp = (struct ip_udp*)pkt4;
700 state->redirect_info.pt = pkt4_udp->udp_hdr.spt;
702 pkt4_udp->udp_hdr.crc = 0; /* Optional for IPv4 */
704 else if (0x06 == protocol)
706 struct ip_tcp* pkt4_tcp = (struct ip_tcp*)pkt4;
707 state->redirect_info.pt = pkt4_tcp->tcp_hdr.spt;
709 pkt4_tcp->tcp_hdr.crc = 0;
711 tmp = pkt4->ip_hdr.sadr;
713 calculate_checksum_update (sum, (uint16_t *) & tmp, 4);
714 tmp = pkt4->ip_hdr.dadr;
716 calculate_checksum_update (sum, (uint16_t *) & tmp, 4);
718 tmp = (protocol << 16) | (0xffff & pktlen);
720 GNUNET_log(GNUNET_ERROR_TYPE_DEBUG, "line: %08x, %x \n", tmp, (0xffff & pktlen));
724 sum = calculate_checksum_update (sum, (uint16_t *) & tmp, 4);
727 calculate_checksum_update (sum, (uint16_t *) & pkt4_tcp->tcp_hdr, pktlen);
728 pkt4_tcp->tcp_hdr.crc = calculate_checksum_end (sum);
732 calculate_ip_checksum ((uint16_t *) & pkt4->ip_hdr, 5 * 4);
736 prepare_ipv6_packet (ssize_t len, ssize_t pktlen, void *payload,
737 uint16_t protocol, void *ipaddress, void *tunnel,
738 struct redirect_state *state, struct ip6_pkt *pkt6)
742 pkt6->shdr.type = htons (GNUNET_MESSAGE_TYPE_VPN_HELPER);
743 pkt6->shdr.size = htons (len);
746 pkt6->tun.type = htons (0x86dd);
748 memcpy (&pkt6->data, payload, pktlen);
750 pkt6->ip6_hdr.version = 6;
751 pkt6->ip6_hdr.nxthdr = protocol;
752 pkt6->ip6_hdr.paylgth = htons (pktlen);
753 pkt6->ip6_hdr.hoplmt = 64;
755 memcpy (pkt6->ip6_hdr.dadr, ipaddress, 16);
757 /* Generate a new src-address
758 * This takes as much from the address of the tunnel as fits into
761 unsigned long long ipv6prefix;
762 GNUNET_assert (GNUNET_OK ==
763 GNUNET_CONFIGURATION_get_value_string (cfg, "exit",
766 GNUNET_assert (GNUNET_OK ==
767 GNUNET_CONFIGURATION_get_value_number (cfg, "exit",
770 GNUNET_assert (ipv6prefix < 127);
771 ipv6prefix = (ipv6prefix + 7) / 8;
773 inet_pton (AF_INET6, ipv6addr, &pkt6->ip6_hdr.sadr);
774 GNUNET_free (ipv6addr);
776 if (ipv6prefix < (16 - sizeof (void *)))
777 ipv6prefix = 16 - sizeof (void *);
779 unsigned int offset = ipv6prefix - (16 - sizeof (void *));
780 memcpy ((((char *) &pkt6->ip6_hdr.sadr)) + ipv6prefix,
781 ((char *) &tunnel) + offset, 16 - ipv6prefix);
783 /* copy the needed information into the state */
784 memcpy (&state->redirect_info.addr, &pkt6->ip6_hdr.sadr, 16);
786 if (0x11 == protocol)
788 struct ip6_udp* pkt6_udp = (struct ip6_udp*)pkt6;
789 state->redirect_info.pt = pkt6_udp->udp_hdr.spt;
791 pkt6_udp->udp_hdr.crc = 0;
794 calculate_checksum_update (sum, (uint16_t *) & pkt6_udp->ip6_hdr.sadr, 16);
796 calculate_checksum_update (sum, (uint16_t *) & pkt6_udp->ip6_hdr.dadr, 16);
797 tmp = (htons (pktlen) & 0xffff);
798 sum = calculate_checksum_update (sum, (uint16_t *) & tmp, 4);
799 tmp = htons (((pkt6_udp->ip6_hdr.nxthdr & 0x00ff)));
800 sum = calculate_checksum_update (sum, (uint16_t *) & tmp, 4);
803 calculate_checksum_update (sum, (uint16_t *) & pkt6_udp->udp_hdr,
804 ntohs (pkt6_udp->udp_hdr.len));
805 pkt6_udp->udp_hdr.crc = calculate_checksum_end (sum);
807 else if (0x06 == protocol)
809 struct ip6_tcp* pkt6_tcp = (struct ip6_tcp*)pkt6;
810 state->redirect_info.pt = pkt6_tcp->tcp_hdr.spt;
