/* * ZeroTier One - Network Virtualization Everywhere * Copyright (C) 2011-2016 ZeroTier, Inc. https://www.zerotier.com/ * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . */ #ifndef ZT_BINDER_HPP #define ZT_BINDER_HPP #include "../node/Constants.hpp" #include #include #include #include #ifdef __WINDOWS__ #include #include #include #include #include #else #include #include #include #include #include #endif #include #include #include #include #include "../node/InetAddress.hpp" #include "../node/Mutex.hpp" #include "Phy.hpp" namespace ZeroTier { /** * Enumerates local devices and binds ports to all potential ZeroTier path endpoints * * This replaces binding to wildcard (0.0.0.0 and ::0) with explicit binding * as part of the path to default gateway support. Under the hood it uses * different queries on different OSes to enumerate devices, and also exposes * device enumeration and endpoint IP data for use elsewhere. * * On OSes that do not support local port enumeration or where this is not * meaningful, this degrades to binding to wildcard. */ template class Binder { private: struct _Binding { PhySocket *udpSock; PhySocket *tcpListenSock; InetAddress address; }; public: /** * @param phy Physical interface to use -- be sure not to delete phy before binder * @param port Port to bind to on all interfaces (TCP and UDP) */ Binder(typename Phy &phy,unsigned int port) : _phy(phy), _port(port) { } /** * Closes all bound ports -- but NOT accepted connections on those ports */ ~Binder() { } /** * Scan local devices and addresses and rebind TCP and UDP * * This should be called after wake from sleep, on detected network device * changes, on startup, or periodically (e.g. every 30-60s). * * @param ignoreInterfacesByName Ignore these interfaces by name * @param ignoreInterfacesByNamePrefix Ignore these interfaces by name-prefix (starts-with, e.g. zt ignores zt*) * @param ignoreInterfacesByAddress Ignore these interfaces by address */ void refresh(const std::vector &ignoreInterfacesByName,const std::vector &ignoreInterfacesByNamePrefix,const std::vector &ignoreInterfacesByAddress) { std::vector localIfAddrs; std::vector<_Binding> newBindings; const char *na,*nb; std::vector::const_iterator si; std::vector::const_iterator ii; std::vector<_Binding>::const_iterator bi; PhySocket *udps,*tcps; InetAddress ip; Mutex::Lock _l(_lock); #ifdef __WINDOWS__ #else // not __WINDOWS__ struct ifaddrs *ifatbl = (struct ifaddrs *)0; struct ifaddrs *ifa; if ((getifaddrs(&ifatbl) == 0)&&(ifatbl)) { ifa = ifatbl; while (ifa) { if ((ifa->ifa_name)&&(ifa->ifa_addr)) { for(si=ignoreInterfacesByName.begin();si!=ignoreInterfacesByName.end();++si) { if (*si == ifa->ifa_name) goto binder_hpp_ignore_interface; } for(si=ignoreInterfacesByNamePrefix.begin();si!=ignoreInterfacesByNamePrefix.end();++si) { na = si->c_str(); nb = ifa->ifa_name; while (*nb) { if (*(na++) != *(nb++)) goto binder_hpp_interface_prefixes_dont_match; } goto binder_hpp_ignore_interface; } binder_hpp_interface_prefixes_dont_match: ip = *(ifa->ifa_addr); switch(ip.ipScope()) { default: break; case InetAddress::IP_SCOPE_PSEUDOPRIVATE: case InetAddress::IP_SCOPE_GLOBAL: //case InetAddress::IP_SCOPE_LINK_LOCAL: case InetAddress::IP_SCOPE_SHARED: case InetAddress::IP_SCOPE_PRIVATE: for(ii=ignoreInterfacesByAddress.begin();ii!=ignoreInterfacesByAddress.end();++ii) { if (ip.ipsEqual(*ii)) goto binder_hpp_ignore_interface; } ip.setPort(_port); localIfAddrs.push(ip); break; } } binder_hpp_ignore_interface: ifa = ifa->ifa_next; } } freeifaddrs(ifatbl); #endif // Default to binding to wildcard if we can't enumerate addresses if (localIfAddrs.size() == 0) { localIfAddrs.push_back(InetAddress((uint32_t)0,_port)); localIfAddrs.push_back(InetAddress((const void *)"\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",16,_port)); } // Close any bindings to anything that doesn't exist anymore for(bi=_bindings.begin();bi!=_bindings.end();++bi) { if (std::find(localIfAddrs.begin(),localIfAddrs.end(),bi->address) == localIfAddrs.end()) { _phy.close(bi->udpSock,false); _phy.close(bi->tcpListenSock,false); } } for(ii=localIfAddrs.begin();ii!=localIfAddrs.end();++ii) { // Copy over bindings that still are valid for(bi=_bindings.begin();bi!=_bindings.end();++bi) { if (bi->address == *ii) { newBindings.push_back(*bi); break; } } // Add new bindings if (bi == _bindings.end()) { udps = _phy.udpBind(reinterpret_cast(&ii),(void *)0,131072); if (udps) { tcps = _phy.tcpListen(reinterpret_cast(&ii),(void *)0); if (tcps) { newBindings.push_back(_Binding()); newBindings.back().udpSock = udps; newBindings.back().tcpListenSock = tcps; newBindings.back().address = *ii; } else { _phy.close(udps,false); } } } } // Swapping pointers and then letting the old one fall out of scope is faster than copying again _bindings.swap(newBindings); } /** * Send a UDP packet from the specified local interface, or all * * Unfortunately even by examining the routing table there is no ultimately * robust way to tell where we might reach another host that works in all * environments. As a result, we send packets with null (wildcard) local * addresses from *every* bound interface. * * These are typically initial HELLOs, path probes, etc., since normal * conversations will have a local endpoint address. So the cost is low and * if the peer is not reachable via that route then the packet will go * nowhere and nothing will happen. * * It will of course only send via interface bindings of the same socket * family. No point in sending V4 via V6 or vice versa. * * In any case on most hosts there's only one or two interfaces that we * will use, so none of this is particularly costly. * * @param local Local interface address or null address for 'all' * @param remote Remote address * @param data Data to send * @param len Length of data */ inline bool udpSend(const InetAddress &local,const InetAddress &remote,const void *data,unsigned int len) const { if (local) { for(std::vector<_Binding>::const_iterator i(_bindings.begin());i!=_bindings.end();++i) { if (i->address == local) return _phy.udpSend(i->udpSock,reinterpret_cast(&remote),data,len); } return false; } else { bool result = false; for(std::vector<_Binding>::const_iterator i(_bindings.begin());i!=_bindings.end();++i) { if (i->address.ss_family == remote.ss_family) result |= _phy.udpSend(i->udpSock,reinterpret_cast(&remote),data,len); } return result; } } private: std::vector<_Binding> _bindings; typename Phy &_phy; unsigned int _port; Mutex _lock; }; } // namespace ZeroTier #endif