812 pkt6_tcp->tcp_hdr.crc = 0;
815 calculate_checksum_update (sum, (uint16_t *) & pkt6->ip6_hdr.sadr, 16);
817 calculate_checksum_update (sum, (uint16_t *) & pkt6->ip6_hdr.dadr, 16);
819 sum = calculate_checksum_update (sum, (uint16_t *) & tmp, 4);
820 tmp = htonl (((pkt6->ip6_hdr.nxthdr & 0x000000ff)));
821 sum = calculate_checksum_update (sum, (uint16_t *) & tmp, 4);
824 calculate_checksum_update (sum, (uint16_t *) & pkt6_tcp->tcp_hdr,
825 ntohs (pkt6->ip6_hdr.paylgth));
826 pkt6_tcp->tcp_hdr.crc = calculate_checksum_end (sum);
831 * The messages are one GNUNET_HashCode for the service followed by a struct tcp_pkt
834 receive_tcp_service (void *cls __attribute__((unused)),
835 struct GNUNET_MESH_Tunnel *tunnel,
836 void **tunnel_ctx __attribute__((unused)),
837 const struct GNUNET_PeerIdentity *sender __attribute__((unused)),
838 const struct GNUNET_MessageHeader *message,
839 const struct GNUNET_TRANSPORT_ATS_Information *atsi __attribute__((unused)))
841 GNUNET_log (GNUNET_ERROR_TYPE_DEBUG, "Received TCP-Packet\n");
842 GNUNET_HashCode *desc = (GNUNET_HashCode *) (message + 1);
843 struct tcp_pkt *pkt = (struct tcp_pkt *) (desc + 1);
844 unsigned int pkt_len = ntohs (message->size) - sizeof (struct
845 GNUNET_MessageHeader)
846 - sizeof (GNUNET_HashCode);
848 /** Get the configuration from the services-hashmap.
850 * Which service is needed only depends on the service-descriptor and the
853 uint16_t *tcp_desc = alloca (sizeof (GNUNET_HashCode) + 2);
855 memcpy (tcp_desc + 1, desc, sizeof (GNUNET_HashCode));
856 *tcp_desc = ntohs (pkt->dpt);
857 struct redirect_service *serv =
858 GNUNET_CONTAINER_multihashmap_get (tcp_services, (GNUNET_HashCode*)tcp_desc);
861 GNUNET_log (GNUNET_ERROR_TYPE_INFO,
862 "No service found for TCP dpt %d!\n", *tcp_desc);
866 pkt->dpt = htons (serv->remote_port);
869 * At this point it would be possible to check against some kind of ACL.
875 /* Prepare the state.
876 * This will be saved in the hashmap, so that the receiving procedure knows
877 * through which tunnel this connection has to be routed.
879 struct redirect_state *state =
880 GNUNET_malloc (sizeof (struct redirect_state));
881 memset (state, 0, sizeof (struct redirect_state));
882 state->tunnel = tunnel;
884 state->type = SERVICE;
885 state->hashmap = tcp_connections;
886 memcpy (&state->desc, desc, sizeof (GNUNET_HashCode));
888 len = sizeof (struct GNUNET_MessageHeader) + sizeof (struct pkt_tun) +
889 sizeof (struct ip6_hdr) + pkt_len;
892 memset (buf, 0, len);
894 switch (serv->version)
897 prepare_ipv4_packet (len, pkt_len, pkt, 0x06, /* TCP */
898 &serv->v4.ip4address,
899 tunnel, state, (struct ip_pkt *) buf);
902 prepare_ipv6_packet (len, pkt_len, pkt, 0x06, /* TCP */
903 &serv->v6.ip6address,
904 tunnel, state, (struct ip6_pkt *) buf);
912 hash_redirect_info(&state->hash, &state->redirect_info, serv->version == 4 ? 4 : 16);
915 GNUNET_CONTAINER_multihashmap_contains (tcp_connections, &state->hash))
917 GNUNET_CONTAINER_multihashmap_put (tcp_connections, &state->hash, state,
918 GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY);
921 GNUNET_CONTAINER_heap_insert (tcp_connections_heap, state,
922 GNUNET_TIME_absolute_get ().abs_value);
924 if (GNUNET_CONTAINER_heap_get_size(tcp_connections_heap) > max_tcp_connections)
925 GNUNET_SCHEDULER_add_now(collect_connections, tcp_connections_heap);
930 (void) GNUNET_DISK_file_write (helper_handle->fh_to_helper, buf, len);
935 receive_tcp_remote (void *cls __attribute__((unused)),
936 struct GNUNET_MESH_Tunnel *tunnel,
937 void **tunnel_ctx __attribute__((unused)),
938 const struct GNUNET_PeerIdentity *sender __attribute__((unused)),
939 const struct GNUNET_MessageHeader *message,
940 const struct GNUNET_TRANSPORT_ATS_Information *atsi __attribute__((unused)))
942 GNUNET_HashCode *desc = (GNUNET_HashCode *) (message + 1);
943 struct udp_pkt *pkt = (struct udp_pkt *) (desc + 1);
944 struct remote_addr *s = (struct remote_addr *) desc;
947 unsigned int pkt_len = ntohs (message->size) - sizeof (struct GNUNET_MessageHeader) - sizeof (GNUNET_HashCode);
949 struct redirect_state *state =
950 GNUNET_malloc (sizeof (struct redirect_state));
951 memset (state, 0, sizeof (struct redirect_state));
952 state->tunnel = tunnel;
953 state->type = REMOTE;
954 state->hashmap = tcp_connections;
955 memcpy (&state->remote, s, sizeof (struct remote_addr));
957 len = sizeof (struct GNUNET_MessageHeader) + sizeof (struct pkt_tun) +
958 sizeof (struct ip6_hdr) + pkt_len;
961 memset (buf, 0, len);
966 prepare_ipv4_packet (len, ntohs (pkt->len), pkt, 0x06, /* TCP */
967 &s->addr, tunnel, state, (struct ip_pkt *) buf);
970 prepare_ipv6_packet (len, ntohs (pkt->len), pkt, 0x06, /* TCP */
971 &s->addr, tunnel, state, (struct ip6_pkt *) buf);
978 hash_redirect_info (&state->hash, &state->redirect_info, s->addrlen);
981 GNUNET_CONTAINER_multihashmap_contains (udp_connections, &state->hash))
983 GNUNET_CONTAINER_multihashmap_put (udp_connections, &state->hash, state,
984 GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY);
987 GNUNET_CONTAINER_heap_insert (udp_connections_heap, state,
988 GNUNET_TIME_absolute_get ().abs_value);
990 if (GNUNET_CONTAINER_heap_get_size (udp_connections_heap) >
992 GNUNET_SCHEDULER_add_now (collect_connections, udp_connections_heap);
997 (void) GNUNET_DISK_file_write (helper_handle->fh_to_helper, buf, len);
1003 receive_udp_remote (void *cls __attribute__((unused)),
1004 struct GNUNET_MESH_Tunnel *tunnel,
1005 void **tunnel_ctx __attribute__((unused)),
1006 const struct GNUNET_PeerIdentity *sender __attribute__((unused)),
1007 const struct GNUNET_MessageHeader *message,
1008 const struct GNUNET_TRANSPORT_ATS_Information *atsi __attribute__((unused)))
1010 GNUNET_HashCode *desc = (GNUNET_HashCode *) (message + 1);
1011 struct udp_pkt *pkt = (struct udp_pkt *) (desc + 1);
1012 struct remote_addr *s = (struct remote_addr *) desc;
1016 GNUNET_assert (ntohs (pkt->len) ==
1017 ntohs (message->size) -
1018 sizeof (struct GNUNET_MessageHeader) -
1019 sizeof (GNUNET_HashCode));
1021 /* Prepare the state.
1022 * This will be saved in the hashmap, so that the receiving procedure knows
1023 * through which tunnel this connection has to be routed.
1025 struct redirect_state *state =
1026 GNUNET_malloc (sizeof (struct redirect_state));
1027 memset (state, 0, sizeof (struct redirect_state));
1028 state->tunnel = tunnel;
1029 state->hashmap = udp_connections;
1030 state->type = REMOTE;
1031 memcpy (&state->remote, s, sizeof (struct remote_addr));
1033 len = sizeof (struct GNUNET_MessageHeader) + sizeof (struct pkt_tun) +
1034 sizeof (struct ip6_hdr) + ntohs (pkt->len);
1037 memset (buf, 0, len);
1042 prepare_ipv4_packet (len, ntohs (pkt->len), pkt, 0x11, /* UDP */
1043 &s->addr, tunnel, state, (struct ip_pkt *) buf);
1046 prepare_ipv6_packet (len, ntohs (pkt->len), pkt, 0x11, /* UDP */
1047 &s->addr, tunnel, state, (struct ip6_pkt *) buf);
1054 hash_redirect_info (&state->hash, &state->redirect_info, s->addrlen);
1057 GNUNET_CONTAINER_multihashmap_contains (udp_connections, &state->hash))
1059 GNUNET_CONTAINER_multihashmap_put (udp_connections, &state->hash, state,
1060 GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY);
1063 GNUNET_CONTAINER_heap_insert (udp_connections_heap, state,
1064 GNUNET_TIME_absolute_get ().abs_value);
1066 if (GNUNET_CONTAINER_heap_get_size (udp_connections_heap) >
1067 max_udp_connections)
1068 GNUNET_SCHEDULER_add_now (collect_connections, udp_connections_heap);
1071 GNUNET_free (state);
1073 (void) GNUNET_DISK_file_write (helper_handle->fh_to_helper, buf, len);
1078 * The messages are one GNUNET_HashCode for the service, followed by a struct udp_pkt
1081 receive_udp_service (void *cls __attribute__((unused)),
1082 struct GNUNET_MESH_Tunnel *tunnel,
1083 void **tunnel_ctx __attribute__((unused)),
1084 const struct GNUNET_PeerIdentity *sender __attribute__((unused)),
1085 const struct GNUNET_MessageHeader *message,
1086 const struct GNUNET_TRANSPORT_ATS_Information *atsi __attribute__((unused)))
1088 GNUNET_HashCode *desc = (GNUNET_HashCode *) (message + 1);
1089 struct udp_pkt *pkt = (struct udp_pkt *) (desc + 1);
1091 GNUNET_assert (ntohs (pkt->len) ==
1092 ntohs (message->size) -
1093 sizeof (struct GNUNET_MessageHeader) -
1094 sizeof (GNUNET_HashCode));
1096 /* Get the configuration from the hashmap */
1097 uint16_t *udp_desc = alloca (sizeof (GNUNET_HashCode) + 2);
1098 memcpy (udp_desc + 1, desc, sizeof (GNUNET_HashCode));
1099 *udp_desc = ntohs (pkt->dpt);
1100 struct redirect_service *serv =
1101 GNUNET_CONTAINER_multihashmap_get (udp_services, (GNUNET_HashCode*)udp_desc);
1104 GNUNET_log (GNUNET_ERROR_TYPE_INFO,
1105 "No service found for UDP dpt %d!\n", *udp_desc);
1109 pkt->dpt = htons (serv->remote_port);
1112 * At this point it would be possible to check against some kind of ACL.
1118 /* Prepare the state.
1119 * This will be saved in the hashmap, so that the receiving procedure knows
1120 * through which tunnel this connection has to be routed.
1122 struct redirect_state *state =
1123 GNUNET_malloc (sizeof (struct redirect_state));
1124 memset (state, 0, sizeof (struct redirect_state));
1125 state->tunnel = tunnel;
1127 state->type = SERVICE;
1128 state->hashmap = udp_connections;
1129 memcpy (&state->desc, desc, sizeof (GNUNET_HashCode));
1131 len = sizeof (struct GNUNET_MessageHeader) + sizeof (struct pkt_tun) +
1132 sizeof (struct ip6_hdr) + ntohs (pkt->len);
1135 memset (buf, 0, len);
1137 switch (serv->version)
1140 prepare_ipv4_packet (len, ntohs (pkt->len), pkt, 0x11, /* UDP */
1141 &serv->v4.ip4address,
1142 tunnel, state, (struct ip_pkt *) buf);
1145 prepare_ipv6_packet (len, ntohs (pkt->len), pkt, 0x11, /* UDP */
1146 &serv->v6.ip6address,
1147 tunnel, state, (struct ip6_pkt *) buf);
1155 hash_redirect_info(&state->hash, &state->redirect_info, serv->version == 4 ? 4 : 16);
1158 GNUNET_CONTAINER_multihashmap_contains (udp_connections, &state->hash))
1160 GNUNET_CONTAINER_multihashmap_put (udp_connections, &state->hash, state,
1161 GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY);
1164 GNUNET_CONTAINER_heap_insert (udp_connections_heap, state,
1165 GNUNET_TIME_absolute_get ().abs_value);
1167 if (GNUNET_CONTAINER_heap_get_size(udp_connections_heap) > max_udp_connections)
1168 GNUNET_SCHEDULER_add_now(collect_connections, udp_connections_heap);
1171 GNUNET_free (state);
1173 (void) GNUNET_DISK_file_write (helper_handle->fh_to_helper, buf, len);
1181 int handler_idx, app_idx;
1183 udp = GNUNET_CONFIGURATION_get_value_yesno(cfg, "exit", "ENABLE_UDP");
1184 tcp = GNUNET_CONFIGURATION_get_value_yesno(cfg, "exit", "ENABLE_TCP");
1186 static struct GNUNET_MESH_MessageHandler handlers[] = {
1187 {receive_udp_service, GNUNET_MESSAGE_TYPE_SERVICE_UDP, 0},
1188 {receive_tcp_service, GNUNET_MESSAGE_TYPE_SERVICE_TCP, 0},
1194 static GNUNET_MESH_ApplicationType apptypes[] =
1196 GNUNET_APPLICATION_TYPE_END,
1197 GNUNET_APPLICATION_TYPE_END,
1198 GNUNET_APPLICATION_TYPE_END
1204 if (GNUNET_YES == udp)
1206 handlers[handler_idx].callback = receive_udp_remote;
1207 handlers[handler_idx].expected_size = 0;
1208 handlers[handler_idx].type = GNUNET_MESSAGE_TYPE_REMOTE_UDP;
1209 apptypes[app_idx] = GNUNET_APPLICATION_TYPE_INTERNET_UDP_GATEWAY;
1214 if (GNUNET_YES == tcp)
1216 handlers[handler_idx].callback = receive_tcp_remote;
1217 handlers[handler_idx].expected_size = 0;
1218 handlers[handler_idx].type = GNUNET_MESSAGE_TYPE_REMOTE_TCP;
1219 apptypes[app_idx] = GNUNET_APPLICATION_TYPE_INTERNET_TCP_GATEWAY;
1224 mesh_handle = GNUNET_MESH_connect (cfg, NULL, NULL, handlers, apptypes);
1228 * @brief Main function that will be run by the scheduler.
1230 * @param cls closure
1231 * @param args remaining command-line arguments
1232 * @param cfgfile name of the configuration file used (for saving, can be NULL!)
1233 * @param cfg_ configuration
1237 char *const *args __attribute__((unused)),
1238 const char *cfgfile __attribute__((unused)), const struct GNUNET_CONFIGURATION_Handle *cfg_)
1244 udp_connections = GNUNET_CONTAINER_multihashmap_create (65536);
1245 udp_connections_heap =
1246 GNUNET_CONTAINER_heap_create (GNUNET_CONTAINER_HEAP_ORDER_MIN);
1247 tcp_connections = GNUNET_CONTAINER_multihashmap_create (65536);
1248 tcp_connections_heap =
1249 GNUNET_CONTAINER_heap_create (GNUNET_CONTAINER_HEAP_ORDER_MIN);
1250 udp_services = GNUNET_CONTAINER_multihashmap_create (65536);
1251 tcp_services = GNUNET_CONTAINER_multihashmap_create (65536);
1253 GNUNET_CONFIGURATION_get_value_number (cfg, "exit", "MAX_UDP_CONNECTIONS",
1254 &max_udp_connections);
1255 GNUNET_CONFIGURATION_get_value_number (cfg, "exit", "MAX_TCP_CONNECTIONS",
1256 &max_tcp_connections);
1258 GNUNET_CONFIGURATION_iterate_sections (cfg, read_service_conf, NULL);
1260 GNUNET_SCHEDULER_add_now (start_helper_and_schedule, NULL);
1261 GNUNET_SCHEDULER_add_delayed (GNUNET_TIME_UNIT_FOREVER_REL, &cleanup, cls);
1265 * The main function to obtain template from gnunetd.
1267 * @param argc number of arguments from the command line
1268 * @param argv command line arguments
1269 * @return 0 ok, 1 on error
1272 main (int argc, char *const *argv) {
1273 static const struct GNUNET_GETOPT_CommandLineOption options[] = {
1274 GNUNET_GETOPT_OPTION_END
1277 return (GNUNET_OK ==
1278 GNUNET_PROGRAM_run (argc,
1281 gettext_noop ("help text"),
1282 options, &run, NULL)) ? ret : 1;
1285 /* end of gnunet-daemon-exit.c */